Privacy Policy
Privacy Policy
At Invertobee, we respect your privacy and are committed to protecting your personal information. This document explains what data we collect, how we use it, how we protect it, and your rights regarding your information.
What Information We Collect
We collect only the information necessary to process your orders, maintain your account, and provide excellent customer service.
Information You Provide Directly
When you place an order or create an account, we collect:
- Contact Information: Full name, Email address, Phone number.
- Shipping Information: Delivery address, Postal code, Country.
- Billing Information: Billing address (if different from shipping), Company name and VAT number (for business customers).
- Payment Information: transaction id (processed securely by our payment gateway), PayPal account information (if using PayPal).
- Order Information: Products purchased, Order history, Shipping preferences.
Information Collected Automatically
When you visit our website, we automatically collect certain technical information:
- Device & Browser Data: IP address, Browser type, Operating system, Device type (desktop, mobile, tablet).
- Usage Data: Pages visited, Time spent on pages, Referrer, Access times and dates, Click patterns and navigation paths.
This information helps us improve website performance, understand user preferences, and troubleshoot technical issues.
How We Use Your Information
We use your personal information for the following purposes:
Order Processing & Fulfillment:
- Process and complete your orders
- Arrange shipping and delivery
- Send order confirmations and shipping notifications
- Handle returns, refunds, and exchanges
Account Management:
- Create and maintain your customer account
- Enable order tracking and history viewing
- Save shipping preferences for faster checkout
Customer Service:
- Respond to your inquiries and support requests
- Resolve order issues or complaints
- Provide product information and assistance
Business Operations:
- Verify VAT numbers for tax-exempt purchases
- Comply with legal and regulatory requirements
- Prevent fraud and unauthorized transactions
- Maintain business records and accounting
Website Improvement:
- Analyze website usage patterns
- Improve site functionality and user experience
- Optimize product offerings based on customer preferences
Legal Basis for Processing (GDPR):
- Contract Performance: Processing necessary to fulfill your order
- Legal Obligation: Compliance with tax, accounting, and consumer protection laws
- Legitimate Interest: Fraud prevention, website improvement, and customer service
How We Protect Your Information
Your data security is our priority. We implement multiple layers of protection:
Technical Security Measures
SSL/TLS Encryption:
- All data transmitted between your browser and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology
- Look for the padlock icon in your browser address bar
- Our website uses HTTPS protocol for all pages
Secure Payment Processing:
- Credit/debit card payments: Processed through Viva Payment Services S.A., a PCI-DSS Level 1 certified payment gateway
- PayPal payments: Processed entirely on PayPal's secure servers
- No storage: We do NOT store credit card numbers on our servers
- Tokenization: Only encrypted payment tokens are retained for reference
Server Security:
- Firewalls protect our servers from unauthorized access
- Regular security updates and patches
- Intrusion detection and prevention systems
- Secure data centers with physical access controls
Information Sharing & Disclosure
We will NEVER sell, rent, or trade your personal information to third parties.
We share your information only in the following limited circumstances:
Service Providers
We work with trusted third-party service providers who help us operate our business:
Shipping Carriers:
- Purpose: Deliver your orders
- Data Shared: Name, shipping address, phone number, order details
Payment Processors:
- Purpose: Process secure payments
- Data Shared: Payment information (processed directly, not stored by us)
All service providers:
- Are contractually obligated to protect your data
- May only use your information to provide services to us
- Must comply with applicable data protection laws
Legal Requirements
We may disclose your information when required by law:
- In response to valid legal requests (court orders, subpoenas)
- To comply with applicable laws and regulations
- To protect our rights, property, or safety
- To prevent fraud or illegal activity
- When directed by competent authorities
Your Consent
We may share information with your explicit consent for purposes not covered above.
Cookies & Tracking Technologies
What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help our site function properly and improve your browsing experience.
How We Use Cookies
Essential Cookies (Required):
- Enable core website functionality
- Maintain your shopping cart during browsing
- Remember your language and region preferences
- Support secure login to your account
- Process orders and payments
Performance Cookies (Optional):
- Analyze how visitors use our website
- Identify popular pages and products
- Detect and fix technical issues
- Improve website speed and performance
Functionality Cookies (Optional):
- Remember your preferences and settings
- Provide enhanced features
- Personalize your experience
Cookie Lifespan
- Session cookies: Automatically deleted when you close your browser
- Persistent cookies: Remain on your device for a set period (typically up to 12 months) or until you delete them.
Managing Cookies
Browser Controls: You can control cookies through your browser settings:
- Block all cookies
- Accept only first-party cookies
- Receive notifications before cookies are set
- Delete existing cookies
Important Note: Blocking or deleting essential cookies may prevent you from:
- Adding items to your shopping cart
- Completing purchases
- Accessing your account
- Using certain website features
Your Privacy Rights
Depending on your location, you have specific rights regarding your personal data:
Rights Under GDPR (EU Residents)
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Correct inaccurate or incomplete information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data (subject to legal retention requirements).
- Right to Restriction: Limit how we process your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent for processing at any time (doesn't affect prior processing).
- Right to Lodge a Complaint: File a complaint with your local data protection authority.
Rights Under Other Privacy Laws
If you're subject to other privacy laws (CCPA, PIPEDA, etc.), you may have similar rights. Contact us to learn more about your specific rights.
How to Exercise Your Rights
To exercise any of these rights:
- Email us: sales@invertobee.com
- Include: Your name, email address, and specific request
- Verification: We may ask for additional information to verify your identity
- Response time: We'll respond within 30 days (may be extended in complex cases)
No charge: Exercising your rights is free, unless requests are excessive or unfounded.
Data Retention
We retain your personal information only as long as necessary:
- Active Accounts: Information retained while your account is active and for a reasonable period afterward.
- Order Records: Maintained for 7 years to comply with tax and accounting regulations.
- Marketing Communications: Retained until you unsubscribe or request deletion.
- Legal Requirements: Some data must be retained to comply with legal obligations (e.g., tax records, warranty claims).
When data is no longer needed, we securely delete or anonymize it.
International Data Transfers
Our servers are located in European Union. If you're accessing our website from outside the EU, your information may be transferred to and processed in the EU.
EU-Adequate Countries: The EU has determined that certain countries provide adequate data protection. Transfers to these countries are permitted.
Other Countries: For transfers to countries without adequacy decisions, we implement appropriate safeguards (e.g., Standard Contractual Clauses) to protect your data.
Contact Us About Privacy
Questions, concerns, or requests regarding your privacy or this policy?
Privacy Contact:
Email: sales@invertobee.com
Phone: +30 210-6823947
Mail: G. Gennadiou 8, 10678 Athens, Greece
Data Protection Officer: For GDPR-related inquiries, contact our Data Protection Officer.
Response Time: We aim to respond to all privacy inquiries within 5 business days.