Privacy Policy

Effective Date: [08/20/2025]

Grafito.Design ("we", "us", "our") is committed to protecting your privacy and ensuring compliance with the EU General Data Protection Regulation (GDPR). This policy explains how we collect, use, share, and protect your personal data.

Grafito.Design — owned and operated by [Full Legal Name, if applicable], based in Cyprus.
Contact us at: [insert email address or contact form link].

We may collect the following personal information:

• Information you provide when signing up, purchasing services, or contacting us (e.g., name, email, address, payment details).
   
• Usage data collected via cookies and analytics (e.g., IP address, browser, pages visited, device information).
   

Your data may be processed based on:

• Consent, such as accepting cookies.
   
• Contractual necessity, if processing is required to deliver our services/packages.
   
• Legal obligations or to protect our legitimate interests.
   

We use personal data for:

• Completing orders and managing your account.
   
• Communicating with you (e.g., emails about your orders or services).
   
• Improving our website, services, and user experience.
   
• Marketing communications (if you’ve opted in).
   

We may use third-party service providers (e.g., hosting, email, analytics). These providers may process data on our behalf but are required to comply with GDPR.

If data is transferred outside the EU, we ensure adequate safeguards (e.g., standard contractual clauses) are in place.

Our website uses cookies for analytics and functionality, including:

• Recognizing returning users
   
• Counting visits
   
• Optimizing site experience
   

You can manage or disable cookies via your browser, though this may affect site functionality.

We retain personal data only as long as necessary to:

• Fulfill service obligations
   
• Comply with legal requirements
   
• Support business operations
   

Data retention periods may vary but will not exceed what is legally permitted.

If you're based in the EU, you have the right to:

• Access, correct, or delete your personal data
   
• Restrict or object to processing
   
• Withdraw consent at any time
   
• Request data portability
   
• Lodge a complaint with a supervisory authority
   

To exercise your rights, contact us at: [insert email].

We implement reasonable technical and organizational measures (e.g., SSL, access controls) to protect your data. However, no internet transmission can be guaranteed 100% secure.

We may update this policy periodically. The latest version will be posted on this page, and significant changes may be communicated to you directly.

1. Customize the placeholders (contact info, retention times, third-party tools used).
    
2. Publish the privacy policy on your website, ideally with a dedicated link in the footer or account dashboard.
    
3. Link it from the cookie banner—so users can easily access the full policy before giving consent.
    
4. Inform users (e.g., via email) when major changes occur.