Privacy Policy

Last updated: 2 October 2026

This policy explains what personal data Savi Community Studio collects when you book a workshop or class, buy a gift card, membership or product, or visit savicommunitystudio.com, why we collect it, who we share it with and what rights you have. We only collect what we need to run the studio.

1. Who is responsible for your data

The data controller is Gullmai Abrink, who runs Savi Community Studio as a sole proprietorship.

Savi Community Studio, the trading name of Gullmai Abrink (sole proprietorship)
VAT no. (ΑΦΜ): 170050675
Leokoriou 6-8 (first floor), 105 54 Athens, Greece
Email: info@savicommunitystudio.com
Phone: +30 694 643 5174

If you have any questions about this policy or your data, write to info@savicommunitystudio.com.

2. What we collect and why

Bookings, gift cards, memberships and shop orders

When you book a workshop, class, Paint Your Own Pottery session or kiln hire, or buy a gift card, class bundle, membership or product, we collect your name, email address, phone number, billing address, what you booked or bought, the date and time, the number of participants and the payment status. For deliveries we also collect your delivery address. We use this to confirm and run your booking, deliver your order, send you practical messages (confirmations, changes, cancellations, “your piece is ready” and pickup or glazing reminders) and keep our accounts.

Legal basis: to fulfil our agreement with you (GDPR article 6(1)(b)) and to meet our tax and accounting obligations (article 6(1)(c)).

Payments

Payments are handled by Viva (Viva Wallet), including card payments and Apple Pay. We never see or store your full card details. We receive a confirmation that the payment went through, the amount, and the last digits and type of card where the provider shares them.

Customer account and login

When you check out, we create a customer account for you so you can see and manage your bookings and orders. We store your name, email address, password (encrypted) and your booking and order history. You can choose to log in with Google, in which case Google shares your name and email address with us.

Legal basis: our agreement with you (article 6(1)(b)).

Memberships and studio hours

For members we also keep your membership plan and the studio hours you have bought, booked and used.

Legal basis: our agreement with you (article 6(1)(b)).

Your pieces: firing, glazing and pickup

We keep track of which pieces are glazed and ready, when you book a pickup or glazing slot, and whether a piece has been collected, so we can tell you when your work is ready and keep the studio shelves organised.

Legal basis: our agreement with you (article 6(1)(b)).

Ratings and feedback

Our “your piece is ready” email lets you rate your experience. If you click a rating, we store it with your email address and the workshop it relates to, and link it to your customer account and recent orders, so we can follow up and resolve any problem. If you write feedback, we store the text with the same details and it is sent to our studio inbox so we can reply. We never publish your rating or feedback without asking you first. Leaving a public review on Google is optional and is handled by Google under its own terms.

Legal basis: our legitimate interest in following up on your experience and improving our workshops and service (article 6(1)(f)). You can object at any time by writing to info@savicommunitystudio.com, and we will delete your rating and feedback.

Newsletter and offers

If you sign up for our newsletter or tick the box at checkout, we use your email address to send you news about workshops, products and promotions. You can unsubscribe at any time with the link in every email or on your account’s communication preferences page.

Legal basis: your consent (article 6(1)(a)).

When you contact us

If you use our contact form, email, call or message us, we use what you send us to answer you. Contact form messages are also stored on our website.

Legal basis: our legitimate interest in answering you, or steps before an agreement (article 6(1)(f) and (b)).

Photos

We only publish photos or videos in which you can be recognised, for example on our website or Instagram, if you have agreed. For children we ask a parent or guardian. You can withdraw your agreement at any time and we will remove the photo from our own channels.

Legal basis: consent (article 6(1)(a)).

Website visits, cookies and security

Our website uses cookies that are necessary for it to work, such as your basket, login and your cookie choice. With your consent we also use Google Analytics to understand how the site is used, and we show Google Maps. You choose in the cookie banner and can change your choice at any time using the “Manage consent” button. Read more in our Cookie Policy. To protect our forms and login against spam and abuse we use Google reCAPTCHA and Akismet, which process technical data such as your IP address.

Legal basis: consent for statistics cookies and maps (article 6(1)(a)); necessary cookies and spam protection rely on our legitimate interest in a working, secure website (article 6(1)(f)).

3. Who we share your data with

We do not sell your data. We share it only with companies that help us run the studio and website, which process it on our behalf:

• Hostinger: hosting of our website, booking system and email (EU).
• Viva (Viva Wallet): card and Apple Pay payments (EU).
• BOX NOW and DHL: delivery of shop orders, if you choose delivery.
• Oracle Cloud: the server that runs our email automation, for example sending gift cards.
• Google: Google login if you choose it, reCAPTCHA spam protection, and Google Analytics and Google Maps only if you consent.
• Automattic (Akismet): spam filtering of form submissions.

Our booking system (Amelia) and shop (WooCommerce) run on our own website, so your booking data is stored on our Hostinger server and not with those software makers. We may also share data where the law requires it, for example with the Greek tax authorities.

4. Transfers outside the EU

Some of the providers above (Oracle, Google and Automattic) may process data in the United States. These companies are certified under the EU-US Data Privacy Framework, which the European Commission has approved as providing adequate protection. Where that does not apply, we rely on the European Commission’s standard contractual clauses.

5. How long we keep your data

• Orders, receipts and payment records: for as long as Greek tax and accounting law requires, normally 5 years from the end of the tax year and longer if the law requires it.
• Bookings and participant details: up to 3 years after your last booking, so we can handle questions, gift cards and pieces waiting for pickup.
• Customer accounts and membership data: while your account or membership is active, and up to 3 years after your last activity. You can ask us to delete your account at any time.
• Newsletter: until you unsubscribe.
• Copies of emails we send you: up to 12 months.
• Messages you send us: as long as needed to handle your request, and no longer than 2 years.
• Ratings and feedback: up to 2 years.
• Cookies: see our Cookie Policy.

6. Your rights

Under the GDPR you have the right to:

• get access to the data we hold about you,
• have incorrect data corrected,
• have your data deleted, unless we must keep it by law,
• restrict our processing of your data,
• receive your data in a structured, machine-readable format (data portability),
• object to processing based on our legitimate interest,
• withdraw your consent at any time, without affecting processing that happened before.

To use any of these rights, write to info@savicommunitystudio.com. We reply within one month.

If you are unhappy with how we handle your data, you can complain to the Hellenic Data Protection Authority, Kifisias 1-3, 115 23 Athens, Greece, www.dpa.gr.

7. Children

Bookings and accounts for anyone under 18 should be made by a parent or guardian. We do not knowingly collect data directly from children under 15 without a parent’s or guardian’s consent.

8. Security

Our website uses an encrypted connection (HTTPS), payment details are handled only by our payment provider, and access to booking and customer data is limited to the people who need it to run the studio.

9. Changes to this policy

We update this policy when the way we handle data changes. The date at the top shows when it was last updated.