Privacy Policy
Privacy Policy (English)
Last updated: [AKIS: publication date]
This Policy explains how the Geltom — Get Live Tomorrow service (geltom.com) handles the personal data of its customers. For the data of visitors to the websites we build for you, see section 5 ("Contact-form data").
1. Data controller
- Name / legal form: [AKIS: full legal name and form]
- Registered address: [AKIS: registered address]
- VAT number (ΑΦΜ): [AKIS: VAT number]
- Privacy contact: [AKIS: contact email]
2. What data we collect from you (the customer)
- Account details: your email via Google sign-in — used to save your projects.
- Your brief: your questionnaire answers and anything you tell us about your business.
- Photos and files you upload for your site.
- Enrichment data: publicly available details of your business that we find (e.g. address, phone, opening hours) to fill in the site.
- Domain registration details: when you claim a domain, the details the registry requires (name/company, address, VAT number or ID) — registered in your name as the owner (registrant).
- Payments: handled by Stripe. We do not store your card details; we only receive confirmation of payment.
3. Why we process it
Solely to provide the service: to design, build, publish and host your website, register your domain, process payments and communicate with you about your project. We do not sell your data and do not use it for third-party advertising.
4. Cookies and tracking
We do not use tracking cookies. We only use:
- strictly necessary cookies for your sign-in (HTTP-only, to keep your session secure);
- local storage (localStorage) for functional reasons, e.g. to remember your progress in the build form.
For website analytics we use our own self-hosted tool (Umami), running on our EU infrastructure, which is cookie-less and does not track visitors across sites. We do not use Google Analytics or other third-party trackers.
5. Contact-form data (we act on your behalf)
When a visitor to your site fills in the contact form, their details (name, contact, message) are stored by us on your behalf and delivered to you.
For that data you are the data controller and we act as the data processor (GDPR Art. 28): we process it only to deliver it to you, do not use it for our own purposes, host it within the EU, and delete it when our engagement ends. Full clause in the Terms of Service (section 8).
6. Where data is hosted and third-party providers
Data is hosted on EU servers (Hetzner, Germany). We use the following providers strictly to run the service:
- Hetzner — hosting (EU).
- Resend — system email delivery.
- Netim — domain registration and email forwarding (EU, France).
- Stripe — payment processing.
7. Retention
- Account details and projects: for as long as you keep your account / engagement with us.
- Contact-form data: [AKIS: lead retention period — to be defined (and export-before-deletion policy at end of engagement).]
- After the engagement ends we delete your data, unless the law requires otherwise (e.g. tax records).
8. Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing. To exercise them, contact us at the address in section 1. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
9. Changes
We may update this Policy. Material changes will be communicated to you.