Privacy Policy

1. Who we are

This website is operated by the company below, which is the data controller for personal data collected through it under the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019.

2. What data we collect

• When you book a call or email us: your name, email address, company name, the time slot you choose, and anything you write in your message.
• When you browse the site: our hosting provider records standard server logs (IP address, browser type, pages requested, date and time) to keep the site secure and running. Google Analytics, loaded through Google Tag Manager, records the pages you open, the actions you take, and an approximate location, so we can see how the site is used.

We do not use advertising trackers. Analytics is there to show which pages and actions people use. We do not sell that data.

3. Why we use it and our legal basis

• To reply to your enquiry and hold the call you booked — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To keep the website secure and working — our legitimate interest (Art. 6(1)(f) GDPR).
• To understand which pages and actions people use — our legitimate interest in running and improving the site (Art. 6(1)(f) GDPR).
• To meet legal obligations, such as accounting and tax records if you become a client (Art. 6(1)(c) GDPR).

We will not add you to a mailing list unless you explicitly ask us to.

4. Cookies and local storage

Google Tag Manager loads Google Analytics. Analytics sets cookies such as _ga so it can recognise a browser across visits and count pages, clicks, and where a visit came from. Those cookies can last up to two years. We also store a preference in your browser's local storage — theme (light or dark) — so the site remembers your choice. The theme preference never leaves your device. You can clear cookies and local storage at any time from your browser settings.

5. Who we share it with

We never sell your data. We share it only with service providers that help us run this website and our business, under data processing agreements:

• [Hosting provider, e.g. Vercel Inc.] — Website hosting and server logs
• [Email provider, e.g. Google Workspace] — Business email
• [Booking provider, if any] — Scheduling discovery calls
• Google Ireland Limited — Website analytics through Google Tag Manager and Google Analytics

Some of these providers may process data outside the European Economic Area. Where they do, the transfer is covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. How long we keep it

• Enquiries that do not lead to a project: up to 24 months after our last contact, then deleted.
• Client records: for as long as Greek tax and commercial law requires (generally 5–10 years).
• Server logs: kept by our hosting provider for a short, limited period.
• Analytics reports: kept in Google Analytics for the retention period set on that property. The cookies themselves expire within two years.

7. Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is inaccurate;
• delete your data;
• restrict or object to how we use it;
• send your data to you or another provider in a portable format.

Email info@phoenixdev.gr and we will reply within one month. If you are unhappy with how we handled your data, you can complain to the Hellenic Data Protection Authority (dpa.gr) or the supervisory authority in your own EU country.

8. Security

The site is served over HTTPS, access to enquiries is limited to the people who need it, and we use providers with recognised security practices. No system is perfectly secure, but we take reasonable measures to protect your data.

9. Changes to this policy

We may update this policy when our practices or the law change. The date at the top shows when it was last revised. See also our Terms of Use.