Privacy Policy

Smyrni Baklava ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

We collect the following personal data:

• Name and surname

• Email address

• Phone number

• Delivery address

• Order history

• Payment information (processed by Stripe, not stored on our server)

We use your personal data for:

• Processing and fulfilling your orders

• Communicating with you about your orders

• Sending confirmation emails and updates

• Improving user experience on the website

• Compliance with legal obligations

Your personal data is stored:

• In MongoDB Atlas (cloud database) with encryption

• Payment data is processed by Stripe (PCI DSS compliant)

• Emails are sent via Resend/Gmail SMTP

• We retain data for 5 years according to legal obligations

We share your data only with:

• Stripe - for payment processing

• MongoDB Atlas - for data storage

• Resend/Gmail - for sending emails

• Vercel Analytics - only if you have consented to analytics cookies

We do not sell or share your data with third parties for commercial purposes.

According to GDPR, you have the right to:

• Access your personal data

• Correct inaccurate data

• Delete your data (Right to be Forgotten)

• Export your data in JSON format

• Object to processing of your data

You can exercise these rights from the Account Settings page or by contacting us at info@smyrnibaklava.gr

We take security measures to protect your data:

• Data encryption in transit (HTTPS)

• Secure database connections

• Regular security system updates

• Limited access to personal data

We use cookies for website functionality. For more information, see our Cookie Policy page.

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Email: info@smyrnibaklava.gr

Address: Athens, Greece