Privacy Policy
theochristo.com · Last updated: October 11, 2026
1. Who we are
This website (www.theochristo.com) is operated by Theodoros Christodoulou, M. Merkouri - A. Papandreou, 19002 Paiania, Attica, Greece ("we", "us"). We are the data controller for the personal data described below. You can contact us at connect@theochristo.com.
2. What data we collect
Newsletter and free lesson. When you sign up through our form we collect your email address and a record of your consent (the checkbox you tick and the time of signing up).
Orders in our store. When you buy a book, download, lesson or merchandise we collect the details needed to process your order: name, email, billing and delivery address, and order details. Payments are handled by Stripe and PayPal; we do not see or store your full card number.
Messages. If you email us, we keep the correspondence so we can reply.
Website usage data and cookies. The website uses Squarespace's built-in analytics. These may collect data such as IP address, device and browser information, and pages visited, to help us understand how the site is used. See section 8.
3. Why we use your data and our legal basis
To send you the free lesson, our newsletter, news about releases and offers: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time.
To process and deliver your orders and answer your enquiries: performance of a contract (Art. 6(1)(b)) and, for enquiries, our legitimate interest in replying (Art. 6(1)(f)).
To keep accounting and tax records: legal obligation (Art. 6(1)(c)).
For analytics cookies: your consent, where required.
4. Who we share your data with
We do not sell your personal data. We share it only with service providers who process it on our behalf:
Sender (sender.net), for sending emails and managing our subscriber list.
Squarespace, which hosts the website and store.
Stripe and PayPal for payments.
A print-on-demand partner that prints and ships merchandise orders, and postal or courier services for other physical orders.
We may also disclose data where the law requires it.
5. Transfers outside the EU/EEA
Some of the providers above may process data outside the European Economic Area. Where this happens, we rely on the safeguards required by GDPR, such as an adequacy decision or Standard Contractual Clauses. Squarespace's data processing terms are available at https://www.squarespace.com/dpa. Sender, Stripe and PayPal may also process data outside the EU/EEA, under their own terms and conditions.
6. How long we keep your data
Newsletter data: until you unsubscribe or ask us to delete it.
Order and invoice records: for as long as the law requires us to keep them for accounting and tax purposes.
Correspondence: up to 2 years after our last contact.
7. Your rights
You have the right to access your data, correct it, have it deleted, restrict or object to its processing, receive a copy of it in a portable format, and withdraw your consent at any time (every email we send has an unsubscribe link). To exercise any of these rights, write to connect@theochristo.com.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr) or the authority of your own country.
8. Cookies and tracking
This website uses cookies and similar technologies. Essential cookies keep the site and store working (for example, your shopping cart and checkout), and Squarespace's analytics cookies help us understand how the site is used. Non-essential cookies are only set after you give your consent through the cookie banner, and you can change or withdraw your choice at any time through the cookie banner settings.
9. Children
This website is not directed at children. If you are a parent or guardian and believe your child has given us personal data, please contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The latest version is always published on this page, with the date at the top.
11. Contact
Questions about this policy or your data: connect@theochristo.com.