LAS LUCAS

Privacy Policy

WHO WE ARE & WHAT WE COLLECT

Last updated: 26 October 2026.

The data controller is Nefeli Ilia Louka, trading as Las Lucas, Leoforos Porto Rafti 61, Markopoulo 19003, Greece. Privacy enquiries may be sent to Nefeli Louka at info@laslucas.design.

Depending on how you use the site, we may collect contact, billing, delivery and order details; account and wishlist information; customer-service communications; newsletter preferences and consent records; Dear Lucas submissions; and technical information needed for security and website operation.

Payment information is processed by the payment services offered at checkout. Las Lucas does not need to store complete payment-card credentials.

HOW WE USE & SHARE DATA

We use personal information to process and deliver orders; provide customer service; manage returns, exchanges, refunds, accounts and wishlists; deliver digital Gift Cards; send marketing where consent has been given; review Dear Lucas submissions; meet legal obligations; and protect the website. Our legal bases include contract performance, legal obligations, legitimate interests and consent.

This website uses Vercel for hosting and Supabase for its database, customer accounts and private document storage. Viva processes online payments. Google Workspace is used for transactional email. Selected courier providers receive the details needed for delivery. We do not sell personal information.

If you choose Google or Facebook sign-in, we request your basic profile and email to create or access your Las Lucas account. We do not request access to your Gmail messages or social posts. If you use address suggestions, the text you enter is sent to Google Maps to return matching places; you can instead enter your address manually.

You can request deletion of your Las Lucas account and information shared through social sign-in by emailing info@laslucas.design. Include your account email, but never passwords or payment-card details. We verify ownership and review the request, subject to applicable retention obligations. Instructions are also available on our Account and data deletion page.

Marketing is sent only after explicit consent and can be stopped at any time. Non-essential analytics or advertising tools, including Google Analytics or Meta Pixel, will only be activated with appropriate notice and consent controls.

RETENTION, COOKIES & YOUR RIGHTS

We retain personal information only for as long as necessary for its purpose and for periods required by accounting, tax, consumer-protection or other law. Essential cookies may operate checkout, security, accounts and preferences. Non-essential analytics or advertising cookies will require the applicable consent.

Dear Lucas contributors may request anonymous publication. Names and contact details are not displayed with anonymous stories, and a submitted email is not added to marketing without separate consent.

Subject to applicable law, you may request access, correction, deletion, restriction, objection or data portability, and may withdraw consent. Contact info@laslucas.design. You may also complain to the Hellenic Data Protection Authority.

We may update this policy when our services or legal obligations change.