Last updated: September 7, 2026

Sanki Trading S.A., which manages the OPPO Greece online store and the website www.oppostore.gr, is responsible for the operation of the store and the related information, content, features, tools, products, and services provided through it (the "Services").

The Services are provided via the Shopify platform, which allows us to operate our online store and provide you with relevant e-commerce services.

This Privacy Policy describes how we collect, use, store, and disclose your personal data when you visit or use our website, make a purchase or other transaction through the Services, or communicate with us.

In the event of a conflict between the Terms of Service and this Privacy Policy regarding the collection, processing, or disclosure of personal data, this Privacy Policy shall prevail.

Please read this Privacy Policy carefully.

Personal data we collect or process

By "personal data," we mean any information that identifies or can reasonably be linked to an identifiable natural person.

Depending on how you interact with the Services, we may collect or process the following categories of personal data:

• Contact details, such as full name, address, billing address, shipping address, phone number, and email address.
• Order and transaction details, such as products you purchase, return, or cancel, order number, order status, and transaction history.
• Payment and transaction details, such as the selected payment method, payment status and confirmation, and other related transaction information. Full card details or other payment methods may be processed directly by our payment service providers in accordance with their own privacy policies and applicable security standards.
• Account information, when you use customer account features, such as login details, preferences, and account settings.
• Communication information, such as the content of emails, support requests, or other communications.
• Device information and technical data, such as IP address, device type, browser, operating system, device identifiers, and connection information.
• Usage information, such as the pages you visit, how you use the website, and the time of interaction with the Services.
• Information collected through cookies and similar technologies, in accordance with your consent choices and our Cookie Policy.

Sources of personal data

We may collect personal data:

• Directly from you, when you place an order, create an account, fill out a form, or communicate with us.
• Automatically through the Services, when you visit or use our website, via cookies, similar technologies, and technical log files.
• From service providers, such as Shopify, payment processors, shipping companies, analytics services, and technical partners.
• From partners or other third parties, when necessary for the operation of the Services or permitted by applicable law.

How we use your personal data

We use your personal data for the following purposes:

• Fulfillment of orders and contractual obligations, including processing orders, payments, shipping, and product delivery.
• Management of returns, cancellations, and refunds.
• Provision of customer support and communication with you regarding orders, products, or services.
• Creation and management of customer accounts, where used.
• Security and fraud prevention, including detecting and investigating suspicious or unauthorized activities.
• Improvement of the operation and user experience of the online store.
• Analysis of website usage, where permitted and in accordance with your consent choices.
• Marketing and advertising, where you have provided relevant consent or where another lawful basis allows for such processing.
• Compliance with legal, tax, accounting, and regulatory obligations.
• Establishment, exercise, or defense of legal claims, where necessary.

Legal basis for processing

Processing of your personal data is performed only when there is an appropriate legal basis in accordance with the General Data Protection Regulation (GDPR) and applicable law.

Depending on the purpose of processing, we rely in particular on:

• Performance of a contract, when processing is necessary for managing your order, payment, delivery, returns, or support related to your purchase.
• Compliance with legal obligations, such as tax, accounting, or other obligations mandated by applicable law.
• Our legitimate interests, when processing is necessary for the security of the Services, fraud prevention, customer support, improving the store's operation, or protecting our rights, provided that your rights and freedoms do not override these interests.
• Your consent, when required by law, particularly for non-essential cookies, analytics technologies, personalized advertising, and certain forms of marketing communication.

When processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Cookies, analytics, and advertising

We use necessary cookies and similar technologies for the proper functioning of the website, such as for shopping cart functionality, security, sessions, and order completion.

Non-essential cookies and technologies related to analytics, performance measurement, or personalized advertising are used only in accordance with your preferences and, where required by law, after your consent.

You can accept, reject, or manage your preferences through the website's Cookie Banner.

How we disclose personal data

We may disclose personal data to third parties only when necessary for legitimate business purposes or required by law.

This may include:

• Shopify, as our e-commerce platform and technical infrastructure provider.
• Payment service providers, for secure payment processing.
• Shipping and logistics companies, for order shipment and delivery.
• Technical, cloud, and support service providers.
• Analytics and advertising providers, such as Google or Meta, only to the extent permitted by applicable law and in accordance with your consent choices.
• Professional advisors, such as accountants, legal counsel, or auditors, when necessary.
• Public authorities or courts, when required by law or valid legal process.

