Privacy policy
Last updated: September 23, 2026
Emprise Group I.K.E., trading as APHRODITE SKINCARE (“APHRODITE SKINCARE”, “we”, “us” or “our”), operates this store and website, including all related information, content, features, tools, products and services (the “Services”).
Our online store is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy explains how we collect, use, disclose and otherwise process your personal information when you visit or use our website, make a purchase or other transaction, create an account, subscribe to our communications, or otherwise interact with us.
Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood how we process personal information as described below.
Personal Information We Collect or Process
When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you. It does not include information that has been anonymised so that it can no longer identify or reasonably be linked to an individual.
Depending on how you interact with the Services, we may collect or process the following categories of personal information:
- Contact details, including your name, billing and shipping address, telephone number and email address.
- Payment and financial information, including payment method, payment confirmation, transaction details and other information required to process your payment. Payment card information may be processed by our payment service providers.
- Account information, including your account credentials, preferences and settings.
- Transaction information, including products you view, add to your cart or wishlist, purchase, return, exchange or cancel, as well as your previous transactions.
- Communications with us, including information you provide when contacting customer support or otherwise communicating with us.
- Device and technical information, including information about your device, browser, network connection, IP address and other online identifiers.
- Usage information, including information about how and when you interact with our website and Services.
- Marketing preferences, including your preferences regarding email and SMS marketing communications.
Sources of Personal Information
We may collect personal information:
- Directly from you, for example when you place an order, create an account, subscribe to marketing communications, contact us or otherwise provide information to us.
- Automatically through the Services, including through your device, browser, cookies and similar technologies.
- From service providers, where they process information on our behalf or provide services that enable us to operate our online store.
- From partners or other third parties, where permitted by applicable law.
For more information about our use of cookies and similar technologies, please see our Cookie Policy and the cookie preference options available on our website.
How We Use Your Personal Information
We may use your personal information for the following purposes:
Providing and improving our Services. We use personal information to process payments and orders, arrange shipping and delivery, manage returns and refunds, maintain customer accounts, remember preferences, provide customer support, enable product reviews and operate and improve our online store.
Marketing and communications. Where permitted by applicable law, we may use your contact information and marketing preferences to send promotional communications by email or SMS. You can unsubscribe or withdraw your consent at any time using the unsubscribe mechanism provided in our communications or by contacting us.
Personalisation and advertising. Subject to applicable consent requirements, we may use information about your interactions with our website to personalise your shopping experience and measure or improve our marketing and advertising.
Security and fraud prevention. We may process information to authenticate accounts, protect transactions, detect and prevent fraudulent, illegal or malicious activity and maintain the security of our Services.
Communicating with you. We use personal information to respond to enquiries, provide customer support and communicate with you regarding your orders, account or our Services.
Legal and regulatory purposes. We may process personal information where necessary to comply with legal, tax, accounting or regulatory obligations, respond to lawful requests from public authorities, establish or defend legal claims, and enforce our terms and policies.
Legal Bases for Processing
Where the General Data Protection Regulation (“GDPR”) or other applicable data protection laws require us to identify a legal basis for processing your personal information, we rely on one or more of the following:
- Performance of a contract, where processing is necessary to process and fulfil your order, receive payment, arrange delivery, process a return or refund, manage your account or otherwise provide Services you have requested.
- Compliance with legal obligations, including applicable tax, accounting, consumer protection and other legal requirements.
- Consent, where required, including for certain marketing communications, cookies and similar technologies. Where processing is based on your consent, you may withdraw it at any time.
- Legitimate interests, where necessary for our legitimate business interests, such as operating and improving our Services, protecting our business and customers, preventing fraud, securing our website and providing effective customer support, provided that these interests are not overridden by your rights and interests.
The original Shopify policy described your purposes extensively but did not separately set out these legal bases. Pasted markdown This addition addresses the information required under Article 13 GDPR. EUR-Lex
How We Disclose Personal Information
We may disclose personal information where necessary for legitimate business purposes and subject to applicable law, including:
- Shopify, which provides the e-commerce platform through which we operate our online store.
- Service providers that provide services on our behalf, including payment processing, IT services, website hosting and infrastructure, analytics, customer support, order fulfilment, shipping and delivery.
- Marketing and technology partners, where necessary to provide marketing, analytics or advertising services and subject to applicable consent requirements.
- Shipping and logistics providers, where necessary to fulfil and deliver your order.
- Professional advisers and authorities, where disclosure is necessary to comply with applicable law, protect our rights, establish or defend legal claims or respond to lawful requests.
- Affiliates or companies within our corporate group, where applicable and where necessary for legitimate business purposes.
- Parties involved in a business transaction, such as a merger, acquisition, restructuring or sale of all or part of our business, subject to applicable legal requirements.
We may also disclose information where you direct or expressly consent to the disclosure.
Relationship with Shopify
Our online store is hosted by Shopify. Shopify collects and processes certain personal information relating to your access to and use of the Services in order to provide its services and support the operation of our online store.
Information you submit through our online store may therefore be processed by Shopify and relevant service providers, including in countries other than the country in which you reside.
Certain Shopify features may involve Shopify processing information in its own capacity and in accordance with its own privacy documentation.
