Privacy policy

Last updated: November 7, 2026

Buy Greek Shop (“BuyGreek”, “we”, “us”) runs buygreek.shop. This policy explains what personal information we collect, why, who we share it with, and the choices you have. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply to you, privacy laws in other places we ship to, including the GDPR (EU), UK GDPR and California’s CCPA/CPRA.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

What we collect

Order details: your name, email, phone number, billing and shipping addresses, and what you bought. Payments are handled by Shopify and our payment providers; we never see or store your full card number.
Personalization details: names, family names, dates and messages you type to personalize a product (for example, a name on an ornament or a name-day card). We use these only to make and ship that item.
Account details: if you create an account, your login email, saved addresses and order history.
Messages: what you send us through our contact form, email, or a “notify me” or saved-item alert.
Reviews: if you leave a product review, the name you choose to display, your rating and comments, and any photos you add.
Device and browsing data: IP address, browser, device type, pages viewed and how you arrived at the site, collected through cookies and similar technology. Your language and currency choices are remembered in your browser.

Why we use it

To take, make, ship and support your order, including order and shipping updates.
To prevent fraud and keep the store secure.
To answer your questions and handle returns.
To send you news and offers, only if you have opted in. Every marketing email has an unsubscribe link.
To understand how the store is used so we can improve it.
To meet our legal, tax and accounting obligations.

For visitors in the EU and UK, our legal bases are: performing our contract with you (orders), our legitimate interests (security, fraud prevention, improving the store), your consent (marketing and non-essential cookies), and legal obligations (tax records).

Who we share it with

We share only what each provider needs to do its job, and they may use it only for that purpose:

Shopify, which hosts our store and processes checkout. See Shopify’s privacy policy.
Payment providers, such as Shopify Payments, Shop Pay and PayPal, to process your payment.
Print and fulfilment partners, such as Printify and its print facilities, Printful and Gelato, who receive your name, shipping address and personalization details to make and ship made-to-order items. Depending on where you live, your item may be printed in Canada, the United States, the United Kingdom, the European Union or Australia.
Shipping carriers, such as Canada Post and international couriers, to deliver your order.
Service providers for email, customer reviews and analytics, under contracts that protect your information.
Authorities, when the law requires it or to protect our rights or someone’s safety.

Where your information is stored

Your information may be stored and processed outside your province or country, including in Canada, the United States and Ireland, where our providers operate. When it is, it may be accessible to authorities there under local law. We rely on our providers’ contractual and legal safeguards for these transfers.

Cookies

We use cookies that the store needs to work (your cart, checkout, login, language and currency). With your consent where required, we also use analytics cookies to see how the store is used, and marketing cookies if we run ads. You can change your choices through our cookie banner or your browser settings. Blocking essential cookies may stop the cart and checkout from working.

How long we keep it

We keep order records for as long as tax and accounting law requires (in Canada, generally six years). Personalization details are kept with the order so we can handle reprints or returns. Marketing contacts are kept until you unsubscribe. Other information is kept only as long as we need it, then deleted or anonymized.

Your rights

You can ask us to:

tell you what personal information we hold about you and give you a copy;
correct anything that is wrong;
delete your information, unless we must keep it by law;
stop sending you marketing, at any time;
withdraw consent you gave earlier.

If you are in the EU or UK, you also have the rights to data portability, to restrict processing and to object to processing. If you are a California resident, you have the rights to know, delete and correct, and the right not to be discriminated against for using them. You may use an authorized agent.

Email info@buygreek.shop to make a request. We will confirm who you are and reply within 30 days.

Children

Our store is for adults. We do not knowingly collect personal information from children under 13. Children’s names typed into personalized products by a parent or relative are used only to make that item.

Security

We use the protections built into Shopify, including encrypted checkout, and limit who can see your information. No system is perfectly secure, so please contact us right away if you think your account has been misused.

Changes to this policy

If we change this policy, we will update the date at the top. Significant changes will be shown on the site.

Contact us

Privacy Officer, Buy Greek Shop
670 Progress Ave, Toronto, ON M1H 3A4, Canada
info@buygreek.shop

If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada, or the data protection authority where you live.