Privacy Policy

Last updated: 22 September 2026

This Privacy Policy explains how Olive Oil Roots I.K.E. collects, uses, stores and protects personal data when you visit oliveoilroots.com, create an account, purchase a product or subscription, communicate with us, subscribe to marketing communications, or otherwise use our services.

We process personal data in accordance with applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Greek data protection legislation.

1. Who We Are

The data controller responsible for the processing of personal data through this website is:

Olive Oil Roots I.K.E.
VAT No.: 802981888
Tax Office: Lamia
G.E.MI. No.: 186710854000
Registered Office: Mylon, P.C. 35013, Pelasgia, Greece
Email: info@oliveoilroots.com
Telephone: +30 697 617 0422

For any question concerning this Privacy Policy or the processing of your personal data, you may contact us using the details above.

2. Personal Data We Collect

Depending on how you interact with Olive Oil Roots, we may collect the following categories of personal data.

Identity and Contact Information

This may include:

• first and last name;
• email address;
• telephone number;
• billing address;
• shipping address;
• country of residence.

Account Information

When you create an account, we may process information associated with your account, including:

• account login details;
• account preferences;
• billing and shipping information;
• subscription status;
• order history;
• information relating to your adopted olive tree;
• account activity.

Passwords are stored and handled through the technical systems used to operate the website and are not available to us in plain-text form.

Order and Subscription Information

When you purchase a product or annual subscription, we may process:

• products or subscription plans purchased;
• order numbers;
• subscription start, renewal and cancellation information;
• transaction status;
• shipping and delivery information;
• customer service history;
• information relating to the olive tree assigned to your subscription.

Personalisation Information

For the “Adopt a Tree” programme, we process the name or wording that you choose for:

• the personalised olive tree name tag;
• the adoption certificate;
• other personalised subscription materials where applicable.

The selected wording does not need to be your legal name. You may choose another appropriate name or wording, subject to our Terms of Use & Sale.

Payment Information

Payments may be processed through third-party payment providers, including PayPal, card payment providers and any other payment methods displayed at checkout.

We may receive information relating to the transaction, such as:

• payment status;
• transaction or payment reference;
• payment method;
• amount paid;
• currency;
• billing information.

Where payment card information is entered directly into the systems of a payment provider, Olive Oil Roots does not receive or store the complete card number, security code or other full payment credentials.

Communications

If you contact us through a contact form, email, telephone or another communication channel, we may process:

• your contact details;
• the content of your message;
• information relating to your order or subscription;
• any other information you voluntarily provide.

Marketing Information

If you choose to receive marketing communications, we may process information such as:

• your name;
• email address;
• marketing preferences;
• consent status;
• interactions with marketing emails.

Technical and Usage Information

When you visit our website, certain information may be collected automatically through cookies and similar technologies, including:

• IP address;
• browser type;
• device type;
• operating system;
• approximate geographic information derived from your IP address;
• pages visited;
• date and time of visits;
• referring website or source;
• interactions with website content;
• shopping and checkout events;
• advertising and campaign information;
• cookie and consent preferences.

Further information is available in our Cookie Policy.

3. How We Collect Personal Data

We collect personal data:

• directly from you when you create an account, place an order, start or manage a subscription, complete a form or contact us;
• automatically when you use our website, subject to your cookie and tracking preferences;
• from payment providers when they confirm or process a transaction;
• from shipping and delivery providers where necessary to manage an order;
• from analytics and advertising providers where the relevant technologies have been enabled;
• from social media or advertising platforms where you interact with our content, advertisements or campaigns.

4. Why We Process Personal Data

We process personal data only where we have an appropriate lawful basis under applicable data protection law.

To Process Orders and Provide Subscriptions

We process personal data in order to:

• process and fulfil orders;
• create and manage annual subscriptions;
• assign a specific olive tree to a subscription;
• create personalised name tags and adoption certificates;
• deliver olive oil and other subscription benefits;
• send order, shipping and subscription communications;
• process subscription renewals;
• manage cancellations;
• provide customer support.

The legal basis for this processing is generally the performance of a contract or taking steps at your request before entering into a contract.

