Notosweb
ΕΛ Get a quote
Legal

Privacy & Cookie Policy

Last updated: 24 October 2026

1. Data controller

The controller of your personal data is Notosweb, a web design studio based in Athens, Greece. Email: info@notosweb.com, phone: +30 698 739 8920.

2. What we collect

  • Quote / contact form: name, business name, phone, email and your message, only what you choose to fill in.
  • WhatsApp / phone contact: the details you share with us when you reach out.
  • Visitor statistics: anonymous analytics via Google Analytics and measurement of our ad performance via Meta Pixel and TikTok Pixel, only if you accept in the cookie notice.
  • Server logs: kept automatically by our hosting provider for security purposes.
  • Clients with automatic renewal: the Stripe customer and payment method identifiers, the card brand, last 4 digits and expiry date, the charge history, and the date, time and IP address of activation as proof of the instruction. We never see or store the full card number or the CVC.

3. Purpose & legal basis

We use form data solely to reply to your enquiry and send you a quote (Art. 6(1)(b) GDPR, pre-contractual steps). Visitor statistics are based on your consent (Art. 6(1)(a) GDPR). Payment data is processed to perform the contract and the automatic renewal instruction you give us (Art. 6(1)(b) GDPR). Invoices are kept because tax law requires it (Art. 6(1)(c) GDPR). We do not use your details for unsolicited advertising and we never sell or share them with third parties for commercial purposes.

4. Recipients

Only the providers strictly necessary to run the service can access data: our hosting provider, our email provider and, for payments, Stripe Payments Europe, Limited (Ireland). Stripe processes card details on our behalf as a processor; for fraud prevention and its own legal obligations it acts as an independent controller under the Stripe Privacy Policy, and it may transfer data outside the EEA with GDPR safeguards (e.g. standard contractual clauses). If you contact us via WhatsApp, the communication is also subject to the terms of that service (Meta).

5. Retention

Messages and contact details are kept for as long as needed to handle your enquiry and up to 24 months after our last contact, unless we start working together, in which case data is kept as long as tax and contractual obligations require. Card details (brand, last 4 digits, expiry) and Stripe identifiers are kept while automatic renewal is active and are deleted, together with the card at Stripe, when you click “Remove card” or our cooperation ends. Charge history, invoices and proof of the instruction are kept as long as tax law requires and as long as a charge may be disputed.

6. Cookies & analytics

The Website sets no tracking cookies by default. Specifically:

  • Preference storage: your answer to the cookie notice is stored locally in your browser (localStorage, key “nw-consent”) so we don’t ask again.
  • Google Analytics 4: activated only if you click “Accept”. It records anonymous visitor statistics (pages, country, device) with IP anonymisation. Provider: Google Ireland Ltd.
  • Meta Pixel: activated only if you click “Accept”. It lets us measure how many visitors reached the Website from our Instagram and Facebook ads. It uses Meta cookies (e.g. “_fbp”). Provider: Meta Platforms Ireland Ltd. See Meta’s Privacy Policy.
  • TikTok Pixel: activated only if you click “Accept”. It lets us measure how many visitors reached the Website from our TikTok ads and whether they sent us a request. It uses TikTok cookies (e.g. “_ttp”). Provider: TikTok Technology Limited (Ireland). See TikTok’s Privacy Policy.
  • Google Fonts: fonts are served from Google’s servers, which receive your IP address when loading them.

To change your choice, clear this site’s data in your browser settings (or click here to reset) and the notice will appear again.

7. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection. To exercise them, email info@notosweb.com, we reply within 30 days. You may also lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

8. Security

The Website is served exclusively over HTTPS and form data is transmitted encrypted. We apply reasonable technical safeguards, including access restriction and spam protection.

9. Changes

Any changes to this policy will be published on this page with an updated date.