Last updated: September 2026

Koumart respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit koumart.com, contact us, create an account or place an order through our online shop.

1. Data Controller

The data controller responsible for your personal data is:

ΜΥΡΣΙΝΗ ΙΩΑΝΝΑ ΚΟΥΛΟΥΔΗ ΜΟΝ. ΙΚΕ
Trading name: Koumart
Location: Lesvos, Greece
G.E.MI. No.: 160103642000
Email: info@koumart.com

Before the shop launches commercially, add the company’s full registered address, VAT number and business telephone number here.

2. Personal data we collect

Depending on how you use our website, we may collect:

Information you provide to us

When you place an order, create an account or contact us, this may include:

  • name and surname
  • billing address
  • shipping address
  • email address
  • telephone number
  • company and invoicing information where applicable
  • VAT or tax information where required for an invoice
  • account username and password information
  • order details
  • messages and correspondence you send to us

Payment information

Payments may be processed by third-party payment providers.

Koumart does not necessarily receive or store your complete card details. Payment information is processed according to the systems and privacy practices of the payment provider used at checkout.

Technical information

When you visit the website, certain technical data may be processed automatically, such as:

  • IP address
  • browser type
  • device type
  • operating system
  • pages visited
  • date and time of access
  • basic server and security logs

3. Why we use your personal data

We may process your personal information in order to:

  • process and fulfil your orders
  • arrange delivery
  • process payments and refunds
  • provide invoices or receipts
  • manage your customer account
  • respond to enquiries
  • provide customer support
  • prevent fraud and protect the security of the website
  • comply with accounting, tax and other legal obligations
  • maintain and improve the operation of the website

4. Legal bases for processing

Depending on the purpose, we process personal data on one or more of the following legal bases:

Performance of a contract

We process information necessary to accept, manage and fulfil an order or provide services requested by you.

Legal obligation

We may retain and process certain information where required by tax, accounting, consumer-protection or other applicable laws.

Legitimate interests

We may process limited information where necessary for legitimate business purposes such as website security, fraud prevention and the effective operation of our services, provided that these interests do not override your rights.

Consent

Where consent is legally required, for example for certain non-essential cookies or future electronic marketing activities, we will request it before the relevant processing takes place.

5. Orders and customer accounts

When you shop with Koumart, WooCommerce may process information required to operate the online store, including customer details, orders, shopping-cart information and account data.

If you create a customer account, information necessary to maintain that account will be stored until the account is deleted or until retention is no longer necessary, subject to any legal obligations requiring certain information to be retained.

6. How long we keep your data

We retain personal data only for as long as necessary for the purpose for which it was collected and for any period required by applicable legal, tax or accounting obligations.

Different categories of information may therefore have different retention periods.

For example, records relating to purchases and invoices may need to be retained for the period required by Greek tax and accounting law.

Account information may be retained while the customer account remains active, subject to legal retention requirements.

The GDPR requires retention periods, or at least the criteria used to determine them, to be communicated transparently.

7. Who may receive your data

Where necessary to operate the shop, personal data may be shared with service providers such as:

  • payment processors
  • banks or payment institutions
  • courier and delivery companies
  • website hosting providers
  • IT and website-support providers
  • accounting or tax advisers
  • fraud-prevention or security providers
  • public authorities where disclosure is legally required

We only share information that is reasonably necessary for the relevant purpose.

Once you decide which payment gateway and courier you will use, I would replace these generic categories with the actual providers.

8. International data transfers

Some technology or payment providers may process data outside the European Economic Area.

Where personal data is transferred internationally, appropriate safeguards will be used where required under applicable data-protection law.

The final version of this section should be reviewed once the payment, analytics, email and other external providers used by the shop are known.

9. Cookies

Our website may use cookies and similar technologies.

Some cookies are strictly necessary for the operation of the website and online shop, for example to maintain shopping-cart sessions, account sessions, security functionality or cookie preferences.

Other cookies, including certain analytics, advertising or third-party cookies, should only be activated where the required consent has been obtained.

Under Greek rules implementing the ePrivacy framework, non-essential cookies generally require prior informed consent, while cookies strictly necessary to provide a service requested by the user may be used without that consent.

You can manage your cookie preferences through the cookie controls provided on the website, where available, and through your browser settings.

10. Google Maps and third-party content

Our website may include embedded third-party services such as Google Maps.

When such content is loaded, the third-party provider may receive technical information such as your IP address and may use cookies or other technologies according to its own privacy practices.

Where consent is legally required before loading non-essential third-party content or cookies, such content should be configured accordingly.

11. Google Translate

The shop may provide optional links allowing visitors to view machine-translated versions of certain shop pages through Google Translate.

When you choose to use this feature, you leave the Koumart website environment and interact with a service provided by Google. Google may process information in accordance with its own privacy policy.

Machine-translated content is provided for convenience and the English version of the shop remains the original version.

12. Your data-protection rights

Subject to the conditions of applicable law, you may have the right to:

  • access your personal data
  • correct inaccurate or incomplete information
  • request deletion of your data
  • restrict certain processing
  • object to certain processing
  • receive certain data in a portable format
  • withdraw consent where processing is based on consent
  • lodge a complaint with a supervisory authority

These are among the rights that organisations must communicate to individuals under the GDPR.

To exercise your rights, contact:

info@koumart.com

We may need to verify your identity before responding to certain requests.

13. Complaints

If you have concerns about the way your personal data is handled, please contact us first at:

info@koumart.com

You also have the right to lodge a complaint with the competent supervisory authority.

In Greece, the competent authority is the Hellenic Data Protection Authority.

14. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

No internet transmission or storage system can be guaranteed to be completely secure.

15. Children

The online shop is not specifically directed at children.

We do not knowingly seek to collect personal information from children for marketing purposes.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, shop, service providers or legal obligations.

The current version will always be published on this page together with the date of the latest update.

17. Contact

For privacy-related enquiries:

Koumart
ΜΥΡΣΙΝΗ ΙΩΑΝΝΑ ΚΟΥΛΟΥΔΗ ΜΟΝ. ΙΚΕ
Lesvos, Greece
G.E.MI. No.: 160103642000
Email: info@koumart.com