Privacy policy

Last updated: September 23, 2026

This Privacy Policy describes how SEVEN SECONDS O.E., trading as Seven Seconds (“Seven Seconds”, “we”, “us” or “our”), collects, uses, processes and discloses your personal information when you visit or use sevenseconds.shop (the “Site”), purchase products from us, communicate with us, or otherwise use our services (collectively, the “Services”).

For the purposes of this Privacy Policy, “you” and “your” refer to you as a user of the Services, whether you are a customer, website visitor or another individual whose personal information we process.

Our online store is powered by Shopify, which provides the ecommerce platform that enables us to offer the Services.

Please read this Privacy Policy carefully.

1. Who We Are

For the purposes of applicable data protection legislation, including the General Data Protection Regulation (“GDPR”), the controller of your personal information is:

SEVEN SECONDS O.E.
Petroupoleos 78
Ilion 131 23
Greece

Email: sevensecondsgr@gmail.com
VAT No.: 803185102
G.E.MI. No.: 191571201000

Where another organisation, including Shopify, acts as an independent controller for specific processing activities, that organisation is responsible for its own processing as described in its applicable privacy notices.

2. Personal Information We Collect

The personal information we collect depends on how you interact with the Site and the Services.

When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you. Personal information does not include information that has been anonymised or de-identified so that it can no longer reasonably be associated with an identifiable individual.

We may collect or process the following categories of personal information:

  • Contact information, including your name, billing address, shipping address, email address and telephone number.
  • Order and transaction information, including products you purchase, return, exchange or cancel, your order history, delivery information, payment status and transaction details.
  • Payment information. Payment details necessary to complete your purchase may be collected and processed by Shopify and/or our authorised payment service providers. We generally do not have access to your complete payment card credentials and may instead receive information such as payment status, payment method and transaction confirmation.
  • Account information, including login details, account settings, preferences and other account-related information where customer accounts are available.
  • Shopping information, including products you view, add to your cart, save or purchase and, where such features are available, information concerning reviews, wishlists, referrals, gift cards or similar functionality.
  • Customer support and communications, including information you choose to provide when you contact us, send us an email or otherwise communicate with us.
  • Device and technical information, including your IP address, browser type, device type, operating system, network information and other technical or online identifiers.
  • Usage information, including information regarding how and when you access, browse and interact with the Site and Services.
  • Marketing preferences, including your preferences regarding promotional communications and advertising.
  • Cookie and tracking information, including information collected through cookies, pixels and similar technologies, subject to applicable law and your consent choices where required.

We do not intentionally request or collect special categories of sensitive personal data unless such processing is necessary, lawful and appropriately disclosed.

3. Information We Collect Directly From You

You may provide personal information directly to us when you:

  • place or manage an order;
  • create or manage an account;
  • request a return, exchange or refund;
  • contact customer support;
  • subscribe to marketing communications;
  • submit a review or other content, where these features are available;
  • otherwise communicate or interact with us.

Certain information may be required in order for us to provide a particular Service. If you choose not to provide information that is necessary to complete an order or provide a requested Service, we may be unable to provide that Service to you.

4. Information We Collect Automatically

When you use the Site, certain information may be collected automatically through cookies, pixels and similar technologies.

This information may include your IP address, browser and device information, network information, approximate location derived from technical information, pages viewed, actions performed on the Site and information regarding your interaction with the Services.

Where required by applicable law, non-essential cookies and tracking technologies are activated only in accordance with your consent choices.

5. Information We Receive From Third Parties

We may receive information from third parties that assist us in operating and providing the Services, including:

  • Shopify;
  • payment service providers;
  • courier and delivery providers;
  • hosting and technology providers;
  • analytics providers;
  • marketing and advertising providers, where applicable;
  • customer support providers;
  • other service providers that process information on our behalf.

When you interact with advertisements, emails or other communications, certain information may also be collected through technologies such as pixels, web beacons or similar tools, subject to applicable law and your consent choices.

Information received from third parties is handled in accordance with this Privacy Policy and applicable law.

6. How We Use Your Personal Information

Providing Products and Services

We process personal information to accept and fulfil orders, process payments, arrange delivery, manage customer accounts, process returns, exchanges and refunds, communicate about orders and provide customer support.

The legal basis for this processing under the GDPR is generally the performance of a contract with you or taking steps at your request before entering into a contract.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to send promotional communications and to advertise or promote our products and Services.

Where consent is required for a particular marketing activity, tracking technology or personalised advertising, we rely on your consent. Where applicable law permits us to rely on another legal basis, such as our legitimate interests, we will do so only where your rights and freedoms do not override those interests.

You may withdraw consent or unsubscribe from marketing communications at any time.

Security and Fraud Prevention

We may process personal information to detect, investigate and prevent fraudulent, illegal, malicious or unauthorised activity and to protect our customers, Site, Services and business.

