PRIVACY POLICY

Space X Pottery respects your privacy and is committed to protecting your personal information. This policy explains what data we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).

Data Controller

The data controller responsible for your personal data is:

Information We Collect

When you place an order, book a lesson, subscribe to the newsletter, or contact us through our website, we may collect information including:

• Name
• Email address
• Telephone number
• Billing and shipping information
• Lesson booking information

How We Use Your Information

This information is used only for:

• Processing orders
• Managing lesson bookings
• Customer communication
• Newsletter subscriptions (only when consent is given)
• Improving our services

Payments

Payments are processed securely through Stripe. Space X Pottery does not store credit card information.

Third-Party Service Providers

We never sell your personal data. We share it only with trusted providers that help us run the site and fulfil your orders, and only as needed. These act as our data processors:

• Google Firebase — secure storage of account, order and booking data, and authentication
• Stripe — payment processing (we never see or store your card details)
• Resend — sending order/booking confirmations and newsletters
• Cloudflare — bot and abuse protection on our forms (Turnstile), which checks your IP address and browser signals to tell real visitors from automated traffic
• Vercel — website hosting

Some providers may process data outside the EU/EEA; where they do, appropriate safeguards (such as the European Commission's Standard Contractual Clauses) are in place. We may also disclose data where required by law.

Data Retention

We keep your personal data only as long as necessary for the purposes above — for example, order and invoice records are retained for the period required by Greek tax law, and account data until you ask us to delete it.

Cookies

We use only essential cookies and local storage needed to keep the site working (your login session and shopping cart). We do not use tracking or advertising cookies.

Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time (for example, unsubscribe from the newsletter)

To exercise any of these rights, contact spacexpottery@gmail.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).