Privacy Policy

YSTERA is an online fine-jewellery business operated by Eleni Lakopoulou in Greece.

YSTERA is the data controller for the personal data described in this policy.

Contact: info@ystera-jewelry.com

Depending on how you interact with this website, we may process:

name; email address; telephone number; billing address; delivery address;

order details; payment-related information handled by payment providers;

correspondence with YSTERA; information required to fulfil your order;

technical and device information generated through use of the website;

cookie information, where applicable.

Payment processing is carried out by third-party providers. YSTERA does not store full payment-card data.

Personal data may be used for:

processing and fulfilling orders; processing payments; arranging delivery;

customer support and responding to enquiries;

complying with tax, accounting and other legal obligations;

preventing fraud and protecting the security of the website;

improving website performance where lawful;

analytics, where applicable and where the required consent has been obtained;

marketing communications, where a lawful basis exists.

Performance of a contract: processing your order, arranging payment and delivery, and handling returns and withdrawals.

Compliance with a legal obligation: invoicing, tax and accounting records, and mandatory consumer-law obligations.

Legitimate interests: responding to enquiries, keeping the website secure, preventing fraud, and maintaining records of our business relationship.

Consent: optional cookies and similar technologies where consent is required, and marketing communications where they rely on consent.

Personal data is shared only where necessary, with recipients involved in operating the business:

the e-commerce platform provider; payment providers; delivery providers;

technical service providers; accounting and tax service providers where applicable;

and other processors necessary to operate the website and fulfil orders.

We do not sell personal data.

Where the store is operated through Shopify, Shopify provides the e-commerce platform and hosting, and may process personal data in accordance with its applicable role for each processing activity — acting as our processor for order and store data, and in its own right for certain platform-level processing.

Other service providers process personal data only to the extent necessary to provide their service to us.

Payment providers made available at checkout process payment information as necessary to complete your transaction and to meet their own legal obligations.

YSTERA does not store full payment-card details.

The delivery provider used for your order receives the information necessary to deliver it, such as your name, delivery address, email address and telephone number.

The carrier applicable to your order is the one presented at checkout and described in our Shipping information.

Where a service provider processes personal data outside the European Economic Area, such transfers take place on the basis of a lawful transfer mechanism and appropriate safeguards under applicable data-protection law.

You may request information about the safeguards applicable to a specific provider by writing to info@ystera-jewelry.com.

Order and invoicing data: retained for the period required by applicable Greek tax and accounting law.

Customer correspondence: kept only for as long as reasonably necessary to handle your request and any resulting legal or business need.

Marketing consent records: where applicable, retained as necessary to demonstrate and manage your consent.

Cookie preferences: retained as necessary to remember and demonstrate your choices.

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure.

Subject to the conditions and exceptions provided by applicable law, you have the right to:

access your personal data; have inaccurate data rectified; request erasure;

request restriction of processing; object to processing;

receive your data in a portable format, where applicable;

and withdraw consent where processing is based on consent.

To exercise your rights, write to info@ystera-jewelry.com.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Cookie choices can be changed at any time through the Cookie Settings option in the footer, described in our Cookie Policy.

For any concern regarding your personal data, please write to info@ystera-jewelry.com.

You also have the right to lodge a complaint with the competent supervisory authority. In Greece this is the Hellenic Data Protection Authority.

For complaints about an order, a product or delivery, please see the Complaints section of our Terms of Service.

YSTERA — Eleni Lakopoulou

Email: info@ystera-jewelry.com

Telephone: +30 697 287 4848

Correspondence address: Apsou 4, 10443 Athens, Greece

We may update this Privacy Policy when necessary to reflect changes to the website, our services, legal requirements or our data-processing practices. The current version is always published on this page.