Privacy Policy
Last updated: May 11, 2026
This Privacy Policy explains how Carpos ("we", "us", "our") collects, uses, and protects information you provide when you contact us, request a quote, or otherwise interact with this website. We are an olive-oil producer and exporter based in Crete, Greece, and we comply with the EU General Data Protection Regulation (GDPR).
Information we collect
We only collect information you provide directly through forms on this site, plus a minimal amount of technical data needed to protect against abuse.
- Contact form: your name, work email, optional subject, and the message you write.
- Inquiry / quote form: the above plus company name, country, optional phone number and website, the products and quantities in your draft inquiry, your consent choices, and any additional notes.
- Anti-spam protection: Cloudflare Turnstile checks each submission. Cloudflare may briefly process your IP address and a challenge response solely to determine whether the request is automated. We do not see the IP address ourselves.
- Cookies: we use a small set of cookies — see the "Cookies & analytics" section below.
How we use your information
- To reply to your message or inquiry.
- To prepare and send you a quote.
- To keep records required for our commercial relationship and for tax / accounting obligations.
- To improve the service we offer to business customers.
We do not sell your data, and we do not use it for advertising.
Third parties
We rely on a small number of well-known service providers:
- Resend — delivers transactional email (replies to your form submissions and confirmations).
- Cloudflare Turnstile — spam protection on our forms.
- Google Maps — loaded only on the contact page to show our facility location. The Maps API may set its own cookies; if you visit the contact page, your browser will receive them.
- Cloudflare Pages — hosts this website. Edge request logs may be retained for short periods for security and performance.
Data retention
We retain contact and inquiry data only as long as needed to respond and to meet any legal or accounting obligations that follow, then we delete or anonymise it. If you ask us to delete your data sooner, we will do so unless we are legally required to keep it.
Your rights under GDPR
You have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data ("right to be forgotten").
- Request a portable copy of your data.
- Object to or restrict certain processing.
- Lodge a complaint with the Hellenic Data Protection Authority (HDPA) or the supervisory authority in your country.
How to contact us
Email us at info@carpos.gr with any privacy question or request. We aim to respond within one business day.