top of page

Privacy Policy

Last updated: 22/09/2026

​

This Privacy Policy explains how Corfolia collects, uses, shares and protects personal data when you visit www.corfolia.com, contact us, subscribe to our newsletter or purchase products through our online store.

​

1. Who We Are

MARITSAS STAMATIOS & CO GP, trading as Corfolia, is the data controller responsible for the processing of personal data described in this Privacy Policy.

Our contact details are:

Registered address: Roda, Corfu 49081, Greece
Email: info@corfolia.com
Website: www.corfolia.com

 

2. Personal Data We Collect

Depending on how you use our website and services, we may collect:

  • identification and contact information, such as your name, email address and telephone number;

  • order, billing and delivery information, such as your billing address, delivery address, country and order details;

  • transaction information, such as the amount paid, payment status, refunds and transaction reference;

  • information you provide through our contact forms, withdrawal form or other communications;

  • your email address and subscription preferences when you subscribe to our newsletter;

  • technical and usage information, such as your IP address, device type, browser type and information about how you use our website; and

  • information about your cookie preferences and consent choices.

Online payments are processed by Stripe. We do not receive or store your complete payment card details.

We do not intentionally collect special categories of personal data, such as information about health, religious beliefs, political opinions or biometric data.

​

3. How We Collect Personal Data

We collect personal data:

  • directly from you when you place an order, contact us, complete a form, exercise your right of withdrawal or subscribe to our newsletter;

  • automatically through essential website technologies required for the operation and security of the website;

  • through analytics technologies, including Google Analytics, where you have provided consent; and

  • from our payment provider, which provides us with limited information relating to the status of a payment or refund.

​

4. How and Why We Use Personal Data

We process personal data only where there is an appropriate legal basis.​

​

4.1 To Perform a Contract

We use personal data where necessary to:

  • process and fulfil orders;

  • receive and confirm payments;

  • arrange delivery;

  • communicate with you about an order;

  • process cancellations, withdrawals, returns and refunds; and

  • provide customer support.

​

4.2 To Comply With Legal Obligations

We may process and retain personal data where necessary to comply with accounting, tax, consumer protection and other legal obligations, or to establish, exercise or defend legal claims.

​

4.3 For Our Legitimate Interests

Where necessary, we may process personal data to:

  • operate, maintain and protect our website and online store;

  • prevent fraud, misuse and security incidents;

  • respond to general enquiries; and

  • maintain appropriate business and transaction records.

We rely on legitimate interests only where those interests are not overridden by your rights and interests.

​

4.4 With Your Consent

Where your consent is required, we may use personal data to:

  • send newsletters, product news, offers and other marketing communications; and

  • collect analytics information to understand how visitors use our website and improve its content and performance.

You may unsubscribe from marketing communications or withdraw your consent at any time.

​

5. Who We Share Personal Data With

We do not sell personal data.

Where necessary, we may share relevant personal data with:

  • Wix, which provides our website hosting, online store, forms and email marketing services;

  • Stripe, which processes online payments;

  • delivery and courier companies, in order to deliver purchases;

  • Google Analytics, where analytics consent has been provided;

  • Usercentrics, which manages cookie preferences and consent;

  • our accountant, where required for accounting and tax purposes; and

  • customs, tax, judicial or other public authorities, where disclosure is required by law or necessary for an international delivery.

Each recipient receives only the information reasonably necessary for the relevant purpose.

​

6. International Data Transfers

Some of our service providers, including Wix, Stripe, Google and Usercentrics, may process personal data in countries outside the European Economic Area.

Where an international transfer takes place, appropriate safeguards are used in accordance with applicable data protection law. These may include an adequacy decision, Standard Contractual Clauses approved by the European Commission or another legally recognised transfer mechanism.

Further information about international transfers is available in the privacy information provided by each service provider.

​

7. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal obligations.

In particular:

  • order, payment, invoice, delivery and refund information is retained for the period required by accounting, tax and other applicable laws;

  • correspondence concerning an order, complaint, return or legal claim is retained for as long as reasonably necessary to handle the matter and protect our legal rights;

  • information relating to general enquiries is retained only for as long as necessary to respond and complete any required follow-up;

  • newsletter subscription information is kept while you remain subscribed. If you unsubscribe or withdraw your consent, we will stop sending marketing communications. We may retain a minimal record of your email address and opt-out request where necessary to ensure that your preference is respected and to demonstrate compliance with our legal obligations; and

  • cookie consent and analytics information is retained in accordance with the settings and retention periods of the relevant service.

When personal data is no longer required, it will be deleted or anonymised, unless its continued retention is required by law.

​

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Essential cookies are used to operate the website, maintain its security and provide functions requested by visitors, including shopping and checkout functions. These cookies do not require consent where they are strictly necessary.

With your consent, we may also use analytics cookies, including Google Analytics, to understand how visitors use the website and to improve its content and performance.

We use Usercentrics to display our cookie consent banner, manage cookie preferences and record consent choices.

When you first visit the website, you can accept all cookies, reject non-essential cookies or manage your preferences. You can change or withdraw your consent at any time by selecting the privacy settings icon displayed on the website.

For further information about the cookies and technologies used on our website, please see our Cookie Policy and the information available through the cookie settings.

​

9. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, unauthorised access, use or disclosure.

Access to personal data is limited to persons and service providers who require it for the purposes described in this Privacy Policy. We also take reasonable steps to ensure that personal data is shared only when necessary and is not retained for longer than required.

Our website and online store operate through Wix, while online payments are processed through Stripe. We do not receive or store customers’ complete payment card details.

Although we and our service providers take reasonable measures to protect personal data, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

​

10. Your Data Protection Rights

Under applicable data protection law, you may have the right to:

  • request access to the personal data we hold about you;

  • request the correction of inaccurate or incomplete personal data;

  • request the deletion of your personal data;

  • request that we restrict the processing of your personal data;

  • object to the processing of your personal data;

  • receive certain personal data in a structured, commonly used and machine-readable format, or request its transfer to another organisation; and

  • withdraw your consent at any time where processing is based on consent.

Withdrawing consent does not affect the lawfulness of any processing carried out before consent was withdrawn.

To exercise any of these rights, please contact us at info@corfolia.com. We may ask for information necessary to confirm your identity before responding to your request.

We will respond to your request within the period required by applicable law.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority or another competent data protection authority.

Hellenic Data Protection Authority
Website: www.dpa.gr

 

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, the technologies we use or applicable legal requirements.

Any updated version will be published on this page. The date of the latest update will be shown at the top of the Privacy Policy.

bottom of page