Our legal basis for this processing may include our legitimate interests in maintaining the security and integrity of the Services and compliance with applicable legal obligations.

If you create a customer account, you are responsible for keeping your account credentials secure and should not share your password or other access credentials with other persons.

Customer Communication and Service Improvement

We process information to respond to your questions, provide customer support, maintain our relationship with you and improve the Services.

Depending on the circumstances, this processing may be necessary for the performance of our contract with you or based on our legitimate interests in operating and improving our business.

Legal and Regulatory Obligations

We may process and retain information where necessary to comply with tax, accounting, consumer protection, regulatory or other legal obligations.

We may also use information to establish, exercise or defend legal claims and respond to lawful requests from courts, regulators, law enforcement agencies or other competent authorities.

7. Legal Bases for Processing

Where the GDPR or other applicable European data protection legislation applies, we process personal information only where an appropriate legal basis exists.

Depending on the relevant processing activity, we may rely on:

  • Performance of a contract or steps taken before entering into a contract, including processing necessary to accept orders, receive payment, deliver products and manage returns, refunds, exchanges or customer requests.
  • Compliance with a legal obligation, including obligations arising from tax, accounting, consumer protection and other applicable laws.
  • Legitimate interests, including the operation, security and improvement of our business and Services, fraud prevention, customer service and the establishment or defence of legal claims, provided that those interests are not overridden by your rights and freedoms.
  • Consent, including where required for non-essential cookies, certain tracking technologies, personalised advertising or marketing communications.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

8. Cookies and Similar Technologies

Like many websites, we use cookies and similar technologies.

Cookies and similar technologies may be used to:

  • enable essential website and checkout functionality;
  • remember your preferences;
  • maintain security;
  • understand how visitors use the Site;
  • analyse and improve the Services;
  • support advertising and marketing where permitted by law.

Essential cookies may be necessary for the Site to function.

Where required by applicable law, analytics, advertising and other non-essential cookies will only be used in accordance with your consent choices.

You may be able to manage your preferences through the cookie banner or privacy controls available on the Site.

You may also configure your browser to restrict or delete cookies. However, disabling certain cookies may affect the functionality of the Site.

Further information about cookies used by Shopify is available in the Shopify Cookie Policy.

9. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to operate our business and provide the Services.

Recipients may include:

  • Shopify and technology providers, which provide the ecommerce infrastructure and technology necessary to operate the Site.
  • Payment service providers, which process payments and related transactions.
  • Courier and fulfilment providers, which require information such as your name, delivery address and contact details in order to deliver your order.
  • IT, hosting, analytics and customer support providers, where required to operate and improve the Services.
  • Marketing and advertising partners, where applicable and subject to applicable consent and privacy requirements.
  • Professional advisers, including accountants, lawyers and other advisers where necessary.
  • Public authorities, courts, regulators or law enforcement agencies, where disclosure is required or permitted by law.

We may also disclose information in connection with a merger, acquisition, restructuring, sale of business or assets, insolvency or similar business transaction.

Where you specifically request or consent to disclosure to a third party, we may disclose information in accordance with your request.

We disclose only information reasonably necessary for the relevant purpose and subject to applicable legal requirements.

10. Relationship With Shopify

Our online store is hosted and powered by Shopify.

Shopify collects and processes personal information relating to your access to and use of the Site in order to provide, secure and improve its ecommerce platform and related services.

Information submitted through the Site may therefore be transmitted to and processed by Shopify and its authorised service providers, including in countries other than the country in which you reside.

Where Shopify Network Intelligence or other Shopify Enhanced Services are enabled, Shopify may process information regarding your interactions with our Store, Shopify and other Shopify merchants in order to provide Enhanced Services. Such Services may include improved personalisation, store performance, fraud prevention and more relevant advertising.

In certain circumstances, Shopify may process personal information for its own purposes and act as an independent controller in relation to that processing. In those circumstances, Shopify is responsible for its own processing and for responding to applicable requests concerning that processing.

For more information about how Shopify processes your personal information, please review the Shopify Consumer Privacy Policy.

Depending on your location, you may also exercise certain rights relating to Shopify's processing through the Shopify Privacy Portal.

11. Targeted Advertising and Data Sharing

We do not sell your personal information for monetary consideration.

However, depending on the technologies and advertising services used and the privacy laws applicable in your jurisdiction, certain disclosures of personal information for personalised or targeted advertising may be legally characterised as “selling”, “sharing” or “targeted advertising”.

Where applicable, you may have the right to opt out of such processing.

Where required by law, we provide consent or opt-out mechanisms through the Site or through Shopify's customer privacy tools.

For users in the European Economic Area, United Kingdom or Switzerland, advertising based on tracking technologies is subject to applicable consent requirements.

12. Third-Party Websites and Links

The Site may contain links to third-party websites, platforms or services.

