Privacy policy

Last updated: [5 Nov 2026]

This Privacy Policy explains how we collect, use, share and protect your personal information when you visit agiografiaicons.com (the "Site"), buy from us, or contact us (together, the "Services"). "You" means anyone whose information we handle under this policy: customers, visitors and anyone who writes to us.

Who we are

The data controller is Alpha Forensics L.P. (Greek limited partnership, trading as Agiografia Icons), 175 Lagkada Str., 56430 Thessaloniki, Greece. General Commercial Registry (GEMI) no. 175132206000, VAT no. 802368572. Email: info@agiografiaicons.com, phone: +30 2312 314266.

What we collect

Information you give us

  • Contact and order details: name, billing and shipping address, email, phone number, the items you order and your payment confirmation. We never see or store your full card details; payments are processed directly by our payment providers.
  • Account details: if you create an account, your login email, password (stored encrypted by Shopify), saved addresses and order history.
  • Personalisation: names, dedications, custom lettering or other text you ask us to add to an icon, and the answers you give in our Icon Advisor (for example a name or an occasion).
  • Your lists and reminders: icons you save to your wishlist or prayer corner, and feast-day reminders you ask for.
  • Messages: anything you write to us by email, phone, WhatsApp, the chat on our Site or our contact and commission forms.
  • Reviews: your rating, review text, photos and the name you choose to show.

Information collected automatically

When you use the Site we collect technical information such as your IP address, approximate location derived from it, device and browser type, pages viewed and actions taken (for example adding an item to the cart). Some of this is collected with cookies and similar technologies; see Cookies below.

Information from others

Our payment providers tell us whether a payment succeeded and may flag possible fraud. Couriers send us delivery status updates. If you buy from us on a marketplace such as Etsy or Amazon, that platform shares the order details we need to fulfil your order; your use of the marketplace is governed by its own privacy policy.

Why we use your information, and our legal basis

  • To take, make and deliver your order, including personalisation, shipping, customs paperwork, returns and order emails. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
  • To keep invoices and accounting records as Greek tax law requires. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • To answer your questions and handle commissions, complaints and requests. Legal basis: contract, or our legitimate interest in replying to you (Art. 6(1)(b) and (f) GDPR).
  • To send our newsletter, feast-day reminders and emails about your saved lists. Legal basis: your consent (Art. 6(1)(a) GDPR). If you have bought from us, we may also email you about similar icons; you can opt out in every email (Greek Law 3471/2006, Art. 11).
  • To ask for and publish reviews. Legal basis: our legitimate interest in showing genuine customer feedback (Art. 6(1)(f) GDPR). Your review is published with the name you choose.
  • To keep the Site secure and prevent fraud. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
  • To understand how the Site is used and improve it. Legal basis: your consent for non-essential cookies (Art. 6(1)(a) GDPR).

Religious beliefs. Buying a religious icon may suggest something about your faith. We do not use your purchases or messages to infer, profile or record your religious beliefs, and we never share such information.

We do not make decisions about you by automated means alone, and we do not run paid advertising or sell your personal information.

Cookies

Strictly necessary cookies (for example, to keep your cart and process checkout) are set without consent, as the law allows. All other cookies, such as analytics, are only set after you accept them in our cookie banner. You can change or withdraw your choice at any time through the Cookie settings link at the bottom of every page. You can also block cookies in your browser, although some features may then stop working.

Who we share your information with

We share only what each recipient needs, and only for the purposes above:

  • Shopify, which hosts our store, checkout, customer accounts and our order and marketing emails (Shopify Email).
  • Payment providers: Shopify Payments / Stripe, PayPal, Viva Wallet.
  • Couriers: FedEx, DHL, ACS, ELTA, which receive your name, address, phone number and, for customs, the contents and value of your parcel.
  • Partner workshops that make some of our reproductions, which receive only the details needed to make your icon (for example the lettering or dedication), not your contact details.
  • Our accountant and, when the law requires, tax, customs or other public authorities.
  • A buyer or successor if our business is ever sold or reorganised, under this same policy.

Our service providers act on our instructions under data-processing agreements.

International transfers

Some providers process data outside the European Economic Area. Shopify and Canada-based processing are covered by EU adequacy decisions. Transfers to the United States rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. Transfers to the United Kingdom rely on the UK adequacy decision.

How long we keep your information

  • Invoices and order records: for as long as Greek tax law requires.
  • Your account: until you delete it or ask us to.
  • Newsletter and reminders: until you unsubscribe.
  • Messages and commission requests: up to 2 years after our last exchange, unless they relate to an order.
  • Reviews: for as long as they are published.
  • Cookie and analytics data: as shown in the cookie banner, and no longer than 13 months.

Your rights

You have the right to access your information, correct it, have it deleted, restrict or object to its use, receive a copy in a portable format, and withdraw your consent at any time (this does not affect anything done before). You can always object to direct marketing, and every marketing email contains an unsubscribe link.

To use any of these rights, email info@agiografiaicons.com. We may ask you to confirm your identity, and we reply within one month (extendable by two months for complex requests, in which case we will tell you why).

If you believe we have not handled your information properly, please contact us first. You also have the right to complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), 1–3 Kifisias Ave., 115 23 Athens, www.dpa.gr, or to the authority in your own EU country (list of EU authorities).

If you live in the United States

We do not sell your personal information or share it for cross-context behavioural advertising, and we have not done so in the past 12 months. Depending on your state, you may have the right to know, access, correct and delete your personal information, to appeal our decision on a request, and to use an authorised agent (we will ask for proof of authorisation). We honour the Global Privacy Control signal as an opt-out. We will not discriminate against you for using these rights.

Children

Our Services are not directed at children under 15, and we do not knowingly collect their information. If you believe a child has given us personal information, please contact us and we will delete it.

Security

We use the security measures of Shopify and our providers, including encrypted connections (HTTPS) and restricted access. No system is completely secure, so please do not send card details or other sensitive information by email or chat.

Links to other sites

Our Site links to other sites and social media. Their privacy practices are their own; please read their policies.

Changes to this policy

We may update this policy. The current version is always on this page with its date, and we will tell you directly about any important change.