Privacy Policy

Last updated: 6 November 2026

1. Data controller

The data controller is Superdeals Trading LP, 100 Al. Papanastasiou Street, 54644 Thessaloniki, Greece, VAT EL802859256. For any data matter: [email protected].

2. What data we collect

• Order data: name, email, country and, where required to issue an invoice, address and VAT number.
• Account data: your account is created automatically with your first order, so that you can find your orders and keys there. We keep your email and password, which is stored encrypted.
• License keys: the keys you bought, linked to your order, so that you can find them again and we can help you with activation.
• Payment data: processed directly by Stripe, our payment provider, on its own secure payment page; we never see or store your card number.
• Technical data: IP address, device and browser type, cookies (see Cookie Policy).
• Communication: whatever you send us by email.

3. Purposes and legal basis

• Processing your order and delivering the key (performance of contract).
• Issuing invoices and keeping accounting records (legal obligation).
• Fraud prevention and store security (legitimate interest).
• Customer service and support (performance of contract / legitimate interest).
• Newsletter emails with offers, only if you asked for them (consent, which you may withdraw at any time).

4. Who we share it with

Only partners needed to run the store: the payment provider (Stripe Payments Europe Ltd, Ireland), the website hosting and email provider, our invoicing software and accountant, the Greek tax authority (AADE) for transmitting invoices (myDATA) and, where required by law, other public authorities. We do not sell data. Where a provider processes data outside the EEA, this is done with GDPR safeguards (e.g. standard contractual clauses).

5. How long we keep it

Order data and invoices for as long as tax law requires. Account data until you ask us to delete the account. Newsletter data until you withdraw consent.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Send your request to [email protected]; we reply within one month. You may also lodge a complaint with the Hellenic Data Protection Authority (dpa.gr) or the authority of your country.

7. Security

The site runs exclusively over an encrypted connection (HTTPS) and access to data is limited to the people who need it.