At annamoraiti.com, we respect your privacy and are committed to protecting your personal data. This policy explains how we handle your information when you visit our website
1. WHO WE ARE
This Privacy Policy explains how Anna Moraiti Image Consultant (“we”, “us”) collects, uses, and protects your personal data when you visit our website or use our services. We comply with the EU General Data Protection Regulation (GDPR) and Greek data protection law (Law 4624/2019).
Business: Anna Moraiti Image Consultant
Location: Athens (Glyfada), Greece
Email: [email protected]
Website: annamoraiti.com
2. PERSONAL DATA WE COLLECT
All services • Name, email address, phone number (optional).
Color Analysis
• Photographs of face and upper body, and any additional photos per instructions; natural hair colour, skin tone, and personal preferences; communication during consultation.
Body Type & Personal Style Analysis
• Materials per instructions; date of birth, profession, address; style preferences and lifestyle information; communication during consultation.
Wardrobe Management
• Photos or videos of wardrobe; wardrobe organisation needs and style goals; communication during consultation.
• Professional Programs
As the programs include any or all of the above services, the above apply.
Payment data is processed directly by Stripe and is not stored by us. Scheduling data is processed through Calendly.
3. HOW AND WHY WE USE YOUR DATA
We will never sell your personal data or use it for purposes incompatible with those listed above.
4. CLIENT PHOTOS
Photos you submit are used solely for the delivery of the contracted service. Without your prior explicit written consent, we will never:
• Post photos on social media, websites, or any public platform.
• Use photos for marketing, advertising, or promotional purposes.
• Include photos in portfolio, case studies, or training materials.
• Share photos with any third party.
Any use of your photos beyond service delivery requires a separate written consent form. You may decline without any impact on service quality, and may withdraw consent at any time with 30 days’ written notice.
5. SESSION RECORDING
Virtual sessions may be recorded only with your prior explicit consent, for quality assurance and service improvement purposes. Recording is not mandatory and refusal does not affect service delivery.
• Recordings may include video, audio, and shared screen content.
• Access is strictly limited to Anna Moraiti Image Consultant.
• Recordings are retained for a maximum of 2 years, then permanently deleted.
• You may withdraw consent at any time; existing recordings will be deleted without undue delay, unless retention is required by law.
6. THIRD-PARTY SERVICE PROVIDERS
All processors are required to handle your data in accordance with GDPR. Where data is transferred outside the EEA, appropriate safeguards (EU Standard Contractual Clauses or adequacy decisions) are in place.
7. DATA RETENTION
Where retention is required by law (e.g. tax records), data is retained for the legally mandated period regardless of deletion requests for that category.
8. COOKIES
We use essential cookies (required for basic website functionality) and analytics cookies (Google Analytics, placed only with your consent via our cookie banner). You may withdraw consent or manage cookie preferences at any time via your browser settings. We comply with the ePrivacy Directive.
9. DATA SECURITY
We implement industry-standard security measures including password-protected systems and devices, encrypted cloud storage (Google Workspace), and access restricted to Anna Moraiti Image Consultant only. In the event of a data breach posing risk to your rights, we will notify affected individuals and the Hellenic Data Protection Authority (HDPA) within 72 hours, as required by GDPR.
10. YOUR DATA PROTECTION RIGHTS
Under GDPR, you have the right to: access your data, rectification of inaccurate data, erasure (‘right to be forgotten’), restriction of processing, data portability, objection to processing, and withdrawal of consent (without affecting prior lawful processing). To exercise any right, contact us at [email protected]. We will respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr | +30 210 647 5600.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy to reflect changes in our practices or legal obligations. The “Last updated” date will always reflect the current version. Significant changes will be communicated to active clients by email.
12. CONTACT
For any questions about this Privacy Policy or to exercise your rights, contact: [email protected]