To Manage User Accounts

We process account information to provide and maintain your account, allow you to manage your subscriptions, orders, addresses and payment methods, and provide access to information relating to your adopted tree.

The legal basis is generally the performance of our contract with you.

To Process Payments

We process transaction information and share necessary information with payment providers in order to accept payments, manage recurring subscription payments, process refunds and prevent fraudulent transactions.

The legal basis may include:

• performance of a contract;
• compliance with legal obligations;
• our legitimate interests in protecting our business and customers against fraud.

To Comply With Legal Obligations

We may process and retain certain information where necessary to comply with applicable:

• tax obligations;
• accounting requirements;
• consumer protection rules;
• regulatory obligations;
• legal requests from competent authorities.

The legal basis is compliance with a legal obligation.

To Respond to Enquiries

When you contact us, we process the information necessary to respond to your request and manage our communication with you.

Depending on the nature of the communication, processing may be based on:

• steps taken at your request before entering into a contract;
• performance of a contract;
• our legitimate interest in responding to enquiries and providing customer service.

To Send Marketing Communications

Where you have agreed to receive newsletters, promotions or other marketing communications, we use your contact information for this purpose.

Where required by law, the legal basis is your consent.

You may withdraw your consent and unsubscribe from marketing communications at any time.

Transactional communications concerning your account, orders, payments, deliveries or subscriptions are not marketing messages and may still be sent where necessary to provide our services.

5. Analytics and Website Performance

Subject to your cookie preferences, we use analytics technologies to understand how visitors use our website and to improve its functionality, content and performance.

These services may collect information such as:

• pages viewed;
• browsing activity;
• device and browser information;
• traffic sources;
• approximate location;
• interactions with website features;
• purchasing and conversion events.

We currently use or may use services including:

• Google Analytics;
• Google Tag Manager.

Google Tag Manager is used to manage website tags and integrations. The technologies loaded through it depend on the choices made through our cookie consent system.

Non-essential analytics technologies are activated only where the required consent has been obtained.

6. Advertising, Remarketing and Conversion Measurement

Subject to your consent where required, Olive Oil Roots uses advertising and measurement technologies including:

• Google Ads;
• Meta Pixel;
• Meta Conversions API;
• Google Tag Manager integrations.

These technologies help us:

• measure the effectiveness of advertising campaigns;
• understand whether advertisements result in website visits or purchases;
• create advertising audiences;
• show relevant advertisements to previous website visitors;
• perform remarketing;
• measure conversions and interactions.

Advertising platforms may process online identifiers, device information, IP addresses, browsing activity and information about interactions with our website.

Our Meta Conversions API integration is currently implemented through our tag management setup. We do not intentionally provide customers’ email addresses or telephone numbers through this integration for matching purposes.

Where we use customer information to create advertising audiences or customer lists, we do so only where we have an appropriate lawful basis and in accordance with applicable data protection and electronic communications law.

More detailed information about advertising technologies and your choices is available in our Cookie Policy.

7. Cookies and Consent Management

We use cookies and similar technologies for purposes including:

• providing essential website functionality;
• maintaining user sessions and accounts;
• remembering privacy preferences;
• analytics;
• advertising;
• conversion measurement;
• embedded third-party content.

We use CookieYes to manage cookie consent and preferences.

Cookies that are not strictly necessary for providing the website or a service expressly requested by the user are not intended to be activated until the relevant consent has been provided. Greek rules implementing the EU ePrivacy framework require consent for non-essential storage/access technologies, while strictly necessary technologies are treated differently.

You may change or withdraw your cookie preferences through the cookie settings available on the website.

Further details are provided in our Cookie Policy.

8. Google reCAPTCHA

We may use Google reCAPTCHA on forms or other parts of the website to protect the website against spam, abuse and automated submissions.

When reCAPTCHA is used, Google may process certain technical and usage information in order to determine whether an interaction is legitimate.

Where required, reCAPTCHA and related non-essential technologies will be handled in accordance with the visitor’s privacy and consent preferences.

9. Embedded Third-Party Content

The website may contain embedded content or integrations from third-party services, such as:

• YouTube;
• Google Maps;
• Instagram;
• Facebook;
• other social media or content providers.

