Privacy Policy

1. Introduction

luso (“we”, “us”, “our”) is an online resort wear boutique based in Nafpaktos, Greece, offering curated collections from Greek designers through our website https://luso.gr.

We care about your privacy and about handling your personal data responsibly. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over it. By using our website and placing an order, you agree to the practices described here.

As a company established in the European Union, we process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Greek data protection law.

Business details

• Trading name: luso
• Legal / company name: Luso Resort Wear 
• VAT number (ΑΦΜ): 801300217
• GEMI number (ΓΕΜΗ): 153867612000
• Registered address: Kanavou Ioannou 5, Nafpaktos 303 00,
• Contact email:info@luso.gr

2. Data We Collect

We only collect the information we need to run the shop, fulfil your orders, and offer you a good experience.

Account data If you create an account, we store the name, email address, and password you provide, along with any additional details you add to your profile (such as a phone number or saved addresses). You can view, edit, or delete this information at any time from your account, and our administrators can also access it in order to help you.

Order and billing data When you place an order, we collect your name, billing and shipping addresses, email address, phone number, the items you purchased, and your order history. We need this information to process your purchase, issue your receipt or invoice, and meet our legal accounting and tax obligations.

Payment data Payments are handled by our payment provider, [payment provider — e.g. Viva Wallet / Stripe / your bank’s gateway]. Your full card details are entered directly with the provider and are not stored on our servers. We only receive confirmation of whether a payment succeeded, along with limited transaction reference data.

Shipping data To deliver your order, we share the recipient’s name, address, and phone number with our courier partner, ACS Courier, so they can create the shipment and contact you about delivery.

Communications If you contact us by email or through a contact or enquiry form, we keep the details you provide so we can respond and, where relevant, keep a record of your request. This information is used for customer service only.

Newsletter (if you subscribe) If you sign up for our newsletter, we store your email address (and name, if given) to send you updates about new collections and offers. You can unsubscribe at any time using the link in any email we send. [Remove this section if you don’t run a newsletter.]

Usage data We collect anonymised information about how visitors use our site (such as pages viewed and general location) to understand and improve the shopping experience. See sections 3 and 4 below.

3. How We Use Your Data

We use your personal data for the following purposes:

• Processing, fulfilling, and delivering your orders;
• Managing your account and providing customer support;
• Meeting our legal obligations, including tax and accounting requirements;
• Preventing fraud and keeping your account and our store secure;
• Sending you order-related updates (order confirmations, shipping notifications);
• With your consent, sending you marketing communications about new collections and offers;
• Improving our website and the overall shopping experience.

4. Cookies

Our website uses cookies — small text files stored on your device that help the site work properly and remember your preferences. We use them to:

• Keep your shopping cart and session working as you browse;
• Remember your preferences and whether you are logged in;
• Understand, on an anonymised basis, how our site is used so we can improve it.

You can disable or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect how the site functions, for example your ability to complete checkout. Where required, we ask for your consent to non-essential cookies through a cookie banner when you first visit the site.

5. Third Parties We Share Data With

We do not sell your personal data, and we never share it except as needed to run the shop and provide the services you expect. The partners we rely on include:

• Stripe— to process payments securely.
• ACS Courier — to deliver your orders.
• Hostinger — to host the website and store its data.
• Google Analytics — for anonymised website usage statistics. You can opt out using the Google Analytics Opt-out Browser Add-on.
• Meta / Facebook Pixel  — for advertising and measuring the performance of our ads.

Each of these providers processes your data only to perform their service for us and under their own privacy terms.

6. Who Has Access to Your Data

Within luso, access to your personal data is limited to the people who need it to do their jobs — our administrators and the staff who handle orders, deliveries, and customer support. If you are not a registered customer and have not placed an order, we hold no personal information about you beyond anonymised website usage data.

7. How Long We Keep Your Data

We keep your personal data only for as long as necessary:

• Order and invoicing records are retained for as long as required by Greek tax and accounting law.
• Account information is kept while your account is active. You can ask us to delete it at any time (see section 8).
• Contact and enquiry messages are kept for as long as needed to handle your request and any follow-up.
• Newsletter data is kept until you unsubscribe.

Some data we are legally obliged to keep (for example, invoices) cannot be deleted on request until the retention period required by law has passed.

8. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you and receive a copy of it;
• Rectify inaccurate or incomplete data;
• Erase your data (“right to be forgotten”), except where we are legally required to keep it;
• Restrict or object to certain processing of your data;
• Data portability — receive your data in a portable format;
• Withdraw consent at any time, where processing is based on consent (for example, marketing emails).

To exercise any of these rights, contact us at [contact email]. We will respond within the timeframe required by law.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) if you believe your data has been handled unlawfully — www.dpa.gr.

9. Security

We protect your data using appropriate technical and organisational measures. Our site uses SSL/HTTPS encryption so that information exchanged between you and our servers cannot be intercepted by unauthorised third parties. In the event of a data breach, we will take immediate steps to secure our systems and will notify affected customers and the relevant authority where required by law.

10. Links to Other Websites

Our site may contain links to third-party websites (for example, social media pages or designers’ sites). We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policy of any site you visit through a link from ours.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review it periodically.

Last updated: 1/8/2026