Privacy policy

Privacy Policy

Last updated: 24 September 2026

1. Who we are

The data controller for zebrasandlibras.com is TSOUTIS IOANNIS GEORG. KAI SIA L.P. (trade name COHETE DISTRIBUTION, brand Zebras & Libras), Kazantzaki 64, Gerakas 15344, Attica, Greece, VAT EL997607367, G.E.MI. 115705802000. Contact for privacy matters: info@zebrasandlibras.com.

2. What data we collect

  • Order data: name, shipping and billing address, email, phone, items purchased, payment method (we never see or store full card details)
  • Account data: if you create an account, your login details and order history
  • Returns data: information you give us in the Returns & Exchanges Form, including bank details (IBAN) when a refund is made by bank transfer
  • Marketing data: your email address and preferences if you subscribe to our newsletter
  • Browsing data: IP address, device and browser information, pages visited and interactions, collected through cookies and similar technologies (see section 7)
  • Communications: messages you send us by email, phone or social media

3. Why we use it and on what legal basis

  • To process and deliver your order, handle returns and provide customer service — performance of a contract
  • To issue invoices and keep accounting records — legal obligation
  • To send marketing emails — your consent, which you can withdraw at any time via the unsubscribe link
  • To show you relevant advertising and measure its effectiveness — your consent via our cookie banner
  • To keep our store secure and prevent fraud — our legitimate interest
  • To improve our website and products — our legitimate interest, or your consent where cookies are involved

4. Who we share it with

We share only what each provider needs to perform its service for us:

  • Shopify — e-commerce platform and checkout (Canada / Ireland)
  • Payment providers — Shopify Payments, PayPal, Klarna — to process your payment
  • Delivery partners — ACS Courier, BOX NOW and international courier services — to deliver your order
  • Klaviyo — email marketing and signup forms (United States)
  • Meta Platforms (Facebook, Instagram) — advertising and measurement, only with your consent
  • Google — advertising and analytics, only with your consent
  • Pinterest — advertising and measurement, only with your consent
  • Loox — product reviews, including a review request email after your purchase
  • Apps we use on our store — Growave (wishlist and loyalty), Smart Filter & Search (site search), SmartSize (size guide), BOX NOW (parcel locker selection), Custlo (customer accounts), Juicy (sales attribution and profit analytics, only with your consent)
  • Shop (by Shopify) — if you choose to use Shop Pay or the Shop app
  • Our accountants and public authorities — where required by law

We do not sell your personal data.

5. Transfers outside the EU

Some of our providers (for example Klaviyo, Meta, Google and Shopify) may process data outside the European Economic Area, including in the United States and Canada. These transfers are protected by an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework or Canada's adequacy decision) or by the European Commission's Standard Contractual Clauses.

6. How long we keep it

  • Order and invoice data: for as long as required by Greek tax and accounting law
  • Account data: until you delete your account
  • Marketing data: until you unsubscribe
  • Returns bank details: only for as long as needed to complete the refund
  • Cookies: for the duration described in our cookie banner

7. Cookies

We use essential cookies that are necessary for the store to work (for example to keep your cart). With your consent, we also use analytics and marketing cookies from Shopify, Meta, Google, Pinterest, Klaviyo and Juicy. You can accept or reject non-essential cookies in our cookie banner and change your choice at any time through the "Cookie preferences" link at the bottom of the site.

8. Your rights

You have the right to:

  • access the personal data we hold about you
  • correct inaccurate data
  • request deletion of your data
  • restrict or object to certain processing, including direct marketing
  • receive your data in a portable format
  • withdraw your consent at any time, without affecting processing already carried out

To exercise any of these rights, email info@zebrasandlibras.com. We will reply within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or the data protection authority of your country.

9. Security

Our store runs on Shopify, which is certified to PCI DSS Level 1. Card payments are encrypted and processed by our payment providers; we never have access to your full card details.

10. Children

Our store is intended for adults. We do not knowingly collect personal data from children under 16.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.