This Privacy Policy describes how A Taste of Chios ("we," "us," or "our") collects, uses, and shares information about you when you visit atasteofchios.com (the "Site"), make a purchase, or interact with us in any way. Please read this policy carefully.
1. Information We Collect
Information you provide directly
- Account information — when you create an account, we collect your name, email address, and password.
- Order information — when you place an order, we collect your name, email address, shipping address, and phone number. Payment card details are processed directly by Stripe and are never stored on our servers.
- Communications — if you contact us via the contact form or email, we retain those communications.
- Reviews — if you leave a review on the Explore Map, we collect your name, email (optional), and the content of your review.
- Newsletter signup — if you subscribe to our newsletter, we collect your email address.
Information collected automatically
- Log data — our hosting provider automatically records standard server log information, including your IP address, browser type, pages visited, and time of visit.
- Cookies — we use session cookies to maintain your login state and shopping cart. These cookies are essential for the site to function and expire when you close your browser. We do not use advertising or tracking cookies.
2. How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders, and send order confirmation and shipping notifications
- Maintain your account and provide customer support
- Send you our newsletter if you have subscribed (you can unsubscribe at any time)
- Improve and maintain the Site
- Comply with legal obligations
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
3. How We Share Your Information
We share your information only in the following limited circumstances:
- Stripe — our payment processor. When you make a purchase, your payment information is transmitted directly to Stripe. Stripe's privacy policy is available at stripe.com/privacy.
- Hosting provider (Hostinger) — our website is hosted on Hostinger's servers. Your data is stored on these servers in accordance with Hostinger's data processing agreements.
- Email service provider — if you subscribe to our newsletter, your email address will be stored with our email marketing provider (Mailchimp) in accordance with their privacy policy.
- Legal requirements — we may disclose your information if required to do so by law or in response to valid legal process.
4. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Order records are retained for a minimum of 7 years for accounting and legal purposes. You may request deletion of your account and personal data at any time by contacting us.
5. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access — the right to request a copy of the personal information we hold about you
- Correction — the right to request that we correct inaccurate information
- Deletion — the right to request that we delete your personal information
- Portability — the right to receive your information in a structured, machine-readable format
- Objection — the right to object to certain uses of your information
To exercise any of these rights, please contact us at hello@atasteofchios.com. We will respond within 30 days.
6. Cookies
We use the following cookies on this Site:
- Session cookie — stores your login state and shopping cart contents. This is an essential functional cookie. It expires when you close your browser.
We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or advertising cookies. We do not track you across other websites.
7. Children's Privacy
Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately.
8. Security
We take reasonable technical and organizational measures to protect your personal information. All data transmission on this Site uses HTTPS encryption. Payment processing is handled entirely by Stripe using industry-standard security. However, no method of transmission over the internet is 100% secure.
9. Third-Party Links
This Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: