Olea Legacy Privacy Policy

Last Updated: 21/06/2025

Introduction

Olea Legacy is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (olealegacy.com) or engage with us through other channels. We serve clients globally and strive to comply with all relevant data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We do not require you to create an online account to use our site; all customer interactions are handled via direct communication such as email or offline correspondence. By using our website or providing us with your information, you agree to the practices described in this Privacy Policy.

Personal Data We Collect

We collect personal data that you voluntarily provide to us, as well as some data automatically collected through your use of our site.

  • Information You Provide Directly: You may give us personal information by filling in forms on our site or by corresponding with us via email or other channels. This includes data collected when you:

    • Request Ownership or Services: For example, by submitting an ownership request form or other inquiry forms related to our products or services.

    • Subscribe to Our Newsletter: When you sign up to receive updates or marketing communications from us.

    • Contact Us: When you send a message through our contact form or email us directly with questions or requests.
      The personal information we collect in these cases may include your name, email address, phone number, mailing address, and any other details you choose to provide. It also includes the content of your communications and any preferences you express.

  • Information Collected Automatically: When you visit our website, we automatically collect certain technical information about your device and usage of the site. This may include your IP address, browser type, operating system, referring website, pages viewed, the dates/times of your visits, and other browsing information. We collect this information through cookies and similar tracking technologies, as described in the Cookies and Tracking Technologies section below.

We do not collect any sensitive personal data or protected characteristics unless you choose to provide them. We also do not knowingly collect any information from children (see Children’s Privacy below). If you simply browse our site without submitting any forms, the data collected is limited to the cookies and analytics information described above.

How We Use Your Personal Data

Olea Legacy uses your personal data only for legitimate business purposes and as permitted by law. The purposes for which we process personal data include:

  • To Fulfill Your Requests and Provide Services: We use the information you submit through ownership request forms, contact forms, or other inquiries to respond to you and carry out the services or actions you request. For example, if you request information about a product or service, we will use your contact details to communicate with you and provide the requested information or next steps.

  • Communication and Customer Service: We may use your contact information to communicate with you about your requests, answer your questions, and provide customer support via email or other offline means (such as phone or mail, if appropriate). All interactions after your initial inquiry (such as confirming details of a request or providing follow-up service) will be conducted via email or offline correspondence, since our site does not host user accounts or online dashboards.

  • Marketing and Newsletters: If you have subscribed to our newsletter or agreed to receive marketing communications, we will use your name and email address to send you newsletters, updates, promotional offers, or other communications about our products and services. You can opt out of these communications at any time (see Your Rights below regarding withdrawing consent or opting out).

  • Analytics and Improvements: We use data (including automatically collected data and cookies) to understand how our website is used and to improve the user experience, our services, and our offerings. For instance, we analyze which pages are most frequently visited, how users navigate the site, and what content is of interest, so we can refine our content and website design. This helps us ensure our website and services meet our customers’ needs and maintain the high-quality experience expected from a luxury brand.

  • Advertising and Personalization: We may use certain data to personalize your experience and the marketing content you see. For example, with the help of third-party tools like the Facebook Pixel, we might later show you ads on Facebook or other platforms that are relevant to the products or content you viewed on our site. Any such targeted advertising is intended to inform you of our offerings in a relevant way. We do not share your personal details with advertisers for their own use; the process is typically based on cookies and identifiers (see Cookies and Tracking Technologies below), and you can control these through your browser or ad settings.

  • Security and Fraud Prevention: We may process personal data as necessary to maintain the security of our website, systems, and customers. This includes using data to prevent fraudulent activities, debug and repair errors, and protect against unauthorized access or illegal activity.

  • Legal Obligations: In some cases we need to process or retain certain personal data to comply with our legal obligations. For example, we may keep records of transactions or communications as required by law (such as finance or tax regulations), or we may use and disclose information as necessary to comply with a court order, law, or to exercise or defend legal claims.

We will not use your personal data for purposes that are incompatible with those listed above without informing you and obtaining your consent if required. We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you, using your personal data.

Legal Basis for Processing

For individuals located in jurisdictions with data protection laws like the GDPR, we process your personal data on one or more of the following legal bases:

  • Consent: We rely on your consent where we explicitly ask for it, for example, when you subscribe to our newsletter or agree to certain cookies. In such cases, you have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing we conducted based on consent before its withdrawal.

  • Contractual Necessity: Where we collect and use personal data to fulfill a contract with you or to take steps at your request before entering into a contract. This includes processing your information to respond to a request to purchase a product or service, or to provide a service you have asked for. If you are inquiring about or requesting a service from us, this legal basis applies because processing your data is necessary to provide you with what you have asked for.

  • Legitimate Interests: We may process your personal data for our legitimate business interests. This includes uses that are beneficial to our business while also respecting your privacy. For example, using email contact information to follow up on an inquiry, improving our website’s performance through analytics, or sending marketing to existing customers about similar products might be based on legitimate interests. When we rely on this basis, we ensure that our interests are not overridden by your rights and freedoms. You have the right to object to processing based on legitimate interests (see Your Rights below).

  • Legal Obligation: We process personal data when necessary to comply with a legal obligation to which we are subject. For instance, retaining certain business records for tax, accounting, or regulatory purposes, or disclosing information if required by a lawful request from authorities.

We always ensure that we have a valid legal basis to collect and use your personal data. If you have questions about the specific legal basis for a particular processing activity, please contact us.

Cookies and Tracking Technologies

Like most websites, Olea Legacy uses cookies and similar tracking technologies to provide and improve our services.

What Are Cookies?
Cookies are small text files that are placed on your computer or device when you visit a website. They allow the website to recognize your device and store certain information about your preferences or past actions. We also use related technologies like web beacons (pixel tags) and local storage that can function in a similar way. In this Policy, we refer to all of these as “cookies and tracking technologies.”

How We Use Cookies
We use cookies and tracking technologies for several purposes:

  • Essential Functions: Some cookies are necessary for our website to function properly. For example, if our site has a form or preference setting, a cookie might be used to remember the information you entered as you navigate between pages. These cookies are generally required to enable you to move around the site and use its features.

  • Preferences and Functionality: We use cookies to remember your choices and preferences (such as language or region selection) to provide a more personalized experience. They help us tailor our site to you.

  • Analytics: We use cookies to collect information about how visitors use our site, which pages are popular, how long users stay, and how they move around the site. This helps us analyze site traffic and understand user interactions with our content. For this purpose, we use third-party analytics tools (notably Google Analytics). The information obtained is generally aggregated and does not identify you personally. For instance, Google Analytics provides us with anonymized insights such as overall website visit duration, geographic regions of visitors, and usage patternscreated.co. We use these insights to improve our website’s structure, content, and performance.

  • Advertising and Marketing: We also utilize certain cookies for marketing purposes. In particular, we use the Facebook Pixel and related advertising cookies to help deliver relevant advertisements to individuals who have visited our site. The Facebook Pixel (provided by Meta/Facebook) tracks certain actions on our website (such as visiting a specific page) and allows us to later show ads on Facebook or Instagram that are more likely to interest you. For example, if you view a product or service page on our site, we might use the Pixel to later show you an ad about that product or related content on Facebook. The data collected through these tracking technologies may include information about your device and browsing behavior, but it is used by us in aggregate or de-identified form for ad performance analysis. We do not receive personally identifying information like your name or email from these advertising cookies. These advertising partners (Google for Analytics and Meta for Facebook Pixel) may, however, process data about your visit for their own analytics and advertising purposes according to their privacy policies. You can learn more about how these third parties handle data by reviewing Google’s Privacy Policy and Facebook’s Data Policy.

Your Choices Regarding Cookies
Upon your first visit to our site (and periodically thereafter, as required), we may present you with a cookie notice or banner to obtain your consent for non-essential cookies, in accordance with applicable law. You have the right to accept or decline cookies.

  • Browser Settings: Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies or alert you when cookies are being sent. Please note that if you disable or refuse cookies, some parts of our website may become inaccessible or not function properly. For example, certain features that rely on cookies (like remembering your preferences or performing analytics) might not work.

  • Opt-Out Options: For Google Analytics, Google provides an opt-out mechanism through the Google Analytics Opt-Out Browser Add-on, which you can install in your browser to prevent Google Analytics from collecting data on any websites you visit. For Facebook and other advertising cookies, you can adjust your ad preferences in your Facebook user settings to control how your data is used for advertising, or opt-out of targeted ads through tools like the Digital Advertising Alliance’s opt-out page.

Even if you opt out of advertising cookies, you may still see non-personalized advertisements from us – they just will not be tailored to you based on cookies. We encourage you to review our [Cookie Notice] (if available on our site) for more detailed information about the specific cookies in use.

Data Sharing and Disclosure

We value your privacy and handle your personal data with care. We do not sell your personal data to third parties under any circumstances. We also do not share your personal data with third-party companies for their own independent marketing or business purposes. However, we do share certain data with trusted third parties in the following situations, as necessary to run our business and provide our services:

  • Service Providers (Processors): We employ a number of third-party companies and individuals to facilitate and support our operations (“service providers”). This includes, for example:

    • Website and IT Support: Our website is built using standard WordPress plugins and hosted on servers that may be maintained by third-party hosting providers. These providers may process data (e.g., storing data on a server or using a plugin to manage form submissions) solely on our behalf.

