Privacy Policy

Who controls your data

Personal data processed through this website is controlled by:

ΚΑΡΑΓΙΑΝΝΗ ΑΛΕΜΙΝΑ ΦΙΛΟΘΕΗ
trading as Oktana Pottery
Αγαθονησίου 4
85133 Ρόδος
Ελλάδα
Email: sales@oktanapottery.com
Telephone: +30 6940 821 618

For privacy questions, use the email address above or the Contact page.

What we collect

Depending on how you use the site, we may process:

• Identity and contact details (name, email, telephone, address)
• Account data if you register
• Billing and shipping information for orders
• Order history and fulfilment records
• Booking information when you book a class or workshop
• Communications you send via forms or email
• Technical and security logs (for example IP address, login attempts)
• Payment transaction references from payment providers (not full card numbers)
• Artist account or submission data where an artist uses studio tools on this site

Why we use it and legal basis

• Contract performance — processing orders, accounts, delivery and customer service
• Legal and accounting obligations — invoices, tax and statutory records
• Legitimate interests — securing the site, preventing abuse, improving reliability of necessary services
• Consent — where required for optional communications you choose to receive

Consent is not used as the legal basis for everything. Necessary processing for orders and security does not depend on marketing consent.

Payments

Card and related payments are processed by Stripe and by Viva.com Smart Checkout. Those providers process payment data under their own terms and privacy notices. Oktana receives payment status and references needed to fulfil the order, not full card numbers.

Booking

Direct class and workshop bookings are handled through the external booking portal at book.oktanapottery.com. That portal processes the personal data needed to take and manage the booking.

Workshop places sold through GetYourGuide are administered on that marketplace; GetYourGuide processes booking data under its own privacy terms.

Analytics and marketing

This website does not use optional analytics or advertising trackers such as Google Analytics or Meta advertising pixels.

See the Cookie Policy for browser storage in use.

Who receives data

Services that may process personal data on our behalf or as independent controllers where noted:

• WordPress and WooCommerce (site and shop platform)
• Stripe (payments)
• Viva.com (payments)
• Trustindex (Google review data used to display reviews)
• Fluent Forms (form submissions)
• Flexible Shipping (shipping rate calculation)
• BoxNow (Greece locker / delivery options where selected)
• Limit Login Attempts Reloaded (login security)
• Hosting: TopHost
• External booking portal for direct studio bookings

GetYourGuide is an external marketplace for some workshops.

International transfers

Some providers (for example payment or review infrastructure) may process data outside the European Economic Area. Where that happens, they rely on appropriate transfer mechanisms under applicable data-protection law, such as standard contractual clauses or an adequacy decision, as described in their own documentation.

Retention

Order and accounting records are retained as required for accounting and tax law.

Account data is kept while the account remains open and for a reasonable period afterwards where needed for security or legal claims. Form messages and security logs are kept only as long as needed for their purpose. Exact statutory retention periods for accounting records follow Greek tax and company law as applicable to Oktana.

Your rights

Where applicable under the GDPR and Greek law, you may request:

• Access
• Rectification
• Erasure
• Restriction of processing
• Data portability
• Objection to processing based on legitimate interests
• Withdrawal of consent where processing is based on consent

Some rights depend on the legal basis and circumstances. You may also lodge a complaint with the Hellenic Data Protection Authority (HDPA).

Automated decision-making

Orders and payments are processed through standard e-commerce and payment-provider flows. We do not use automated decision-making that produces legal or similarly significant effects about you beyond ordinary fraud and payment checks operated by payment providers.

Security

We use reasonable technical and organisational measures appropriate to a small commerce site, including HTTPS and login-protection tools. No method of transmission or storage is completely secure.

Policy updates

This policy may be updated when services or legal requirements change. The version published on this page applies from its publication date.

Contact

Privacy requests: sales@oktanapottery.com