Privacy policy
Effective: 2026-10-16
- Provider
- HIBYCENTRO O.E.
- Registered address
- ΠΛΑΤΕΙΑ ΟΙΚΙΣΜΟΣ ΖΑΡΚΟΥ 1
72300 ΣΗΤΕΙΑ, Ελλάδα / Greece - Registration number
- ΓΕΜΗ / GEMI 182757141000
- Tax number
- EL802787219 (ΑΦΜ 802787219)
- alex@webandstyle.com
Who is responsible?
The webandstyle service provider is HIBYCENTRO O.E., a VAT-registered business established in Greece. The webandstyle operator is controller of website visitor, business contact, order and billing data. Legal details are provided on the Contact and provider details page. Privacy contact: alex@webandstyle.com. For salon client data, the salon is normally the controller and webandstyle acts as processor on its written instructions.
Data and purposes
We process names, email addresses and enquiry content; business and billing details, plan selections and order/subscription history; and access, technical and security logs. Purposes include preparing and performing contracts, support, billing and service security. webandstyle forms do not request full payment-card numbers or bank-login credentials.
Legal bases
Contract preparation and performance support order and service processing. Mandatory billing and records rely on legal obligations. Fraud prevention and service security may rely on legitimate interests. Where consent is required, including optional marketing and non-essential cookies, we obtain it separately and it can be withdrawn.
Technology providers and disclosures
Shopify supplies the store, checkout and subscription account services. The dashboard and database use Cloudflare-based hosting, and OpenAI API may support AI processing. Connected Google, Microsoft or Meta services are involved according to the channels actually used. We use only data and permissions needed for the service. Shopify's own privacy notices also govern its processing for its own purposes. Shopify Network Intelligence is currently enabled for this store; Shopify may also process data for product improvement, personalisation and advertising under its notices and applicable consent.
International processing
Providers may process data outside the EEA. Applicable safeguards, such as an adequacy decision or standard contractual clauses, are required where relevant. We do not claim exclusively EU-based processing. Details of the applicable subprocessors and safeguards are available on request.
Retention
We retain data only as needed for the stated purpose. Criteria include the active contract, the state of support enquiries, mandatory accounting retention, legal claims and technical backup cycles. Handover and deletion of salon client data are governed by the written data processing agreement.
Rights and complaints
Subject to legal conditions, request access, correction, deletion, restriction or portability; object to processing based on legitimate interests; or withdraw consent. We may verify identity to the extent necessary. You may complain to the competent data protection authority; EU authorities are listed at https://edpb.europa.eu/about-edpb/about-edpb/members. The service is intended for business use, not children.