We do not sell your personal data for monetary consideration.

Collaboration with Shopify

The online store operates through the Shopify platform.

Shopify collects and processes certain personal data related to the access and use of the Services, in order to provide, protect, and improve the platform's services.

Information you submit through the online store may be processed by Shopify and its authorized service providers, including cases where processing takes place outside your country of residence.

In certain cases and depending on the enabled Shopify services, Shopify may act as an independent controller for specific processing activities.

For more information on how Shopify processes personal data, you can visit:
https://www.shopify.com/legal/privacy

and:
https://privacy.shopify.com/

Third-party websites and services

The website may contain links to third-party websites, platforms, or services.

Such third parties operate according to their own privacy policies and terms of use. We are not responsible for the privacy practices, security, or content of websites or services not controlled by us.

We recommend that you review the relevant privacy policies before providing personal data to third parties.

Children's information

The Services are not specifically intended for children.

We do not knowingly collect personal data from children in violation of applicable law.

If you are a parent or guardian and believe that a child has provided personal data through the Services without the required legal basis or consent, you may contact us at support@oppostore.gr to request review and, where necessary, deletion of the data.

Security of your personal data

We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, alteration, or unlawful processing.

However, no method of electronic transmission or data storage can be considered completely secure.

We recommend that you do not send sensitive or confidential information through unsecured communication channels.

Retention of personal data

We retain your personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.

The retention period may depend, among other factors, on:

• the duration of our contractual relationship with you,
• the need to process orders, returns, or support requests,
• tax, accounting, or other legal obligations,
• the need for fraud prevention,
• dispute resolution,
• the exercise or defense of legal claims.

After the expiration of the relevant retention period, data is deleted or anonymized, unless further retention is required by law.

Your rights

Under the GDPR and applicable law, depending on the circumstances, you may have the following rights:

• Right of access to the personal data we hold about you.
• Right of rectification of inaccurate or incomplete personal data.
• Right to erasure of personal data, where the relevant legal conditions are met.
• Right to restriction of processing.
• Right to object to processing, particularly when processing is based on legitimate interests or concerns direct marketing.
• Right to data portability, where applicable.
• Right to withdraw consent at any time, when processing is based on your consent.
• Right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, you can contact us at:
support@oppostore.gr

We may need to verify your identity before responding to certain requests, where permitted or required by law.

We will respond to your requests within the timeframes stipulated by applicable law.

Marketing communications

If you have opted to receive promotional communications, you may withdraw your consent or unsubscribe at any time using the relevant unsubscribe link included in the messages or by contacting us.

Unsubscribing from marketing communications does not affect necessary communications related to active orders, transactions, customer accounts, or support.

Complaints

If you have a complaint regarding the way we process your personal data, we kindly ask you to first contact us at:
support@oppostore.gr

You also have the right to lodge a complaint with the competent supervisory authority.

For Greece, the competent authority is:

Hellenic Data Protection Authority (HDPA)

More information is available on the official website:
https://www.dpa.gr/

International data transfers

Some of our service providers may process or store personal data outside of Greece or the European Economic Area.

When personal data is transferred outside the European Economic Area, we use or require, as appropriate, suitable protection mechanisms in accordance with applicable law, such as:

• European Commission adequacy decisions,
• European Commission Standard Contractual Clauses,
• or other lawful transfer mechanisms.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, Services, technology, or legal and regulatory requirements.

When a material change occurs, we will update the "Last updated" date and, where required by law, provide appropriate notice.

Contact and Data Controller

For questions regarding this Privacy Policy, the way your personal data is processed, or to exercise your rights, you can contact us at:

Sanki Trading S.A.
52 Kosta Varnali St.
152 33 Chalandri
Greece

Email: support@oppostore.gr
Website: www.oppostore.gr

Tax ID (AFM): 801554924
VAT Number (VIES): EL801554924
GEMI Number: 159044801000

For the purposes of applicable data protection legislation, Sanki Trading S.A. acts as the data controller of the personal data processed in the context of the operation of the online store www.oppostore.gr, unless otherwise stated for a specific third-party service.