Intellinous Single-Member Private Company (I.K.E.) (hereinafter “Tik It Easy”, “we” or “us”) provides print-on-demand services through the online store tikiteasy.gr.
In the context of operating the website and the online store, we collect and process personal data of users and customers in accordance with the General Data Protection Regulation 2016/679, known as the GDPR, and the applicable Greek and European legislation on personal data protection.
This Privacy Policy explains what data we collect, for what purposes we use it, with which partners we may share it, for how long we retain it and what rights you have.
1. Controller and contact details
The controller is Intellinous Single-Member Private Company (I.K.E.), based in Athens, Greece.
For any matter related to the protection of personal data, you may contact us at the email address: hello@tikiteasy.gr.
2. What personal data we collect
We collect only the data that is necessary for the operation of the online store, the processing of orders, the shipment of products, customer support, compliance with our legal obligations, the security of the website and, where you have given consent, for statistical analysis and promotional activities.
2.1 Account creation and purchases through WooCommerce
When creating an account in our online store through WooCommerce, we collect information that is necessary for registration, login and management of your account, such as email address, password, first name, last name, billing details, shipping details, order history and account details related to your purchases. Your password is stored securely and is not visible to us.
When purchasing a product, we collect the information that is necessary for completing the order, making payment, issuing documents and shipping the product. Checkout details include:
- email address
- first name and last name,
- country / region,
- street address and number,
- apartment, floor, unit or other additional address detail, optional,
- city
- county / region, optional,
- postal / ZIP code,
- telephone, optional.
In addition, information related to your order is collected, such as products purchased, size, colour or other product variation, quantity, price, total order value, shipping method, order status, order number or code, order date, and return or cancellation information, where applicable.
2.2 Payments through Stripe
For the processing of payments, we use WooCommerce Stripe Gateway and Stripe as the payment provider. During payment, data such as full name, email, billing address, shipping address, transaction amount, currency, payment method, transaction identifiers, payment confirmation or rejection details, and technical data necessary for fraud prevention and payment security may be submitted to or processed by Stripe.
We do not store your full card details. Card data is processed by the payment provider in a secure environment.
2.3 Print-on-demand orders
Tik It Easy operates as a print-on-demand online store. For the production and shipment of products, we collaborate with print-on-demand partners, such as Printful.
For the execution of your order, we may transmit to the print-on-demand partner the strictly necessary information, such as first name and last name, shipping address, telephone number, email where required for the order or shipping notification, product ordered, size, colour or product variation, quantity, design or print details corresponding to the product, and shipping and tracking information, where available.
2.4 Contact form and customer support
If you contact us through the contact form, we collect your full name, email, the content of the message and any technical data required for the security of the form and the prevention of spam. We use this information to respond to your request and provide customer support.
2.5 Email notifications and Brevo
For sending emails related to orders, accounts, contact requests and customer support, we use FluentSMTP with Brevo as the email sending provider.
Where email logging is enabled, technical sending information may be stored, such as recipient, sender, email subject, sending status, date and time of sending, and technical response from the mail server. These logs are used for technical support, verification of correct sending, investigation of issues and proof of communication where required.
2.6 Documents and packing slips
We use a plugin for creating PDF documents and packing slips for WooCommerce. Order, billing and shipping details may be used to create PDF invoices, receipts or related documents and packing slips, which are sent to the customer and retained for as long as required by the applicable tax and accounting legislation.
2.7 Cookies, analytics and advertising tracking
Through cookies and similar technologies, technical data, website usage data, cookie consent data and, where you have given consent, advertising measurement and remarketing data may be collected. More information is provided in the section “Cookies and tracking technologies”.
2.8 Security, anti-spam, backups and technical operation
For the protection of the website, we use security and anti-spam tools, such as Wordfence Security Free and Zero Spam for WordPress. These tools may process technical data, such as IP address, user agent, login attempts, blocked requests and spam submissions. Zero Spam is not used with active third-party integrations.
We use the WPvivid Backup Plugin to create backups. Backups may include account data, order data, documents, email logs, contact form messages and technical settings of the website. Backups may be stored with a third-party backup storage provider for security and recovery purposes.
We also use caching and performance optimisation technologies, such as W3 Total Cache and Redis Object Cache, for the faster and safer operation of the website.
3. For what purposes we process your data
We process your personal data for the following purposes and on the corresponding legal bases:
- Account creation and management. Legal basis: performance of a contract.
- Processing, payment, printing and shipment of orders. Legal basis: performance of a contract.
- Issuance of documents, keeping accounting records and compliance with legal obligations. Legal basis: compliance with legal obligations.
- Customer support and response to contact requests. Legal basis: performance of a contract and legitimate interest.
- Sending necessary emails related to orders, accounts and requests. Legal basis: performance of a contract and legitimate interest.
- Sending promotional messages, newsletters and offers. Legal basis: consent.
- Statistical analysis, advertising, remarketing and conversion tracking. Legal basis: consent, where required.
- Website security, anti-spam protection, fraud prevention and technical operation. Legal basis: legitimate interest.
- Creation of backups and restoration of operation. Legal basis: legitimate interest and, where required, compliance with legal obligations.
4. With whom we share your data
We do not sell your personal data.
We disclose personal data only when necessary for the provision of our services, the operation of the online store, payment, production and shipment of products, security, compliance with the law or where you have given consent.
