Who is responsible
cazy is responsible for personal data used to operate this store. Verified legal-entity and registration details will be published on our Business information page before live sales begin. Privacy questions can be sent to hello@cazy.gr.
Data we collect
Depending on how you use the store, we may collect your name, email, phone number, order contents, payment status, delivery country, city and locker, support messages, return information, and limited device or security data. Stripe processes payment details; BOX NOW processes delivery details.
Why we use it
- To take payment, fulfil and deliver your order.
- To send confirmations, tracking and service messages.
- To provide support, returns and legal guarantees.
- To prevent fraud and keep the store secure.
- To send marketing only where you have consented or where law permits it.
- To meet accounting, tax and legal obligations.
Legal bases and retention
We rely on performance of a contract, legal obligations, legitimate interests such as fraud prevention and service improvement, and consent where required. We keep information only as long as necessary for these purposes, including legally required accounting and tax periods, then delete or anonymise it.
Who receives data
We share only what is needed with service providers such as Stripe for payments, BOX NOW for delivery, Resend for transactional email, Convex for application data and Vercel for hosting. Providers must protect the data and act under appropriate terms. If data is transferred outside the EEA, appropriate safeguards must be used.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier processing. Contact us to exercise a right. You may also complain to the Hellenic Data Protection Authority or another competent supervisory authority.
Cookies and security
Essential storage may be used for cart, checkout and security functions. Optional analytics or advertising cookies should not be used until you choose them through a consent control. We use reasonable technical and organisational security measures, but no online service can promise absolute security.