When such third-party content is activated, the relevant provider may receive information such as your IP address, device information and information about your interaction with the embedded content.

Where consent is required, such content or associated tracking technologies will be activated only after the appropriate consent has been provided.

10. Public Display of Tree Names and Customer Content

As part of the “Adopt a Tree” programme, the name or wording chosen for an olive tree name tag may be visible in photographs or videos taken in the olive grove.

Such content may be used:

• to provide subscription updates;
• within a customer’s account;
• in communications relating to the subscription;
• on the Olive Oil Roots website;
• on Olive Oil Roots social media channels;
• in promotional material, where permitted by law.

If the selected name or other content constitutes personal data and its use for a particular publication requires consent or another specific lawful basis, we will process it accordingly and obtain consent where required.

Customers may contact us if they have concerns about the public appearance of a name associated with their tree.

11. Reviews and Testimonials

If you provide a review, testimonial, photograph or other customer content, we may ask for permission to publish it on our website, social media channels or other promotional materials.

Where such content identifies you and consent is required, we will rely on your consent.

You may contact us if you wish to withdraw consent for future use. Withdrawal of consent does not affect processing that was lawful before the withdrawal and may not always require the removal of material where another lawful basis applies.

12. Who We Share Personal Data With

We may share personal data only where necessary with categories of recipients including:

Payment Providers

Including PayPal, card payment processors and other providers available through checkout.

Payment providers may process personal data under their own privacy terms and may act as independent data controllers for certain processing activities.

Shipping and Logistics Providers

We provide the information necessary to deliver your order, which may include your:

• name;
• delivery address;
• telephone number;
• email address where required for delivery notifications.

Website and IT Service Providers

We may use third-party providers for services such as:

• website hosting;
• website maintenance;
• cloud infrastructure;
• account management;
• database services;
• security;
• backup services;
• technical support.

Email and Communication Providers

We may use service providers to send:

• order confirmations;
• subscription communications;
• renewal reminders;
• shipping information;
• newsletters and promotional emails.

Analytics and Advertising Providers

Where permitted by your consent settings and applicable law, information may be shared with providers including:

• Google;
• Meta;
• other analytics or advertising technology providers used by the website.

Professional Advisers and Authorities

Personal data may also be disclosed where necessary to:

• accountants;
• legal advisers;
• auditors;
• insurers;
• regulatory bodies;
• tax authorities;
• courts;
• law enforcement or other competent public authorities.

We may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal claims.

13. International Transfers of Personal Data

Some of the service providers we use may process personal data outside Greece or outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer is made in accordance with applicable data protection law.

Depending on the recipient and destination, safeguards may include:

• a European Commission adequacy decision;
• Standard Contractual Clauses approved by the European Commission;
• another transfer mechanism permitted under the GDPR.

EU data protection rules require appropriate safeguards for transfers outside the EEA where an adequacy framework does not otherwise apply.

14. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected and to comply with applicable legal obligations.

Retention periods may vary according to the type of information.

In particular:

• account information may be retained for as long as the account remains active and for an appropriate period afterwards where necessary;
• order, transaction and invoicing information may be retained for the period required under applicable tax, accounting and commercial legislation;
• subscription information may be retained for the duration of the subscription and afterwards where necessary for legal, accounting, customer service or dispute-resolution purposes;
• customer service communications may be retained for as long as reasonably necessary to resolve the enquiry and protect legitimate business interests;
• marketing information may be retained until you withdraw your consent or unsubscribe, subject to limited retention where necessary to record and respect your opt-out;
• cookie and analytics information is retained according to the duration and settings of the relevant technologies, as described in our Cookie Policy;
• consent records may be retained where necessary to demonstrate compliance with applicable law.

When personal data is no longer required, it is deleted, anonymised or otherwise securely disposed of, subject to applicable legal requirements.

15. Data Security

We take appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;
• unlawful processing;
• accidental loss;
• destruction;
• alteration;
• unauthorized disclosure.

However, no website, electronic communication or data storage system can be guaranteed to be completely secure.