We may disclose data to:
- print-on-demand partners, such as Printful, for the production, packaging and shipment of products,
- payment providers, such as Stripe, for payment processing and fraud prevention,
- email sending providers, such as Brevo through FluentSMTP,
- analytics and advertising providers, such as Google Analytics, Google Ads, Google Merchant Center, Google for WooCommerce, Meta, Meta Pixel and Meta Conversions API, where you have given consent where required,
- security and anti-spam providers, such as Wordfence Security Free and Zero Spam for WordPress,
- hosting, caching, technical infrastructure and backup providers,
- accountants, tax advisors or legal advisors, where required for accounting, tax or legal purposes,
- public, tax, judicial or other competent authorities, where required by law or by a lawful request.
Partners that process personal data on our behalf are bound to maintain confidentiality, security and compliance with the applicable personal data protection legislation.
5. Cookies and tracking technologies
Our website uses cookies and similar technologies for the proper operation of the online store, security, storage of preferences, statistical analysis and, where you have given consent, for advertising purposes.
5.1 Categories of cookies
- Strictly necessary cookies: required for the shopping cart, checkout, user login, account creation, security, anti-spam protection, storage of cookie choices and user session management. Without these cookies, the website and the online store cannot function properly.
- Functional cookies: used to remember your choices, such as language, display preferences or other website settings.
- Analytics cookies: used to understand website traffic and usage, mainly through Google Analytics, where you have given the relevant consent where required.
- Advertising and marketing cookies: used for advertising measurement, remarketing and conversion tracking, mainly through Meta Pixel, Meta Conversions API, Meta Advanced Matching, Google Ads conversion tracking, Google for WooCommerce and Google Merchant Center integrations, where you have given consent.
Through advertising and marketing technologies, actions such as product view, add to cart, checkout initiation, purchase completion, purchase value, currency, product identifiers, technical browser/device data and, where applicable, hashed data such as email or telephone may be recorded. This data is used to measure advertising performance, for remarketing and to optimise advertising campaigns.
5.2 Consent management through Complianz
We use Complianz to manage and record your cookie consent choices. Through this mechanism, you can accept, reject or change your choices by cookie category.
6. International data transfers
Some of our partners, such as payment, analytics, advertising, email, hosting, backup or print-on-demand service providers, may process data outside the European Economic Area.
In such cases, we take appropriate protection measures, such as data processing agreements, contractual data protection clauses, cooperation with providers that implement appropriate technical and organisational measures, and limitation of the transferred data to what is strictly necessary.
7. Data retention period
We retain personal data only for as long as necessary for the purposes for which it was collected or for as long as required by the applicable legislation.
Indicatively
- account data is retained for as long as the account remains active or until you request its deletion,
- order, payment and document data is retained for as long as required for the execution of the order, customer support, compliance with tax or accounting obligations and resolution of disputes,
- contact form data, email logs, security logs and anti-spam logs are retained for as long as necessary for support, technical support, security and the protection of our legitimate interests,
- marketing data is retained until you withdraw your consent or unsubscribe,
- backups are retained for a limited period, in accordance with the backup policy we apply.
After the expiry of the relevant periods, the data is deleted, anonymised or access to it is restricted, unless further retention is required for a lawful reason.
8. Data security
We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration or destruction.
These measures include, indicatively, controlled access to systems, use of secure passwords and access rights, SSL / HTTPS where applicable, firewall tools, anti-spam protection, creation of backups and restriction of access to personal data only to those who need to process it.
Although we take security measures, no method of transmitting or storing data over the internet is completely secure. For this reason, we recommend that you use strong passwords and exercise caution when submitting information online.
9. Your rights
Under the GDPR, you have the right of access, rectification, erasure, restriction of processing, objection, portability and withdrawal of consent where the processing is based on consent.
Where there are orders, documents or accounting records that must be retained by law, we may not be able to delete all data immediately.
To exercise your rights, you may contact hello@tikiteasy.gr. We will respond within one month, unless a longer period is required due to the complexity or number of requests, as provided for by the GDPR.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority: www.dpa.gr.
10. Mandatory provision of data
The provision of certain personal data is necessary for the use of our services. For example, without email, first name, last name and shipping details, we cannot create or execute an order.
Without certain technical cookies, the cart, checkout, user login and website security cannot function properly. The provision of data for marketing, analytics or advertising tracking is optional and is based on your consent, where required.
11. Automated decision-making and profiling
We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
However, where you have given consent for advertising and marketing cookies, third-party platforms such as Google and Meta may use behavioural data, cookies or other online identifiers for profiling, remarketing, advertising measurement and campaign optimisation purposes. You can manage or withdraw your consent through the website’s cookie mechanism.
12. Links to third-party websites
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of third-party websites. We recommend that you read the privacy policies of any third-party website you visit.
13. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to our services, the technical functions of the website, our partners or the legislation. The most recent version will be available on our website.
In the event of material changes, we may notify you through a relevant notice on the website or by email, where appropriate.
14. Contact
For any matter related to this Privacy Policy or the processing of personal data, you may contact us:
- Intellinous Single-Member Private Company (I.K.E.)
- Email: hello@tikiteasy.gr
- Registered office: Athens, Greece
By using our website and services, you accept this Privacy Policy.
