Last updated: 2026-05-15
G&E Signature Scents ("we", "us") is the data controller for personal information collected through this site. We process the minimum data necessary to fulfil orders and provide customer support, in line with Regulation (EU) 2016/679 (GDPR).
What we collect
- Order data: name, email, phone, billing/shipping address, BoxNow locker, order history.
- Account data (if you create one): email, hashed password (argon2id), saved addresses, favorites, favorite lockers.
- Payment data: handled by Stripe; we never see your full card details.
- Operational data: IP and user agent for security, rate-limiting, fraud prevention.
- Cookie consent: a timestamped record of which categories you accepted in our banner.
How we use it
- Order fulfilment, shipping (BoxNow / courier), customer service.
- Account management and saved-address features.
- Tax and accounting obligations (kept for the legally-required period).
- Marketing emails - only with your explicit opt-in. Withdraw anytime via the link in any email.
Your rights
You may at any time request access, rectification, deletion, restriction or portability of your personal data. You can download an export from your account at /account/settings or delete your account from the same place (email confirmation required). Write to hello@gesignaturescents.com for anything else. You may also lodge a complaint with the Hellenic Data Protection Authority.
Retention
Order data is retained for 10 years to comply with Greek tax law. Account data is retained until you close your account. Marketing consent is recorded with timestamp and source.
Sub-processors
Contabo (hosting, Germany), Stripe (payments), Resend (transactional email), BoxNow (delivery), Discord (internal operational alerts: new-order pings and weekly aggregate reports - first name and order metadata only, never email / phone / full address). All are bound by DPAs in line with the GDPR.