Privacy policy

This policy explains how IVORY collects and uses personal data through ivory.gr, in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Greek Law 4624/2019.

1. Who is responsible for your data

The data controller is Stefania Mamasoula, trading as IVORY THE BRAND, Ptolemaion 11, 142 32 Nea Ionia, Greece, Tax ID (ΑΦΜ) 169811569. For any question about your data, write to sales@ivory.gr.

2. What data we collect

We only collect the data you choose to send us through the forms on this website:

• Partner application: contact name, store name, city or area, email, phone, website or Instagram, type of store, how you heard about us and your message.
• Lookbook request: full name, boutique or company, city, email, phone, website or Instagram and your message.

Our hosting provider also keeps standard technical server logs (such as IP address, browser type and time of visit) for security purposes. We do not use analytics, advertising or tracking tools on this website.

3. Why we use it and on what legal basis

• To review partner applications and discuss a possible wholesale cooperation — steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• To answer lookbook requests and business enquiries — our legitimate interest in responding to professional enquiries about our collections (Article 6(1)(f) GDPR).
• To keep the website secure — our legitimate interest in protecting our systems (Article 6(1)(f) GDPR).

We will not add you to a newsletter or send you marketing messages unless you have separately agreed to it. We do not make automated decisions or create profiles about you.

4. Who receives your data

Your data is seen only by the IVORY team. It is also processed on our behalf by our hosting provider (Hostinger International Ltd.) and our email provider, under data processing terms as required by Article 28 GDPR. Where necessary, it may be shared with our accountant or legal advisers, or with public authorities when the law requires it. We never sell your data.

5. Transfers outside the EU

We do not intend to transfer your data outside the European Economic Area. If one of our providers does so, the transfer will be covered by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (Article 46 GDPR).

6. How long we keep it

• Enquiries and applications that do not lead to a cooperation: up to 2 years from our last contact, then deleted.
• Partner stores: for as long as we work together, and afterwards for as long as Greek tax and commercial law requires.
• Server logs: for the period set by our hosting provider for security purposes.

7. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format (Articles 15 to 21 GDPR). To exercise any of these rights, email sales@ivory.gr. We will reply within one month.

8. Complaints

If you believe your data has not been handled correctly, you can file a complaint with the Hellenic Data Protection Authority, Kifisias 1–3, 115 23 Athens, www.dpa.gr.

9. Cookies

For information about cookies, see our Cookie policy.

10. Changes to this policy

We may update this policy from time to time. The date at the top of the page always shows the latest version.