Privacy Policy

Who we are

ESTEÉ & CO. (registered as ESTEE & CO Μονοπρόσωπη Ι.Κ.Ε.) is the data controller responsible for your personal data. We are based at Loukianou 18, 106 75 Athens, Greece. VAT (ΑΦΜ) 803333754 · GEMI (ΓΕΜΗ) 194782301000.

For any privacy matter, contact us at [email protected].

What we collect

When you submit an enquiry or consignment request, we collect the information you provide: your name, email address, telephone number, the details of your enquiry, and any photographs you choose to upload.

When you browse the site, we and our providers may collect limited technical data (such as IP address, device and browser type) through cookies and similar technologies — see our Cookie Policy.

How we use it

• To respond to your enquiry and provide the services you request
• To arrange valuations, viewings, sales, trades and consignments
• To keep records of our transactions and communications with you
• To protect our website and forms from spam and abuse
• To comply with our legal and tax obligations

Legal bases

We process your data on the basis of: performing a contract or taking steps at your request; our legitimate interests in operating and securing our business; your consent where required; and compliance with legal obligations.

Who we share it with

We do not sell your personal data. We share it only with trusted service providers who help us operate, under appropriate safeguards:

• Airtable — our secure enquiry and client-record system
• Resend — email delivery for our responses
• Cloudflare, including Cloudflare Turnstile, which protects our forms from bots. Turnstile may process limited data to tell humans from automated traffic — see Cloudflare's Turnstile Privacy Addendum at cloudflare.com/turnstile-privacy-policy
• Shopify — where you complete a purchase

International transfers

Some of our providers are located outside the European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep enquiry and client records for as long as necessary to serve you and to meet our legal and tax obligations, after which they are securely deleted.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise any right, email [email protected].

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Changes

We may update this policy from time to time. The current version is always available on this page.