Lyralis Focus is a food supplement - not a medicine. Sold by NASTOULIS STAVROS, Athens, Greece.

Privacy Policy

Last updated:

1. Who We Are

This Privacy Policy applies to NASTOULIS STAVROS (the "Website"), operated by NASTOULIS STAVROS, a Greek sole trader, at Odos Voulis 15, 105 62 Athens, Greece. We are the data controller for personal data collected through this Website.

2. Information We Collect

We collect the following categories of personal data:

  • Order data: name and phone number submitted through the order form.
  • Contact data: name, email address and message submitted through the contact form.
  • Technical data: IP address, browser type, pages visited, time and date of access - collected automatically when you use our Website.
  • Cookie data: preferences stored via cookies as described in our Cookie Policy.

3. How We Use Your Information

  • To process and confirm your order by telephone, and to arrange delivery.
  • To respond to enquiries submitted via the contact form.
  • To operate and improve our Website through aggregated analytics.
  • To serve relevant advertising where you have given consent (marketing cookies).
  • To comply with legal obligations.

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases as set out in Article 6 UK GDPR:

  • Contract (Art. 6(1)(b)): processing your name and phone number to fulfil your order.
  • Legitimate interests (Art. 6(1)(f)): website security, fraud prevention and technical improvement.
  • Consent (Art. 6(1)(a)): analytics and marketing cookies, where you have explicitly accepted via our cookie banner.
  • Legal obligation (Art. 6(1)(c)): retaining transaction records as required by UK tax law.

5. Sharing of Information

We do not sell your personal data. We may share it with:

  • Courier and logistics partners to fulfil delivery of your order.
  • Google LLC (analytics and advertising services) - see Section 10 for details.
  • Hosting and infrastructure providers who process data on our behalf under data processing agreements.
  • Regulatory or law enforcement bodies where required by applicable law.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. Our Website uses HTTPS encryption for all data in transit. Access to personal data is restricted to authorised personnel only.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your data where there is no longer a legitimate reason to retain it.
  • Right to object: object to processing based on legitimate interests.
  • Right to restrict processing: request that we limit how we use your data.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time via the cookie settings on our Website.
  • Right to lodge a complaint: you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk, telephone 0303 123 1113.

To exercise your rights, contact us at info@nastoulisstavros.gr.

8. International Transfers

Some of our service providers (including Google) operate servers outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO or adequacy decisions.

9. Retention Periods

Order-related data is retained for up to 7 years to comply with UK tax and accounting obligations. Contact form data is retained for up to 12 months from the date of submission. Technical and analytics data is retained in accordance with the retention periods of the relevant third-party service (typically up to 26 months for Google Analytics).

10. Third-Party Services

Our Website uses the following third-party services that may collect or process personal data:

  • Google Ads (Conversion Tracking): we use Google Ads conversion tracking to measure the effectiveness of our advertising. This involves cookies and data sent to Google. Consent Mode v2 is implemented - no advertising data is sent to Google without your explicit consent.
  • Google Analytics: we use Google Analytics to understand how visitors interact with our Website. Analytics cookies are only activated after you accept them via our cookie banner.
  • Google Maps API: our Contact page embeds a Google Maps iframe. Loading this map may result in data (including IP address) being sent to Google's servers. See Google's Privacy Policy at policies.google.com.

11. Cookie Use

We use cookies to operate the Website and, with your consent, for analytics and marketing. Full details are provided in our Cookie Policy. You can manage your preferences at any time via the cookie settings link.

12. Children's Privacy

Our Website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 13. If you believe we have inadvertently collected such data, please contact us immediately.

13. Updates to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the Website following any update constitutes acceptance of the revised Policy.

14. Contact

NASTOULIS STAVROS · Odos Voulis 15, 105 62 Athens · Email: info@nastoulisstavros.gr · Phone: +44 20 3976 4821