We do not control those third parties and are not responsible for their privacy or security practices.

If you access a third-party website or service, you should review its privacy policy and applicable terms.

Information you provide in public or semi-public areas, including information shared through third-party social media platforms, may be visible to other users of those platforms.

The inclusion of a third-party link on the Site does not, by itself, constitute endorsement of that third party or its practices.

13. Children's Data

The Services are not specifically intended for children, and we do not knowingly collect personal information from children in circumstances where such processing would not be permitted under applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us unlawfully, please contact us so that we can review and, where appropriate, delete the information.

We do not knowingly sell or share children's personal information for targeted advertising in circumstances prohibited by applicable law.

14. Security of Your Information

We use reasonable technical, organisational and administrative measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no security system, electronic transmission or data storage method can be guaranteed to be completely secure.

You should avoid sending highly sensitive or confidential information through insecure communication channels.

15. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and in accordance with applicable legal requirements.

The appropriate retention period depends on factors including:

  • whether we need the information to fulfil an order or maintain your account;
  • applicable tax and accounting obligations;
  • consumer protection requirements;
  • fraud prevention and security requirements;
  • dispute resolution;
  • establishment, exercise or defence of legal claims.

Once information is no longer required, it may be deleted or anonymised in accordance with applicable law and our technical capabilities.

16. Your Rights and Choices

Depending on your location and applicable law, you may have some or all of the following rights regarding your personal information.

These rights are not absolute and may be subject to conditions, limitations or exceptions provided by applicable law.

Right of Access

You may request information about whether we process your personal information and obtain access to that information.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal information in circumstances provided by applicable law.

Right to Restriction of Processing

You may request that processing of your personal information be restricted in certain circumstances.

Right to Object

You may object to certain processing based on legitimate interests and to processing for direct marketing purposes.

Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format and request its transmission to another controller.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Marketing Preferences

You may unsubscribe from promotional emails at any time by using the unsubscribe option contained in those communications.

Even if you unsubscribe from marketing communications, we may continue sending non-promotional communications concerning orders, payments, deliveries, returns, customer support or other transactions.

Rights Relating to Targeted Advertising or Data Sharing

Where applicable law grants such rights, you may request to opt out of certain processing legally characterised as a sale, sharing or targeted advertising.

These rights are subject to applicable legal requirements and exceptions.

To exercise your rights, contact us at sevensecondsgr@gmail.com.

We may request information reasonably necessary to verify your identity before processing your request.

Where permitted by applicable law, an authorised representative may submit a request on your behalf, subject to appropriate evidence of authorisation and identity verification.

We will respond within the time periods required by applicable law.

17. Complaints

If you have concerns or complaints regarding how we process your personal information, please contact us at sevensecondsgr@gmail.com.

You also have the right, where applicable, to lodge a complaint with the competent data protection supervisory authority.

For individuals in Greece, the competent supervisory authority is the Hellenic Data Protection Authority .

For individuals elsewhere in the European Economic Area, you may contact the competent supervisory authority in your country of habitual residence, place of work or place of the alleged infringement.

18. International Transfers

Your personal information may be transferred to, stored or processed in countries outside Greece or the European Economic Area, including where Shopify or other service providers operate internationally.

Where personal information is transferred outside the European Economic Area and applicable law requires safeguards, we or the relevant service provider rely on legally recognised transfer mechanisms, as applicable, including:

  • an adequacy decision of the European Commission;
  • Standard Contractual Clauses approved by the European Commission; or
  • another legally recognised transfer mechanism.

Further information regarding Shopify's international processing and safeguards is available in Shopify's applicable privacy documentation.

19. SMS / MMS Marketing

If we offer SMS or MMS marketing and you choose to opt in, we may use the telephone number and related information you provide in order to send the communications you requested.

Information provided specifically for such messaging may be shared with telecommunications carriers, messaging platform providers and other service providers only as necessary to provide the messaging service, comply with applicable law or protect our rights.

We do not sell telephone numbers collected specifically for our messaging programme for monetary consideration.

You may withdraw your consent to receive marketing messages in accordance with the instructions provided in the relevant message or by contacting us.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our business, practices, technology, Services, Shopify functionality or applicable legal and regulatory requirements.

When changes are made, we will publish the updated Privacy Policy on the Site and revise the “Last updated” date.

Where required by law, we will provide additional notice regarding material changes.

21. Contact

If you have any questions about this Privacy Policy or our privacy practices, or if you wish to exercise any privacy rights available to you, please contact:

SEVEN SECONDS O.E.
Petroupoleos 78
Ilion 131 23
Greece

Email: sevensecondsgr@gmail.com
VAT No.: 803185102
G.E.MI. No.: 191571201000

For the purposes of applicable data protection laws, SEVEN SECONDS O.E. is the controller of your personal information, except where another entity acts as an independent controller for specific processing activities as described in this Privacy Policy.