Privacy policy

Last updated: September 2026

At Dora Galani Jewellery, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how THEODORA GALANI TOU GEORGIOU (GALDO) collects, uses, stores and protects personal data when you visit www.doragalani.com, place an order, contact us or otherwise interact with our services.

1. WHO WE ARE

THEODORA GALANI TOU GEORGIOU (GALDO) is the data controller responsible for the processing of personal data described in this Privacy Policy.

18A Feidiou Street
Athens, Attica
Greece

Tel: +30 210 8022576
Email: info@doragalani.com

VAT No.: 147117651
Tax Office: KEFODE Attikis
GEMI Registration No.: 157395201000

2. PERSONAL DATA WE COLLECT

Depending on how you interact with our website, we may collect:

• Name and surname
• Billing and shipping address
• Email address
• Telephone number
• Order and transaction details
• Information you provide when contacting us
• Account information, where applicable
• IP address and device/browser information
• Website usage and browsing information
• Cookie identifiers and similar online identifiers
• Information relating to your interactions with our website, where permitted by your cookie preferences

We do not intentionally collect sensitive personal data through our online store.

3. HOW WE USE YOUR PERSONAL DATA

We use personal data only where there is a lawful basis for doing so, including where it is necessary to:

• Process and fulfil your orders
• Process payments and refunds
• Arrange shipping and delivery
• Communicate with you about your order
• Respond to enquiries and customer service requests
• Maintain and secure our website
• Prevent fraud, misuse and unauthorised activity
• Comply with accounting, tax and other legal obligations
• Analyse website performance and improve our products, services and website
• Measure the effectiveness of our advertising and marketing, where you have provided the required consent

4. LEGAL BASES FOR PROCESSING

Depending on the purpose, we process personal data on the following legal bases:

Performance of a contract
When processing is necessary to accept, process and fulfil your order, arrange payment, shipping, delivery, returns or refunds.

Legal obligation
When processing is necessary to comply with accounting, tax, consumer protection or other legal obligations.

Legitimate interests
When processing is necessary for purposes such as website security, fraud prevention, protecting our business, responding to enquiries and improving our services, provided that these interests do not override your rights and freedoms.

Consent
Where required, we rely on your consent for certain cookies, analytics, advertising or other optional processing activities. You may withdraw your consent at any time.

5. PAYMENT PROVIDERS

Payments made through our website may be processed by third-party payment providers, including Viva.com and PayPal, depending on the payment method selected at checkout.

These providers may receive the personal and transaction information necessary to process and secure your payment, prevent fraud and comply with applicable legal obligations.

Payment providers process personal data in accordance with their own privacy policies and applicable data protection laws.

We do not store complete payment card details on our own systems.

Viva.com and PayPal may process certain personal data independently in connection with the payment services they provide.

6. SHIPPING & DELIVERY

To fulfil your order, we may share the information necessary for delivery with our shipping and logistics providers, including DHL Express and BOX NOW.

For deliveries within Greece, customers may choose between BOX NOW locker delivery and DHL Express delivery to their address, where available.

For BOX NOW deliveries, we may contact you by telephone after your order is placed to confirm the locker that is most convenient for you.

The information shared may include your name, delivery address or locker details, telephone number, email address and order-related information necessary to arrange and track delivery.

7. SHOPIFY

Our online store is powered by Shopify, which provides the e-commerce platform through which we sell our products.

Shopify processes personal data on our behalf and may also process certain information as an independent controller for purposes described in its own privacy documentation.

Shopify may process information such as customer details, order information, device information and website activity as necessary to provide and secure its services.

8. ANALYTICS & ADVERTISING

We use third-party services to understand how visitors use our website and to measure and improve our advertising.

These services may include:

• Google Analytics
• Google Ads
• Meta Pixel and Meta advertising services (Facebook and Instagram)
• Pinterest and Pinterest advertising services
• Shopify Analytics

Depending on the service and the applicable consent requirements, these technologies may collect information such as IP address, device and browser information, pages visited, interactions with the website, approximate location and online identifiers.

Where required by applicable law, non-essential analytics and advertising technologies are activated only after obtaining your consent through our cookie consent mechanism.

You can manage or withdraw your cookie consent through the available cookie settings on our website.

9. COOKIES

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the operation of the website, including functions such as shopping cart, checkout, security and basic website functionality.

Other cookies may be used for analytics, advertising, personalisation or measuring marketing performance.

Where required, we request your consent before using non-essential cookies.

You can change or withdraw your cookie preferences through our cookie consent mechanism.

10. WHO WE SHARE PERSONAL DATA WITH

We may share personal data with trusted third parties where necessary to provide our services or comply with our legal obligations.

These may include:

• Shopify
• Viva.com
• PayPal
• DHL Express
• BOX NOW
• Google and its relevant analytics and advertising services
• Meta
• Pinterest
• IT, hosting, security and technical service providers
• Professional advisers, accountants or legal advisers where necessary
• Public authorities or other bodies where required by law

We do not sell your personal data.

11. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law and that appropriate safeguards are in place where required.

Depending on the provider and circumstances, these safeguards may include an adequacy decision, Standard Contractual Clauses or other lawful transfer mechanisms.

12. HOW LONG WE KEEP PERSONAL DATA

We retain personal data only for as long as necessary for the purposes for which it was collected, including to fulfil orders, provide customer service, comply with legal, accounting and tax obligations, resolve disputes and protect our legitimate business interests.

Different types of data may be retained for different periods depending on their purpose and applicable legal requirements.

Where processing is based on consent, we retain the relevant information only for as long as necessary for that purpose, subject to any applicable legal obligations.

13. YOUR RIGHTS

Depending on the circumstances and applicable law, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of processing
• Object to certain processing
• Request portability of your personal data where applicable
• Withdraw consent where processing is based on consent

You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that your personal data rights have not been respected.

To exercise your rights or ask questions about the processing of your personal data, please contact us at:

info@doragalani.com

14. DATA SECURITY

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

15. CHILDREN’S PRIVACY

Our website is intended for general audiences and is not directed specifically at children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

16. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites or services, including social media platforms.

We are not responsible for the privacy practices or content of third-party websites. We recommend reviewing their respective privacy policies before providing personal information.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or applicable legal requirements.

The current version will always be published on this page, together with the date of the latest update.

18. CONTACT

If you have any questions about this Privacy Policy or how we process your personal data, please contact:

THEODORA GALANI TOU GEORGIOU (GALDO)