HellasCart ("HellasCart", "we", "us") is a Greek-operated Software-as-a-Service (SaaS) platform that enables tenants to create and run their own online stores. This Privacy Policy explains how we collect, use, and protect personal data when you use our platform, whether as a tenant, a tenant's customer, or a visitor to this website.
Depending on how you interact with HellasCart, we may collect:
We process personal data to: provide and maintain the HellasCart service; process payments and manage subscriptions; provide customer and technical support; communicate important service updates; comply with legal obligations; and improve platform security and performance.
Where the EU General Data Protection Regulation (GDPR) applies, we process personal data on the following legal bases: performance of a contract (providing the service you signed up for); legitimate interests (platform security, fraud prevention, service improvement); legal obligation (tax, accounting, and regulatory requirements); and, where applicable, your consent (e.g. for optional marketing communications or non-essential cookies).
We retain personal data for as long as necessary to provide the service and to comply with legal, accounting, and tax obligations. Upon account termination, tenant and store data is retained for a reasonable period to allow for account recovery and legal compliance, after which it is deleted or anonymized.
HellasCart uses essential cookies required for the platform to function (e.g. session management, security) and, where applicable, analytics cookies to understand platform usage. You can control non-essential cookies through your browser settings or any cookie consent tool presented on the site.
We work with carefully selected third-party service providers to operate HellasCart, including hosting providers, payment processors (such as Stripe and PayPal), email delivery services, and analytics providers. These processors only access personal data to the extent necessary to perform their function and are bound by data processing agreements consistent with GDPR requirements.
When you operate a store on HellasCart, you act as the data controller for your own customers' personal data (orders, shipping details, etc.), and HellasCart acts as a data processor on your behalf. Tenants are responsible for ensuring their own store has an appropriate privacy notice for their customers and for complying with applicable consumer data protection laws.
Subject to applicable law, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; request data portability; and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at support@hellascart.gr.
For any questions about this Privacy Policy or how we handle your data, contact us at support@hellascart.gr or visit https://hellascart.gr.