Privacy Policy (including Cookie Policy)

Island Nomads — Athanasiou Diakou 37-39, Nea Erythrea, Athens, Greece
Email: info@islandnomads.eu • Website: https://islandnomads.eu/

Effective date: August 15, 2025

 

1. Who We Are

We are Island Nomads (“Island Nomads”, “we”, “us”), the operator of https://islandnomads.eu/ and the seller of clothing and printed artworks. For the purposes of the EU and UK data protection laws, we act as the Data Controller for personal data we process about you. Our registered contact address is: Athanasiou Diakou 37-39, Nea Erythrea, Athens, Greece. You can contact us at info@islandnomads.eu.

2. Data Protection Officer (DPO)

We have appointed a Data Protection Officer. You can reach our DPO, Marios Sounoglou, at dpo@islandnomads.eu or by phone at +30 6948757705.

3. Scope and Applicable Laws

This Policy explains how we collect, use, share, and safeguard your personal data when you visit our website, make a purchase, or interact with us. We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable privacy laws. For California residents, we include disclosures consistent with the CCPA/CPRA.

4. Personal Data We Collect

– Identity and contact data (name, email, billing and shipping address, phone).
– Order and transaction data (products purchased, order value, currency, delivery preferences).
– Payment data (payment method, payment status). We do not store full card numbers; payments are processed by third‑party providers.
– Customer support communications and preferences.
– Technical and usage data (IP address, device identifiers, browser type, time zone, pages viewed, referral URLs).
– Cookies and similar technologies data (see Cookie Policy below).

5. Sources of Personal Data

We collect information directly from you (e.g., checkout, contact forms), automatically through cookies and similar technologies, and from third parties such as payment processors, courier partners, analytics, anti‑fraud and marketing service providers.

6. Purposes and Legal Bases

We process your personal data for the following purposes under the legal bases indicated:
– To process and deliver your orders, take payment, and provide customer service (performance of a contract).
– To operate, secure, and improve our website and services, including fraud prevention (legitimate interests; in some regions, consent for analytics/marketing cookies).
– To send service communications (performance of a contract/legitimate interests) and, where permitted, marketing messages (consent or legitimate interests with opt‑out).
– To comply with legal obligations (tax, accounting, consumer protection, product safety).

7. Sharing Your Data

We share personal data with carefully selected service providers acting on our instructions: hosting and IT support, payment gateways, anti‑fraud tools, couriers and logistics, customer service platforms, analytics and marketing providers. We may disclose data when required by law or to protect our rights, users, or the public. We do not sell personal data.

8. International Data Transfers

We operate globally and may transfer your personal data outside your country (including outside the EEA/UK). When we do, we rely on appropriate safeguards, such as EU/UK Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms.

9. Data Retention

We retain personal data only as long as necessary for the purposes described: order and invoice records typically for 6–10 years to meet tax and accounting obligations; customer service records for up to 3 years after the last interaction; marketing data until you withdraw consent or object; and web logs for up to 12 months unless a longer period is required for security or legal purposes.

10. Your Rights

Subject to legal limits, you may have rights to access, correct, delete, or port your data; to object to or restrict processing; and to withdraw consent at any time (without affecting prior lawful processing). EEA/UK residents may also lodge a complaint with a supervisory authority. California residents have rights to know, delete, correct, and opt‑out of certain sharing; to exercise these rights, contact us as set out below.

11. Children

Our site is not directed to children under 16 (or under 13 in the U.S.), and we do not knowingly collect their data. If you believe a child has provided data to us, contact our DPO and we will delete it where required.

12. Security

We use technical and organizational measures appropriate to the risk to protect your personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Cookies & Tracking Technologies (Cookie Policy)

Cookies are small text files placed on your device to ensure the website functions, remember preferences, and analyze traffic. We use: (a) strictly necessary cookies (site operation, security, cart/checkout); (b) preference cookies (language, region); (c) performance/analytics cookies (site usage to improve services); and (d) marketing/advertising cookies (to measure campaigns). Non‑essential cookies are used only with your consent where required by law.

Managing cookies: You can manage your preferences via our cookie banner and through your browser settings. Blocking some cookies may impact site functionality (e.g., checkout). Third‑party cookies may be set by analytics and advertising partners; see their policies for details.

14. Exercising Your Privacy Rights

To exercise your rights or ask a question, email our DPO at dpo@islandnomads.eu or write to Athanasiou Diakou 37-39, Nea Erythrea, Athens, Greece. We may need to verify your identity. We aim to respond within one month (or as required by law).

15. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with an updated effective date. Please review this Policy periodically.

16. Contact

Data Controller: Island Nomads
Address: Athanasiou Diakou 37-39, Nea Erythrea, Athens, Greece
Email: info@islandnomads.eu
DPO: Marios Sounoglou — dpo@islandnomads.eu, +30 6948757705