PRIVACY POLICY
Last updated: 20 August 2026
1. WHO WE ARE
Burn the Beans / Redline Spirit is an online apparel store based in Athens, Greece.
For the purposes of the General Data Protection Regulation (GDPR), we are the controller of the personal data described in this Privacy Policy.
Contact email: johnmalax@gmail.com
For privacy-related enquiries or requests, please contact us using the email address above.
2. INFORMATION WE COLLECT
We may collect personal information that you provide directly to us, including:
• your name
• email address
• telephone number
• billing address
• delivery address
• order details
• account information
• messages and enquiries
• product preferences
• information relating to returns, refunds, complaints or customer-support requests
When you make a purchase, your payment information is processed by the payment provider selected at checkout. We normally receive payment confirmation and transaction information rather than your complete card details.
We may also collect technical and usage information, including:
• IP address
• browser and device information
• pages viewed
• referring source
• approximate location
• shopping-cart activity
• cookie and consent preferences
• information relating to website usage and performance
3. WHY WE USE YOUR INFORMATION
We process personal data for the following purposes:
• to process, produce, deliver and support your orders
• to communicate with you regarding purchases, delivery, returns, refunds and enquiries
• to operate customer accounts, carts and website functionality
• to prevent fraud and protect the security of our website and business
• to enforce our terms and protect our legal rights
• to maintain tax, accounting and business records
• to understand and improve website performance and customer experience
• to measure advertising and marketing performance where consent is required
• to send marketing communications where permitted by law and to allow you to unsubscribe at any time
The legal bases we rely on may include:
• performance of a contract
• compliance with legal obligations
• our legitimate interests
• your consent, where required
Our legitimate interests may include fraud prevention, website security, customer service, improving our services, protecting our business and understanding how customers use our website.
4. WIX AND SERVICE PROVIDERS
Our website is hosted on the Wix.com platform, which provides the online infrastructure used to display products, receive orders and operate the store.
Personal data may be stored and processed through Wix systems, databases and applications on secured servers.
Wix's Privacy Policy is available at:
https://www.wix.com/about/privacy
We may share relevant personal information with service providers only where necessary for the operation of our business, including:
• payment processors
• shipping and postal companies
• website hosting and technology providers
• email and customer-support services
• analytics providers
• advertising and marketing providers
• fraud-prevention and security services
• accountants and professional advisers
• public authorities where disclosure is legally required
Service providers are expected to process personal data only for legitimate purposes and in accordance with applicable data-protection requirements.
5. PAYMENTS AND DELIVERY
Payment information is processed by the payment method or payment provider selected by the customer during checkout and may be subject to that provider's own privacy policy.
To fulfil an order, we may share necessary information with shipping companies, postal operators and logistics providers, including:
• recipient name
• delivery address
• telephone number or email address where required
• shipment details
• customs-related information where necessary
International delivery providers may process information in other countries when handling transport, delivery or customs procedures.
6. COOKIES, ANALYTICS AND ADVERTISING
We use essential technologies required for:
• website security
• checkout
• account access
• shopping-cart functionality
• basic website operation
With your consent, we may also use functional, analytics and advertising technologies to:
• understand website visits and customer behaviour
• improve website performance
• measure advertising campaigns
• understand marketing effectiveness
• provide more relevant advertising
Usercentrics manages cookie and consent choices on this website and is used to control non-essential technologies where consent is legally required.
You can accept, reject or adjust cookie categories using the cookie banner or Cookie Settings panel.
You may change or withdraw your consent at any time.
Withdrawing consent does not affect the lawfulness of processing that took place before consent was withdrawn.
Details about detected services, cookies and categories are available through the Cookie Settings panel.
7. INTERNATIONAL DATA TRANSFERS
Some of our service providers may process personal data outside Greece or outside the European Economic Area.
Where required by law, international transfers are protected through appropriate safeguards, which may include:
• European Commission adequacy decisions
• Standard Contractual Clauses
• other legally recognised transfer mechanisms
You may contact us if you require further information about the safeguards used for international transfers.
8. HOW LONG WE KEEP PERSONAL DATA
We retain personal data only for as long as necessary for the purposes for which it was collected or where required by law.
This may include:
• order and transaction records retained for accounting, tax and legal requirements
• customer-support and dispute records retained for as long as reasonably necessary to resolve issues and protect legal rights
• marketing data retained until you unsubscribe or withdraw consent, unless another lawful basis requires continued retention
• technical and cookie-related data retained according to the settings and retention periods of the relevant service providers
When personal data is no longer required, it is deleted, anonymised or otherwise securely disposed of where reasonably possible.
9. YOUR DATA PROTECTION RIGHTS
Subject to applicable law, you may have the right to:
• request access to your personal data
• request correction of inaccurate or incomplete information
• request deletion of your personal data
• request restriction of processing
• request data portability
• object to processing based on legitimate interests
• object to direct marketing
• withdraw consent at any time where processing is based on consent
• request information about certain automated decision-making or profiling where applicable
To exercise any of these rights, contact:
We may request reasonable information necessary to verify your identity before processing your request.
We will respond within the period required by applicable law.
10. RIGHT TO COMPLAIN
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data-protection authority.
In Greece, you may contact the Hellenic Data Protection Authority:
https://www.dpa.gr/en/individuals/complaint-to-the-hellenic-dpa
You may also contact us first so that we have the opportunity to address your concern directly.
11. SECURITY
We use reasonable technical and organisational measures to help protect personal data against:
• unauthorised access
• loss
• misuse
• alteration
• disclosure
• destruction
We also rely on established technology and service providers to help maintain appropriate security standards.
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
12. CHILDREN
This website is not specifically directed at children under the age of 16.
We do not knowingly collect personal data directly from children without appropriate parental or guardian involvement where required.
Purchases should be made by an adult or with the involvement of an adult.
13. AUTOMATED DECISION-MAKING AND PROFILING
We do not normally make decisions that produce legal or similarly significant effects based solely on automated processing.
Some advertising, analytics, fraud-prevention or marketing technologies may use automated processes or profiling to help evaluate website activity, detect suspicious behaviour or measure advertising relevance.
Where applicable, such processing is subject to applicable data-protection law and consent requirements.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
• changes in our business
• changes to our website or service providers
• legal or regulatory requirements
• changes in the way personal data is processed
The current version will always be published on this page together with the latest revision date.
15. CONTACT
For privacy questions, requests or concerns, please contact:
Email: johnmalax@gmail.com