This document covers the use of therisobotanics.cloud, orders of extracts, and communication messages. Linked external websites have their own policies and are not bound by this notice.

The data controller is Θέρισο Βοτανικά Ι.Κ.Ε., Σφακίων 12, 731 34 Χανιά, Ελλάδα. For any request regarding your records, email [email protected] or call +30 108 750 377.

Merchant

Θέρισο Βοτανικά Ι.Κ.Ε.

Registered address

Σφακίων 12, 731 34 Χανιά, Ελλάδα

Email

[email protected]

Phone

+30 108 750 377

We retain only the data necessary to fulfill each specific purpose.

3.1 Information you provide directly

Full name, shipping address, email, and phone number when ordering herbal products. The text of your inquiries or comments. Order details remain on file for fulfillment and for the statutory tax period. Messages are retained for up to 3 years from the last contact.

3.2 Payment and transaction data

Tracking number, cart items, charges, payment method, and dispatch progress. We do not store payment card details or online banking credentials on the website. Financial records are kept for the duration required by tax legislation.

3.3 Automatically collected information

IP address, web browser, device type, pages viewed, referring page, and access time via server logs and cookies. Server logs are maintained for 30 days, while aggregate statistics remain in the system for up to 14 months.

3.4 Marketing and advertising data

The link or promotional source from which you reached the store, helping us determine order origins. This record is kept for up to 90 days.

3.5 Data from third-party partners

Parcel tracking updates from the courier and payment confirmations from the bank, linked to your purchase.

3.6 Children

The store does not serve visitors under 18 years of age. We do not knowingly collect data from minors. A parent or guardian may request data deletion by contacting [email protected].

Full name, shipping address, email, and phone number are required so you can receive the parcel and stay updated on delivery. Without these, we cannot dispatch products. All other fields are optional.

• To prepare products, arrange dispatch, issue invoices, and manage any product returns or refunds.
• To respond to your inquiries and send parcel notifications via email or SMS.
• To maintain secure store operations, prevent fraudulent activity, and measure site traffic.
• For updates regarding herbal extracts, provided you have given your consent. An unsubscribe option is included in every message.
• To comply with legal obligations, such as retaining tax documentation.

We do not sell your personal data. It is shared exclusively with the partners listed below, who are contractually bound to follow our instructions.

6.1 Payment processing

The bank or payment service provider you select receives only the information needed to process and verify the transaction.

6.2 Shipping and fulfilment partners

The courier receives your full name, address, and phone number to deliver the parcel to your destination.

6.3 Service providers

Web hosting providers, email delivery platforms, and customer support software process data on our behalf.

6.4 Advertising and analytics partners

Analytics and advertising cookies operate only with your consent and transmit technical details to their providers, as described in our Cookie Policy.

6.5 Legal and regulatory disclosures

We disclose information when legally mandated or required to protect our rights, such as in the event of an order dispute.

6.6 Business transfers

If the business is transferred or merged, customer records pass to the new data controller under the exact same security standards.

Our partners may maintain servers outside Greece. In these cases, we apply an adequacy decision or standard contractual clauses to ensure equivalent security.

Under the General Data Protection Regulation (GDPR), you have data subject rights under Articles 15-22 GDPR.

8.1 Right to review, correct, delete, and transfer

You can request a copy of your data, correction of errors, deletion, restriction of use, or objection, as well as data transfer in a common digital format. You can also withdraw your consent without affecting prior lawful processing.

8.2 Marketing choices

Every newsletter includes an unsubscribe link. You can turn off analytics and advertising cookies at any time from the settings panel.

8.3 Exercising your rights

Send your request to [email protected]. We may need to verify your details, and we will reply within 30 days. You also have the right to report an issue to the competent data protection authority in Greece.

This website uses HTTPS encryption. Purchase details are stored on secure servers and are only accessible to personnel preparing or dispatching the preparations. Bank card details are never requested or stored here.

Order and invoice records are kept for as long as required by tax law and are then deleted. Contact messages are stored for up to 3 years from the last interaction. Server logs are deleted after 30 days, while aggregated analytics remain for up to 14 months. Consent for updates remains valid until you ask to unsubscribe.

Links to social media or banks lead to external websites. These services have their own privacy policies, and we are not responsible for their data management.

We update this text whenever the law or store operations change. The active version is always published on this page, with the date of the latest change at the top.