Personal data protection
Privacy Policy
Last updated: 13 September 2026
This policy explains clearly how Euphoria Family Care collects, uses and protects personal data submitted through the contact form.
1. Data controller
The data controller is Nancy Varthaliti for Euphoria Family Care. You can contact her at euphoriafamilycare@gmail.com or +30 698 563 1848.
OWNER TODO: add the full professional postal address if it is required for the final legal notice.
2. Data collected
The contact form collects your full name, email address, optional phone number, service of interest, preferred contact method and a record of your consent.
Please do not include medical information or test results in the form. The hosting provider may also process limited technical data, such as an IP address and device information, for security and operation.
3. Purpose and legal basis
Your details are used solely to respond to your request and, if you wish, arrange the relevant communication or consultation. Processing is based on your consent and, when you request a service, steps taken at your request before entering into a contract. Limited technical processing for security is based on the legitimate interest of protecting the service.
4. Retention
Contact requests are retained for up to 12 months and then deleted, unless the communication creates a different lawful relationship or a longer retention period is legally required. The form does not collect newsletter data.
5. Recipients and providers
Data is stored using Sites and Cloudflare hosting infrastructure. It is not sold or used for advertising profiles. There is currently no automated email delivery or email-marketing service connected to the form.
6. Your rights
You may contact Euphoria Family Care to exercise the following rights, subject to the conditions of the GDPR:
- Access your personal data.
- Correct inaccurate information.
- Request deletion or restriction of processing.
- Withdraw consent without affecting the lawfulness of earlier processing.
- Lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
7. Security
HTTPS, access controls, input validation, automated-submission protection and rate limiting are used. No transmission or storage method is completely secure.
8. Cookies and external links
The site does not use Google Analytics, advertising pixels, embeds or browser storage for tracking. The hosting provider may set strictly necessary security cookies such as __cf_bm. A cookie-consent banner is therefore not displayed.
Links to social networks and scientific sources open external websites with their own privacy policies.