Last updated: 17 July 2026

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit or make a purchase through aegeabox.com (the “Website”). We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable Greek law (Law 4624/2019).

1. Data Controller

The controller responsible for the processing of your personal data is:

  • Company: I. Kollias & Co. E.E. (Η. ΚΟΛΛΙΑΣ & ΣΙΑ Ε.Ε.), operating the AEGEA – Mediterranean Beauty Club
  • Registered address: 12 Mikras Asias Street, Nea Ionia, Athens, Greece
  • General Commercial Registry (G.E.MI.) No.: 005381201000
  • Email: hello@aegeabox.com

2. What Personal Data We Collect

Depending on how you use the Website, we may collect the following categories of data:

  • Identification & contact data: full name, delivery and billing address, email address, telephone number.
  • Order & subscription data: products purchased, subscription plan, order history, delivery preferences.
  • Payment data: payment is processed securely by our payment provider; we do not store your full card details on our servers.
  • Technical data: IP address, browser type, device information and cookie identifiers (see our Cookies section).
  • Communications: messages you send us and your marketing preferences.

3. Purposes of Processing

We process your personal data in order to:

  • process and fulfil your orders and manage your subscription;
  • arrange delivery and handle returns or exchanges;
  • respond to your enquiries and provide customer support;
  • send you service messages relating to your account and orders;
  • with your consent, send you newsletters and marketing about our products and offers;
  • improve our Website, products and services;
  • comply with our legal and tax obligations.

4. Legal Basis for Processing

We rely on the following legal bases: (a) the performance of a contract with you for order and subscription management; (b) your consent for marketing communications and non-essential cookies; (c) our legitimate interests in operating and improving our business; and (d) compliance with legal obligations such as tax and consumer-protection law.

5. How We Share Your Data

We do not sell your personal data. We may share it with trusted third parties who process it on our behalf, including: payment service providers, shipping and courier partners, IT and hosting providers, and email/marketing platforms. These parties act only on our instructions and under appropriate data-protection agreements. We may also disclose data where required by law or competent authorities.

6. Data Retention

We keep your personal data only for as long as necessary for the purposes described above. As a general rule, marketing-related data is retained for two (2) years from your last interaction, unless you withdraw your consent earlier. Data relating to orders and invoices is retained for the period required by applicable tax and accounting legislation.

7. Your Rights

Under the GDPR you have the right to: access your data; request rectification of inaccurate data; request erasure (“right to be forgotten”); restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any of these rights, contact us at hello@aegeabox.com. We will respond within one (1) month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Protection of Minors

Our Website is intended for adults. Minors may not register or place orders without the consent of a parent or legal guardian. We do not knowingly collect data from minors without such consent.

9. Data Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or alteration, including encrypted (SSL) connections and secure payment processing.

10. Cookies

Our Website uses cookies to recognise you, remember your preferences and improve your experience. You can control or disable cookies through your browser settings; note that some features may not function properly if cookies are disabled.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact

For any question regarding this Privacy Policy or your personal data, please contact us at hello@aegeabox.com or by post at 12 Mikras Asias Street, Nea Ionia, Athens, Greece.