Join the Håndlavet newsletter. Be the very first to know about our limited arrivals, receive special offers and more.

    No products in the cart.

    Search

    My account

    No products in the cart.

    Search

    My account

    No products in the cart.

    a

    Privacy Policy

    Last Updated: 9 October 2026

    1. Introduction

    Welcome to Lovely Finds, an online store available at https://lovelyfinds.gr.

    We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal information we collect, how and why we process it, with whom we may share it, how long we retain it, and what rights you have.

    We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data protection legislation.

    2. Data Controller

    Trading Name: Lovely Finds
    Legal Business Name: [TO BE COMPLETED]
    VAT Number: [TO BE COMPLETED]
    Address: 28 Oktovriou 10–12, 14231 Nea Ionia, Athens, Greece
    Email: info@lovelyfinds.gr
    Telephone: +30 2102794059

    For any questions regarding the processing of your personal data, please contact us using the details above.

    3. Personal Data We Collect

    Depending on how you interact with our website, we may collect the following categories of personal data:

    • Identity and contact information: Full name, email address and telephone number.
    • Billing and shipping information: Billing address, delivery address and information necessary to fulfil your order.
    • Order information: Products purchased, quantities, order value, order history, payment status and shipping status.
    • Payment-related information: Selected payment method, transaction status and payment reference details. We do not require customers to provide full payment card details directly to us.
    • Account information: Account details, order history and preferences, if you create a customer account.
    • Communications: Information you provide when contacting us, submitting enquiries or requesting customer support.
    • Technical information: IP address, browser type, device information, website usage information and cookie-related data, where applicable.
    • Marketing preferences: Newsletter subscriptions, communication preferences, consent records and unsubscribe requests.

    4. Purposes and Legal Bases for Processing

    We process personal data for the following purposes and under the corresponding legal bases.

    Performance of a Contract — Article 6(1)(b) GDPR

    • Processing and fulfilling customer orders.
    • Arranging payments and deliveries.
    • Providing customer support.
    • Managing returns, refunds and order-related enquiries.
    • Maintaining customer accounts where requested.

    Compliance with Legal Obligations — Article 6(1)(c) GDPR

    • Issuing and retaining invoices and accounting records.
    • Meeting applicable tax and financial reporting requirements.
    • Complying with other legal obligations.

    Legitimate Interests — Article 6(1)(f) GDPR

    • Maintaining website security and preventing fraud.
    • Investigating technical issues.
    • Protecting our legal rights and handling potential disputes, subject to the applicable balancing of interests.

    Consent — Article 6(1)(a) GDPR

    • Sending promotional communications where consent is required.
    • Using non-essential cookies and tracking technologies.
    • Enabling optional personalisation features where applicable.

    Where legally permitted, we may also rely on the specific rules applicable to direct marketing of similar products to existing customers, provided all relevant conditions are satisfied.

    5. Newsletters, Email Marketing and Automated Communications

    We use Routee / WayMore to manage marketing communications and related automation services.

    Depending on the features enabled and the applicable legal requirements, these communications may include:

    • Newsletters featuring new products, promotions and special offers.
    • Welcome emails for new subscribers.
    • Abandoned cart reminders.
    • Post-purchase product recommendations.
    • Customer re-engagement or win-back campaigns.
    • Promotional SMS messages and notifications through other supported channels, where enabled and legally permitted.

    Making a purchase does not automatically constitute consent to receive marketing communications.

    Where consent is required, we request it before sending promotional messages.

    Where the law permits direct marketing of similar products to existing customers, we provide a clear opportunity to object when contact details are collected and in every subsequent marketing message.

    You may unsubscribe from promotional emails using the unsubscribe link included in the message or by contacting info@lovelyfinds.gr.

    Opting out of marketing communications does not prevent us from sending essential transactional messages relating to your orders.

    6. Payments and Transaction Security

    Card payments are intended to be processed through Nexi XPay, in cooperation with Alpha Bank, once the payment service has been activated on our website.

    Card transactions are handled through the relevant payment processing environment. Lovely Finds does not need to store complete card numbers or card security codes (CVV) to process purchases.

    If you choose bank transfer, we may process relevant transaction information, including the amount, payment date and reference number, to identify and confirm your payment.

