Privacy Policy & GDPR


Privacy & GDPR Policy


We value your privacy. Any personal information collected on this website is used solely to process orders and provide our services. We do not share or sell your personal data to third parties.

Data Controller: Athens Lightworks, Greece — support@athenslightworks.com

1. What information we collect

We only collect the personal information necessary to process your order:

  • Full name
  • Shipping address
  • Email and phone number
  • Payment details (processed securely via Shopify Payments or approved providers — Athens Lightworks does not store or have access to your payment card details)

2. Why we collect it (Legal Basis)

Your information is processed on the following legal bases under GDPR:

  • Contractual necessity — to process and deliver your order
  • Legitimate interest — to communicate regarding your order or customer support, and for site analytics
  • Consent — for optional marketing emails, only if you have explicitly opted in

3. How we store it

  • Data is securely stored via Shopify and its certified partners
  • Order and billing data is retained for 5 years in accordance with Greek tax and accounting obligations
  • Marketing consent data is retained until you withdraw consent

4. Your rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct or delete your personal data
  • Withdraw consent for marketing at any time
  • Object to or restrict processing
  • Lodge a complaint with the Hellenic Data Protection Authority (ΑΠΔΠΧ) at dpa.gr

For any data requests, contact us at: support@athenslightworks.com

5. Third parties with access

  • Shopify — platform hosting & payment processing
  • Couriers and logistics partners — for order delivery
  • Payment providers — banks and digital wallet providers (Apple Pay, Google Pay, Shop Pay, Klarna)

6. Cookies

We use cookies to improve your browsing experience and for site analytics. You can accept or decline cookies via the banner on our website.