Privacy Policy

Last updated: 11 October 2026

1. Who We Are

ISTOS is the professional website of Ioanna Theofilakou, an independent WordPress developer and web designer.

Website: https://istos.art
Email: io.theofilakou@gmail.com
Business contact address: Argostoliou 40, Nea Makri, Greece

Ioanna Theofilakou is responsible for the processing of personal data described in this policy.

2. Information We Collect

When you contact ISTOS through the website, we may collect your name, email address, message subject and any information you voluntarily include in your message.

Technical information, such as IP addresses, browser information, access times and security events, may also be processed through website hosting, security and anti-spam systems.

3. How We Use Your Information

Personal information may be used to:

  • Respond to enquiries and project requests.
  • Discuss potential collaborations and provide quotations.
  • Communicate about requested services.
  • Maintain website security and prevent spam or unauthorized access.
  • Comply with applicable legal obligations.

The legal bases for processing may include steps requested before entering into a contract, performance of a contract, legitimate interests in handling correspondence and protecting the website, legal obligations, and consent where required.

We do not use contact-form messages for marketing communications without an appropriate legal basis.

4. Contact Forms and Email

Our website uses Contact Form 7 to receive enquiries. Submitted information is delivered through our configured email system.

The information is accessible only to people who need it to respond to your enquiry or administer the relevant systems.

Email messages and correspondence are retained for [insert actual retention period], unless a longer period is required for an ongoing business relationship or legal obligation.

5. Cookies, Security and Anti-Spam

The website may use cookies or similar technologies necessary for its operation and security.

Security and anti-spam services, including Google reCAPTCHA where enabled, may process technical information to distinguish legitimate visitors from automated traffic.

Where optional analytics or other non-essential technologies are enabled, information about them and any required consent choices will be provided separately.

6. Service Providers

Personal data may be processed by service providers supporting website hosting, email delivery, security and anti-spam protection.

These may include NameHero, the configured email delivery provider and Google for reCAPTCHA where enabled.

[Confirm the actual providers, processing locations, any international transfers and applicable safeguards before publication.]

7. How Long We Keep Information

Personal data is retained only for as long as reasonably necessary for the purposes described above, subject to applicable legal obligations.

Contact enquiries: [insert retention period].
Server and security logs: [insert retention period or applicable criteria].

8. Your Rights

Depending on the circumstances and applicable law, you may request access to your personal data, correction, deletion, restriction of processing, portability, or object to certain processing.

Where processing relies on consent, you may withdraw that consent.

To exercise your rights, email io.theofilakou@gmail.com.

You may also lodge a complaint with the competent data protection supervisory authority.

9. Updates

This Privacy Policy may be updated to reflect changes to our website, services or legal obligations. The latest version will remain available on this page.