Skip to main content

Introduction

This Privacy Policy explains how Cray Clay (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit www.crayclay.com, make a purchase, or otherwise interact with our services.

Cray Clay is owned and operated by Georgia Maria Karakasilioti, located at Deligianni 18, 10683 Athens, Greece registered business in the Greek legal database.

If you have any questions about this policy, you can contact us at info@crayclay.com.

Personal Data We Collect

We may collect and process the following types of personal data:

  • Identity and contact information: name, email address, phone number, shipping/billing address.
  • Transaction data: payment details (processed securely via Stripe or Viva), purchase history, and order information.
  • Technical data: IP address, browser type, device information, and cookies.
  • Communication data: messages or feedback you send to us.

We do not store full credit/debit card details on our servers. Payments are processed securely by Stripe and Viva in accordance with their own privacy policies.

How We Use Your Data

We process your data to:

  • Fulfill and deliver orders.
  • Manage payments and refunds.
  • Provide customer support.
  • Perform scheduling activities and contact individuals for verification of presence during classes or workshops.
  • Send service updates or marketing emails (only if you’ve opted in).
  • Improve our website and user experience.
  • Comply with legal obligations (e.g., tax or accounting laws).

Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

  • Contractual necessity: to fulfill your orders and deliver services.
  • Legal obligation: to comply with accounting and tax laws.
  • Legitimate interest: to maintain our website and prevent fraud.

Consent: for marketing communications and cookies.

Sharing Your Data

We may share your data only with:

  • Payment processors: Stripe, Viva Wallet.
  • Marketing and analytics partners: Meta (Facebook/Instagram), TikTok, Google.
  • Service providers: website hosting, email services, and shipping partners.

All partners are GDPR-compliant and only process data as required to provide their services.

Data Retention

We keep your data only as long as necessary for the purposes collected:

  • Order and tax information: 7 years (legal requirement).
  • Marketing data: until you unsubscribe or request deletion.
  • Technical logs: up to 12 months for security and analytics.

Your Rights (Under GDPR)

You have the right to:

  • Access and receive a copy of your data.
  • Correct inaccurate or incomplete data.
  • Request deletion (“right to be forgotten”).
  • Restrict or object to processing.
  • Withdraw consent at any time.
  • File a complaint with the Hellenic Data Protection Authority (HDPA).

To exercise your rights, contact us at info@crayclay.com.

Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

Our website is hosted by a third-party provider that has been carefully evaluated and confirmed to implement appropriate security and data protection measures on our behalf, in accordance with GDPR requirements.

Updates

We may update this Privacy Policy from time to time. The latest version will always be available on our website.