Privacy Notice

Who we are

This Privacy Notice explains how Konstantinos Tourvalis (“we”, “us”, “our”), trading as Costell, collects, uses, and protects your personal data when you visit our Site or purchase digital wallpapers.

Data controller

Konstantinos Tourvalis is the data controller responsible for your personal data collected through the Costell Site.

What personal data we collect

• Contact data: name and email address, collected when you make a purchase or contact us.
• Transaction data: purchase history, order details, and payment references processed by Paddle.
• Usage data: pages visited, device type, browser, IP address, and referral information, collected via analytics tools.
• Communication data: messages you send us via TikTok or other support channels.

How we use your data

• To process and deliver your purchases.
• To provide customer support and respond to inquiries.
• To improve the Site, products, and user experience.
• To comply with legal, tax, and accounting obligations.
• To prevent fraud and secure our services.

Legal basis for processing

We process your personal data based on: (a) performance of a contract when you make a purchase; (b) our legitimate interests in operating and improving the Site; (c) compliance with legal obligations; and (d) consent, where required (for example, for marketing cookies).

Who we share data with

We share personal data only with trusted recipients where necessary:

• Paddle: our Merchant of Record, which processes payments, manages subscriptions, handles tax compliance, invoicing, and customer service inquiries related to orders.
• Service providers: hosting, analytics, and support tooling providers that help us operate the Site.
• Professional advisers: legal and accounting professionals when required.
• Authorities: law enforcement or regulators when required by applicable law.

Data retention

We keep your personal data only as long as necessary to fulfill the purposes described above, including legal, tax, and accounting obligations. When no longer needed, we delete or anonymize your data.

Your rights

Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal data, as well as the right to data portability and to object to certain processing. To exercise your rights, contact us via the contact page. We aim to respond within one month.

Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit, access controls, and secure hosting.

Cookies and analytics

We use essential cookies to operate the Site and may use analytics cookies to understand how visitors use our pages. You can manage cookie preferences through your browser settings.

International transfers

Your data may be transferred to and processed in countries outside your own, including by service providers such as Paddle. We rely on appropriate safeguards, such as standard contractual clauses or adequacy decisions, where required by law.

Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be available on this page.

Contact us

For privacy questions or to exercise your rights, reach out via our contact page.