For more information about how Shopify processes personal information, please see the Shopify Consumer Privacy Policy and privacy information provided by Shopify.
This retains the substance of the Shopify-specific section in your original policy rather than removing information relevant to the platform hosting the store. Pasted markdown
Cookies and Similar Technologies
We use cookies and similar technologies for purposes such as operating our website, remembering preferences, understanding how visitors interact with our Services and, where you have provided the required consent, analytics, personalisation and marketing.
For detailed information about the cookies and similar technologies we use, their purposes and how you can manage your preferences, please see our Cookie Policy.
Third-Party Websites and Links
Our Services may contain links to websites or online platforms operated by third parties.
If you follow a link to a third-party website or service, we encourage you to review that party’s privacy and security practices. We are not responsible for the privacy, security, accuracy or practices of websites and services that we do not control.
Our inclusion of a link does not, by itself, constitute an endorsement of the third party or its content.
Children’s Data
Our Services are not intended for children, and we do not knowingly collect personal information from children in circumstances prohibited by applicable law.
If you are a parent or legal guardian and believe that a child has provided personal information to us, please contact us using the details below so that we can review the matter and, where appropriate, delete the information.
Security of Your Information
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure. You should therefore avoid sending sensitive or confidential information through unsecured communication channels.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or otherwise processed.
The retention period may vary depending on the nature of the information and our relationship with you. In determining how long information should be retained, we consider factors including:
- the period necessary to provide the Services and manage your account or orders;
- applicable tax, accounting and record-keeping requirements;
- our legal and regulatory obligations;
- the need to resolve disputes, prevent fraud or enforce agreements; and
- applicable limitation periods and the establishment, exercise or defence of legal claims.
When personal information is no longer required for these purposes, we will delete or anonymise it in accordance with applicable law.
This uses retention criteria rather than inventing a fixed number of years; Article 13 allows the retention period or, where that is not possible, the criteria used to determine it. EUR-Lex
Your Rights and Choices
Depending on where you live and subject to applicable law, you may have rights regarding your personal information, including:
- Right of access: You may request information about the personal data we process about you and obtain a copy of that data.
- Right to rectification: You may request correction of inaccurate or incomplete personal information.
- Right to erasure: In certain circumstances, you may request deletion of your personal information.
- Right to restriction of processing: In certain circumstances, you may request that we restrict how we process your personal information.
- Right to data portability: Where applicable, you may request to receive certain personal information in a structured, commonly used and machine-readable format.
- Right to object: Where processing is based on legitimate interests, you may have the right to object to that processing in certain circumstances. You also have the right to object to the processing of your personal information for direct marketing purposes.
- Right to withdraw consent: Where we rely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
- Right to lodge a complaint: You have the right to lodge a complaint with the competent data protection supervisory authority.
These rights may be subject to conditions, limitations and exceptions under applicable law.
We may need to verify your identity before responding to certain requests.
We will not discriminate against you for exercising your applicable data protection rights.
Marketing Communications
If you have subscribed to marketing communications, we may send you promotional communications by email or SMS, subject to applicable law.
You may opt out at any time by using the unsubscribe option provided in our marketing communications or by contacting us at support@aphroditeskincare.com.
Opting out of marketing communications does not prevent us from sending you non-promotional communications that are necessary in connection with your orders, account, transactions or our Services.
International Transfers
Some of our service providers, including technology providers supporting our online store, may process personal information outside the European Economic Area (“EEA”).
Where personal information is transferred outside the EEA to a country that has not been recognised by the European Commission as providing an adequate level of data protection, we will rely on an applicable lawful transfer mechanism, such as the European Commission’s Standard Contractual Clauses, where required.
Your original Shopify policy already contained an international-transfers section based on adequacy mechanisms and Standard Contractual Clauses; I have retained that substance. Pasted markdown
Complaints
If you have a concern or complaint about how we process your personal information, we encourage you to contact us first at support@aphroditeskincare.com so that we can investigate and respond.
You also have the right to lodge a complaint with the competent supervisory authority.
As Emprise Group I.K.E. is established in Greece, you may contact the:
Hellenic Data Protection Authority (HDPA)
Kifisias 1–3
115 23 Athens
Greece
Telephone: +30 210 6475600
Hellenic Data Protection Authority
The HDPA confirms that data subjects can submit complaints concerning alleged infringements of data-protection law and GDPR rights. dpa.gr
Where applicable, you may also have the right to lodge a complaint with the competent supervisory authority in the EEA country in which you live or work, or where the alleged infringement occurred.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, Services or legal and regulatory requirements.
When we make changes, we will publish the revised Privacy Policy on this website and update the “Last updated” date above. Where required by law, we will provide additional notice of material changes.
Contact Us
If you have any questions about this Privacy Policy, our privacy practices or the processing of your personal information, or if you would like to exercise any of your applicable rights, please contact us:
Emprise Group I.K.E.
trading as APHRODITE SKINCARE
3is Septemvriou 39
Gazi, 71414 Crete
Greece
Telephone: +30 2810 372128
Email: support@aphroditeskincare.com
For the purposes of applicable data protection law, Emprise Group I.K.E. is the controller of your personal information.