Haritini
Privacy

Privacy policy

Draft. This page is a starting point, not finished legal text. The highlighted parts still need Haritini’s details, and the whole thing should be checked by a lawyer before the site goes public.

Who holds your data

[registered business name], [address], is the data controller. For anything on this page, write to [contact email].

What is collected, and why

  • Newsletter sign-up — first name, last name, email. Used to send news about classes. Basis: your consent, which you can withdraw at any time.
  • Booking a lesson — first name, last name, email, any note you add, the date and time, whether the lesson is online or at the studio, and how you chose to pay. Used to hold the hour and to contact you about it. Basis: performing the booking you asked for.
  • Buying a video class — the same contact details plus what you bought and until when you can watch it.
  • Card payments — handled by Stripe. Card numbers never reach this site; only the payment reference is stored here.

What is not collected

No advertising trackers, no profiling, no selling of anything to anyone. Passwords, where they exist, are stored only as an unreadable hash.

Who else sees it

  • [hosting provider — e.g. Netlify or Vercel] — runs the site.
  • [database provider — e.g. Supabase] — stores the data.
  • Stripe — card payments [once card payments are switched on].
  • Vimeo — hosts the class videos [once the videos are uploaded].
  • [email provider — e.g. Resend] — sends confirmation emails.
  • Google Calendar — lesson times, if calendar syncing is switched on [once it is].

How long it is kept

Newsletter details until you unsubscribe. Booking and purchase records for as long as accounting rules require [confirm the retention period with an accountant].

Your rights

You can ask for a copy of your data, ask for it to be corrected or deleted, or object to its use. Write to [contact email] and you will hear back within a month. If you are not satisfied you can complain to the Hellenic Data Protection Authority (dpa.gr).

Cookies

The site sets one cookie, and only for Haritini herself: it keeps her signed in to the admin panel. There are no analytics or advertising cookies [revisit this if analytics are added — that needs a consent banner].

Last updated: [date these go live]