    • Analytics Services: We use Google Analytics (provided by Google) to gather usage data, and the Facebook Pixel (provided by Facebook/Meta) for analytics and advertising as described above. These tools collect data via cookies and share it with their respective providers in anonymized or aggregated form. We have appropriate data processing agreements in place with such providers, and they are not permitted to use your data for any purpose other than providing services to us.

    • Email Marketing Services: If you subscribe to our newsletter or marketing emails, we manage our mailing list via a third-party email marketing platform (for example, Mailchimp or a similar service). That service will store your name and email address for the purpose of sending emails on our behalf. They act as a data processor under our instructions and are contractually obligated to protect your information.

    • Communication Tools: We may use standard tools or plugins to send emails or manage inquiries (for instance, an email service or a CRM for tracking communications). These tools will handle your data only as needed to deliver our messages or manage our customer relationships.

    In all cases, our service providers are given only the information necessary to perform their specific services. They are required to keep your information confidential and secure, and they cannot use it for other purposes. We share your data with third parties only in ways described in this Privacy Policy and not for their independent use.

  • Legal Compliance and Protection: We may disclose your personal information if required to do so by law or in the good-faith belief that such action is necessary to: (a) comply with a legal obligation, legal process, or government request; (b) enforce our agreements, terms and conditions, or other applicable policies; (c) protect the rights, property, or safety of Olea Legacy, our customers, or others; or (d) investigate fraud or security issues.

  • Business Transfers: If Olea Legacy is involved in a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the parties involved in the transaction as part of that process. We would ensure that any such transfer is subject to appropriate confidentiality and security arrangements and that your data remains protected. If a change in ownership occurs, the new owners will only be allowed to use your personal information in the manner set out in this Privacy Policy (or a policy with equivalent protections).

Aside from the circumstances described above, we do not share your personal data with third-party partners for their own use. In particular, we do not provide your personal information to unrelated companies for their own marketing purposes, and we do not rent or sell customer lists. Any third parties who process your data do so only for the purposes we’ve specified and in accordance with our instructions and applicable data protection laws.

International Data Transfers

Olea Legacy is a globally oriented brand. The personal data we collect from you may be transferred to, and stored at, locations in countries outside of your own. Our main operations may be based in [Greece and/or the United Kingdom] (please update as appropriate), and our service providers (such as hosting services, analytics providers, and email services) may be located in the United States or other countries. This means that if you are located in the European Economic Area (EEA), the United Kingdom, or another region with data protection laws, your personal information may be transferred to jurisdictions that do not have the same level of data protection laws as your home country.

We take steps to ensure that your data is given an adequate level of protection in the jurisdictions where it is processed. When we transfer personal data out of the EEA/UK, we will typically rely on one or more of the following safeguards:

  • Adequacy Decisions: We may transfer data to countries that have been deemed by the European Commission (or the UK government, as applicable) to provide an adequate level of personal data protection.

  • Standard Contractual Clauses: We may use the European Commission’s approved Standard Contractual Clauses (SCCs) or equivalent contractual provisions under UK law, which contractually oblige the recipient to protect your personal data according to standards essentially equivalent to those in Europe.

  • Privacy Frameworks: Where applicable, we may rely on certified frameworks (for example, an EU-US data transfer framework, if in force) that authorize transfers to certain certified organizations in the US.

Our third-party service providers handling personal data are also required to maintain protections consistent with applicable law for international transfers. For instance, our U.S.-based providers like Google or Mailchimp are engaged under standard data protection clauses and/or have committed to comply with GDPR requirements for European data.

Your Acknowledgment: By using our website or providing information to us, you acknowledge that your personal data may be transferred to and processed in countries other than your own, including the United States. We will ensure such transfers are lawful and that your data remains secure and protected in accordance with this Privacy Policy.

If you have questions about our international data transfer practices or require more information about the safeguards in place, please contact us (see Contact Us section below).

Data Security

We employ appropriate technical and organizational measures to protect the personal data we hold against loss, misuse, and unauthorized access or disclosure. This includes using encryption, secure servers, and access controls to secure the data you share with us. We restrict access to personal information to those staff and service providers who need it to perform their duties, and all such parties are subject to confidentiality obligations.

While we strive to protect your information, please note that no method of transmission over the Internet or electronic storage is 100% secure. Though we take reasonable and industry-standard precautions to safeguard your data, we cannot guarantee absolute security. You can help protect your data by using caution when submitting personal information online and by using up-to-date antivirus software and secure network connections. If you believe your interaction with us is no longer secure (for example, if you suspect a data breach or unauthorized access to your information), please contact us immediately using the details below.

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific duration for which we keep your data may vary depending on the type of data and the reason we have it:

  • For instance, if you contact us with an inquiry or request, we will retain your information for as long as needed to respond to and resolve your inquiry, and for a short additional period in case you follow up.

