Privacy Policy

1. Who we are

FELENI is a contemporary European fashion house based in Athens, Greece, operating the website feleni.store. We are the data controller for the personal data collected through this website. You can reach us at any time through the Contact page.

2. What we collect

We collect only what we need to run the shop:

• **Account details** — your name and email address when you create an account or sign in with Google.
• **Order information** — your delivery address, order contents and order history, needed to fulfil and support your purchase.
• **Fit profile** — measurements you choose to save (bust, waist, hips, fit preference) so we can recommend your size. This is optional and you can delete it at any time.
• **Newsletter subscription** — your email address, only if you subscribe.
• **Dressing room photos** — photos you upload for virtual try-on are used solely to generate your try-on image and are not stored on our servers.
• **Technical data** — basic device and browsing information needed to keep the site secure and working.

3. Why we use it

We use your data to process and deliver orders, provide customer support, operate your account and wishlist, personalise size and styling recommendations you ask for, send newsletters you subscribed to, and meet our legal obligations (tax, accounting, consumer law). We do not sell your personal data to anyone.

4. Who we share it with

Only the partners needed to serve you: our payment provider (to take payment), our delivery and courier partners (to deliver your order), and our hosting and email providers (to run the website). Each is bound by data-processing agreements under the GDPR.

5. How long we keep it

Account data is kept while your account is active. Order records are kept for the period required by Greek tax and accounting law. Newsletter data is kept until you unsubscribe. You may request earlier deletion where the law allows.

6. Your rights

Under the GDPR you have the right to access, correct, export or delete your personal data, to restrict or object to processing, and to withdraw consent at any time. You also have the right to lodge a complaint with the Hellenic Data Protection Authority. To exercise any right, contact us through the Contact page — we respond within 30 days.

7. Security

We use encrypted connections (HTTPS) throughout the site, and access to personal data is restricted to authorised staff. Payment card details are handled entirely by our payment provider and never touch our servers.