Customers are responsible for protecting their own account credentials and should not disclose their password to third parties.

If you believe that your account or personal information may have been compromised, please contact us at info@oliveoilroots.com.

16. Your Data Protection Rights

Subject to the conditions and limitations provided by applicable law, you may have the following rights in relation to your personal data:

Right of Access

You may request confirmation as to whether we process your personal data and obtain access to that information.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete information.

Right to Erasure

You may request deletion of your personal data in circumstances provided by law.

This right is not absolute. We may retain information where necessary to comply with legal obligations or establish, exercise or defend legal claims.

Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

Where applicable, you may request personal data that you have provided to us in a structured, commonly used and machine-readable format or request that it be transmitted to another controller where technically feasible.

Right to Object

Where processing is based on legitimate interests, you may object to the processing in circumstances provided by law.

You may object at any time to the processing of your personal data for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Rights Relating to Automated Decision-Making

Where applicable, you have rights in relation to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

Olive Oil Roots does not currently use solely automated decision-making to make decisions that produce legal or similarly significant effects on customers.

These core rights are recognised under the GDPR, including access, rectification, erasure, restriction, portability and objection.

17. How to Exercise Your Rights

To exercise any of your data protection rights, please contact:

Olive Oil Roots I.K.E.
Email: info@oliveoilroots.com

We may request additional information where reasonably necessary to verify your identity before responding to your request.

We will respond within the time limits required by applicable data protection law. GDPR requests must generally be answered without undue delay and, in principle, within one month of receipt.

Exercising your rights is generally free of charge. However, where permitted by law, we may refuse or charge a reasonable fee for requests that are manifestly unfounded or excessive.

18. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

In Greece, the competent supervisory authority is the:

Hellenic Data Protection Authority (HDPA)

You may also have the right to lodge a complaint with the supervisory authority of the EU Member State in which you habitually reside or work, where applicable.

The Hellenic Data Protection Authority accepts complaints concerning alleged infringements of data protection law and may cooperate with other EU supervisory authorities where appropriate.

We encourage you to contact us first at info@oliveoilroots.com so that we have the opportunity to address your concern.

19. Marketing Communications

If you subscribe to our newsletter or otherwise consent to receive marketing communications, we may send you information concerning:

• Olive Oil Roots products;
• subscription plans;
• offers and promotions;
• olive grove news;
• harvest updates;
• stories and other promotional content.

You can unsubscribe at any time by:

• using the unsubscribe option included in marketing emails; or
• contacting us at info@oliveoilroots.com.

Unsubscribing from marketing does not prevent us from sending necessary transactional or service-related communications concerning your account, purchases or subscriptions.

20. Children’s Privacy

Our products, subscriptions and account services are intended for persons aged 18 years or older.

We do not knowingly offer subscriptions to children or intentionally collect personal data directly from persons under the age of 18 for the purpose of entering into a purchase or subscription contract.

If we become aware that personal data has been collected from a minor in circumstances where it should not have been collected, we will take appropriate steps in accordance with applicable law.

21. Business Customers

Where a customer purchases products or subscriptions on behalf of a business or organisation, we may process personal data relating to that organisation’s representatives, employees or contact persons.

Such information is processed only to the extent necessary to:

• manage the business relationship;
• process orders;
• communicate regarding products and services;
• issue invoices;
• fulfil contractual and legal obligations.

22. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

Olive Oil Roots is not responsible for the privacy practices of independent third-party websites.

We encourage users to review the privacy information provided by any third-party website or service before providing personal data to it.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to our services;
• changes to the technologies used by our website;
• changes to our business operations;
• legal or regulatory requirements.

The updated version will be published on this page and the “Last updated” date will be revised accordingly.

Where changes are material and applicable law requires additional notification, we will take appropriate steps to inform affected users.

24. Contact Us

For any question, request or concern regarding this Privacy Policy or the processing of your personal data, please contact:

Olive Oil Roots I.K.E.
VAT No.: 802981888
Tax Office: Lamia
G.E.MI. No.: 186710854000
Mylon, P.C. 35013
Pelasgia, Greece

Email: info@oliveoilroots.com
Telephone: +30 697 617 0422