Privacy Policy

Last updated: February 2026

This Privacy Policy explains how the company KOURI R & SIA L.P., operating under the store name Lipshop, collects, uses, shares, and protects personal data when you visit or use www.lipshop.gr (the “Website”), create an account, place an order, participate in events, or contact us.

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Greek and European laws.

  1. Data Controller

The data controller responsible for your personal data is:

KOURI R & SIA L.P.
VAT: EL802185546
Dimitriou Vasiliou Avenue 13
Neo Psychico, 15451, Greece
Email: [email protected]

  1. What is Personal Data

Personal data refers to any information relating to an identified or identifiable individual, such as name, address, email, phone number, IP address, or other information that can identify you.

Processing refers to any operation performed on personal data, including collection, storage, use, sharing, or deletion.

  1. Is providing your data mandatory?

Certain personal data is required in order to complete purchases, create an account, deliver orders, or provide customer support. If you do not provide required information, we may not be able to process your order or provide requested services.

Any optional fields will be clearly marked.

  1. What data we collect
  2. Data you provide directly
  • Name and surname
  • Billing and shipping address
  • Email address
  • Phone number
  • Account login details (email and password)
  • Order and transaction details
  • Personalization details (names, initials, messages, etc.)
  • Customer service communications
  • Event participation information
  1. Data collected automatically
  • IP address
  • Device and browser information
  • Pages visited and time spent on the site
  • Approximate location (based on IP)
  • Cookies and similar technologies
  1. Payment information

Payments are processed through secure third-party payment providers. We do not store full credit card details on our systems.

  1. Reviews and feedback

If you leave a review or rating, we collect the information you choose to share.

  1. How we use your data

We use your personal data to:

  • Process and deliver your orders
  • Provide customer service and respond to inquiries
  • Manage returns, refunds, and warranties
  • Provide personalization services
  • Create and manage user accounts
  • Send order updates and service communications
  • Send newsletters and promotional offers (only if you have opted in)
  • Improve our Website, services, and customer experience
  • Prevent fraud and maintain Website security
  • Comply with legal and tax obligations
  1. Legal basis for processing

We process your data based on:

  • Contractual necessity: to fulfill your order or requested service
  • Legal obligations: tax, accounting, and regulatory requirements
  • Legitimate interests: improving services, customer support, and fraud prevention
  • Consent: for marketing communications, cookies, and notifications where required

You may withdraw your consent at any time.

  1. Sharing your data

We only share personal data when necessary and with trusted partners, such as:

  • Courier and delivery companies
  • Payment service providers
  • Website hosting and IT providers
  • Email marketing and communication platforms
  • Analytics and advertising partners (where consent applies)
  • Legal or regulatory authorities when required by law

All partners are contractually required to handle your data securely and in compliance with GDPR.

  1. International data transfers

Your data is primarily processed within the European Economic Area (EEA). When we work with service providers outside the EEA, we ensure appropriate safeguards, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Additional technical and organizational security measures
  • Certified providers under recognized adequacy frameworks where applicable
  1. Data retention

We retain personal data only as long as necessary for the purposes described above or as required by law.

Indicative retention periods:

  • Order and invoice data: as required by tax and accounting laws
  • Account data: while the account remains active
  • Customer support communications: for a reasonable business period
  • Marketing data: until you unsubscribe or withdraw consent

After the retention period, data is deleted or anonymized.

  1. Your rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict processing
  • Object to certain processing activities
  • Withdraw consent at any time
  • Request data portability
  • File a complaint with the Hellenic Data Protection Authority

To exercise your rights, contact: [email protected]
Subject line: Data Rights Request

  1. Marketing communications

You can unsubscribe from marketing communications at any time:

  • By clicking the unsubscribe link in any newsletter
  • Through your account settings (if available)
  • By contacting us at [email protected]

Service communications (such as order updates or legal notices) are not marketing and may still be sent when necessary.

  1. Cookies

We use cookies to:

  • Ensure proper Website functionality
  • Remember your preferences
  • Analyze traffic and performance
  • Provide personalized content and marketing (where enabled)

You can manage cookies through your browser settings or the cookie banner on our Website.

  1. Data security

We implement appropriate technical and organizational measures to protect your personal data, including encryption (TLS/SSL), secure servers, and access controls.

  1. Children

We do not knowingly allow users under the age of 16 to create an account on our Website. For participation in certain events or experiences, parental or guardian consent may be required.

  1. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

  1. Complaints

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).

  1. Contact

For any questions regarding this Privacy Policy or your personal data:

KOURI R & SIA L.P. – Lipshop
Dimitriou Vasiliou Avenue 13
Neo Psychico, 15451, Greece
Email: [email protected]