Privacy Policy

1. Who we are

This website is operated by the company below, which is the data controller for personal data collected through it under the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019.

2. What data we collect

• When you book a call or email us: your name, email address, company name, the time slot you choose, and anything you write in your message.
• When you browse the site: our hosting provider records standard server logs (IP address, browser type, pages requested, date and time) to keep the site secure and running.

We do not use advertising trackers, and we do not run analytics that build a profile of you.

3. Why we use it and our legal basis

• To reply to your enquiry and hold the call you booked — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To keep the website secure and working — our legitimate interest (Art. 6(1)(f) GDPR).
• To meet legal obligations, such as accounting and tax records if you become a client (Art. 6(1)(c) GDPR).

We will not add you to a mailing list unless you explicitly ask us to.

4. Cookies and local storage

This site does not set tracking or advertising cookies. We store a single preference in your browser's local storage — theme (light or dark) — so the site remembers your choice. It never leaves your device and you can clear it at any time from your browser settings. Because it is strictly necessary for a feature you requested, no consent banner is required.

5. Who we share it with

We never sell your data. We share it only with service providers that help us run this website and our business, under data processing agreements:

• [Hosting provider, e.g. Vercel Inc.] — Website hosting and server logs
• [Email provider, e.g. Google Workspace] — Business email
• [Booking provider, if any] — Scheduling discovery calls

Some of these providers may process data outside the European Economic Area. Where they do, the transfer is covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. How long we keep it

• Enquiries that do not lead to a project: up to 24 months after our last contact, then deleted.
• Client records: for as long as Greek tax and commercial law requires (generally 5–10 years).
• Server logs: kept by our hosting provider for a short, limited period.

7. Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is inaccurate;
• delete your data;
• restrict or object to how we use it;
• send your data to you or another provider in a portable format.

Email info@phoenixdev.gr and we will reply within one month. If you are unhappy with how we handled your data, you can complain to the Hellenic Data Protection Authority (dpa.gr) or the supervisory authority in your own EU country.

8. Security

The site is served over HTTPS, access to enquiries is limited to the people who need it, and we use providers with recognised security practices. No system is perfectly secure, but we take reasonable measures to protect your data.

9. Changes to this policy

We may update this policy when our practices or the law change. The date at the top shows when it was last revised. See also our Terms of Use.