    Payment-related personal data may also be processed under the privacy policies of the relevant payment service providers and financial institutions.

    7. Sharing Personal Data with Third Parties

    We share personal data only where necessary to provide our services or comply with applicable legal obligations.

    Depending on the services used, recipients may include:

    • Nexi Payments and Alpha Bank, for payment processing.
    • AW Dropship Europe, for order preparation and fulfilment.
    • Shipping and courier companies, for delivery of purchased products.
    • FastComet, for website hosting and technical infrastructure.
    • Routee / WayMore, for authorised marketing communications and automation services.
    • Google, where analytics or advertising services are enabled with the appropriate legal basis and consent settings.
    • Accounting and professional service providers, where necessary.
    • Public authorities, where disclosure is required by law.

    We do not sell our customers’ personal data to third parties.

    8. International Data Transfers

    Certain technology service providers may process personal data outside the European Economic Area (EEA).

    Where such transfers take place, we apply the safeguards required under the GDPR, as applicable, including adequacy decisions or appropriate contractual safeguards such as Standard Contractual Clauses.

    9. Data Retention

    We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account applicable legal obligations.

    In particular:

    • Order information and financial records: Retained for the periods required under applicable tax, accounting and other relevant laws.
    • Customer account information: Retained while the account remains active or where another lawful retention reason applies.
    • Marketing information: Retained until consent is withdrawn, an objection is made or the information is no longer required for the relevant purpose. Limited suppression records may be retained to prevent unwanted future communications.
    • Customer support communications: Retained as necessary to resolve enquiries and address potential legal claims.
    • Cookies and analytics data: Retained according to the actual settings and retention periods of the relevant services.

    When personal data is no longer required, it is deleted or anonymised where technically feasible and legally appropriate.

    10. Cookies and Tracking Technologies

    Our website uses technologies necessary for the operation of the online store, including shopping cart functionality and session management.

    Depending on the services enabled, we may also use optional cookies and similar technologies for analytics, advertising and personalisation.

    We plan to use Cookies Eye to manage cookie consent preferences.

    We also plan to use Google Analytics 4 (GA4) for website analytics and Google Tag Manager (GTM) for managing website tags.

    Non-essential cookies and related tracking technologies are activated in accordance with visitors’ consent preferences and applicable legal requirements.

    Further information will be provided in our separate Cookies Policy.

    11. Your Data Protection Rights

    Under the GDPR, and subject to the applicable legal conditions, you have the right to:

    • Access: Request access to your personal data.
    • Rectification: Request correction of inaccurate or incomplete information.
    • Erasure: Request deletion of personal data where applicable.
    • Restriction: Request restriction of certain processing activities.
    • Data portability: Receive your personal data in a structured, commonly used and machine-readable format where applicable.
    • Objection: Object to processing based on legitimate interests.
    • Withdrawal of consent: Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
    • Direct marketing objection: Object at any time to the processing of your personal data for direct marketing purposes.

    To exercise your rights, please contact info@lovelyfinds.gr.

    We will respond without undue delay and generally within one month, in accordance with the GDPR.

    12. Data Security

    We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration and unlawful disclosure.

    These measures may include secure HTTPS connections, controlled administrative access, software updates and appropriate security procedures.

    Although we take reasonable steps to safeguard personal data, no internet-based service can guarantee absolute security.

    13. Children’s Privacy

    Our online store is not specifically directed at children, and we do not intentionally seek to collect children’s personal data without an appropriate legal basis or authorisation.

    If you believe that a child’s personal data has been submitted to us in violation of applicable law, please contact us.

    14. Right to Lodge a Complaint

    If you believe that the processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

    Hellenic Data Protection Authority (HDPA)
    Website: https://www.dpa.gr

    15. Changes to This Privacy Policy

    We may update this Privacy Policy to reflect changes in legislation, our services or the way our website operates.

    The current version will be published on this page together with its last updated date.

    16. Contact Information

    For questions about this Privacy Policy or the processing of your personal data, please contact:

    Lovely Finds
    28 Oktovriou 10–12
    14231 Nea Ionia, Athens, Greece

    Email: info@lovelyfinds.gr
    Telephone: +30 2102794059
    Website: https://lovelyfinds.gr