  • If you subscribe to our newsletter, we will keep your contact details until you unsubscribe or ask us to delete your information, at which point we will remove you from our mailing list.

  • We may retain certain transactional or communications data for a longer period if needed to establish, exercise, or defend our legal rights, or for legitimate business records (for example, maintaining proof of communications or contracts).

  • Information collected via Google Analytics and other cookies is typically retained as per the practices of those providers (Google Analytics, for example, may retain aggregated site metrics for a set duration). We ensure such retention complies with our policies and applicable law.

When we no longer have an ongoing legitimate business need or legal requirement to process your personal data, we will either delete it or anonymize it so that it can no longer be associated with you. If deletion or anonymization is not immediately possible (for example, because the data is stored in backup archives), we will securely store and isolate the data from any further use until deletion is feasible.

Your Rights

You have a number of rights regarding your personal data. Olea Legacy is committed to honoring your rights and ensuring you have control over your information. These rights may vary depending on your jurisdiction, but we include all major rights here and will honor them (or their closest equivalent) for all users, no matter where you are located:

  • Right to Access: You have the right to request confirmation of whether we are processing personal data about you, and if so, to request a copy of the data we hold about you. We will provide you with a copy of your personal data in a commonly used electronic format, or in print, unless doing so would adversely affect the rights and freedoms of others.

  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we have about you. If you believe any of your information is incorrect or out-of-date, please let us know and we will update it.

  • Right to Erasure: You have the right to request that we delete your personal data under certain conditions. This is sometimes called the “right to be forgotten.” We will honor such requests to the extent required by law. For example, if you withdraw your consent (where we rely on consent) or if you object to our processing (see below) and we have no overriding legitimate grounds to continue, or if we unlawfully processed your data, we will delete your personal data upon your request. Note that we may retain certain information if necessary for legal obligations or legal claims.

  • Right to Restrict Processing: You have the right to request that we restrict (pause) the processing of your personal data under certain circumstances. For instance, you can request restriction if you contest the accuracy of the data or have objected to our processing (pending verification of our grounds for processing), or if our processing is unlawful but you prefer restriction instead of deletion.

  • Right to Object: You have the right to object to our processing of your personal data in certain situations. In particular, you can object at any time to the processing of your personal data for direct marketing purposes, and we will stop processing your data for that purpose. If we are processing your data based on a legitimate interest, you can object if you feel our legitimate interest in using your data is outweighed by your rights and freedoms. We will then reconsider our processing and either cease processing or provide compelling legitimate grounds that justify continuation.

  • Right to Data Portability: You have the right to request a copy of certain personal data in a structured, commonly used, machine-readable format, and to have that information transmitted to another organization, where technically feasible. This right applies to personal data that you have provided to us and that we process by automated means, based on your consent or a contract with you. For example, if you provided us with certain information and want us to send it to a different service provider, we can assist with that transfer under applicable law.

  • Right to Withdraw Consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, and it will not affect processing of your data under other legal bases. For example, you can unsubscribe from our newsletter at any time, which will be treated as a withdrawal of consent for marketing emails.

  • California Privacy Rights (CCPA): If you are a California resident, you are entitled to specific rights under the CCPA (California Consumer Privacy Act), including:

    • Right to Know: You can request that we disclose the categories and specific pieces of personal information we have collected about you, as well as information about our data practices (such as the categories of sources of data, our purposes for collecting it, and the categories of third parties with whom we share it).

    • Right to Delete: You can request that we delete the personal information we have collected from you (subject to certain exceptions, such as if the information is needed to complete a transaction or comply with a legal obligation).

    • Right to Opt-Out of Sale: You have the right to opt out of the “sale” of your personal information to third parties. Note: As stated, Olea Legacy does not sell personal information, so while you have this right, we effectively honor it by default.

    • Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA rights. We will not deny goods or services, charge you different prices, or provide a different quality of service just because you exercised your privacy rights.

If you are a resident of California and would like to exercise any of your CCPA rights, please contact us through the methods provided below. For verification purposes, we may ask you to provide information to confirm your identity (such as confirming certain details we already have on file, like your email address). You can also designate an authorized agent to make requests on your behalf, but we will require proof of the authorization and verification of both you and the agent.

Exercising Your Rights:
To exercise any of your rights described above or to make any inquiries about your personal data, please contact us using the information in the Contact Us section of this Privacy Policy. We will respond to your request as required by applicable law. For example, under GDPR we generally have one month to respond, and under CCPA we typically have 45 days (with the possibility of a 45-day extension in certain cases). There is usually no fee for making such requests; however, if requests become excessive or unfounded, we reserve the right to charge a reasonable fee or refuse the request where permitted by law.

Please note that some rights may be limited. For instance, if fulfilling your request would reveal personal data about another person, or if you request deletion of information that we are required by law to keep, we may need to refuse that request (or redact certain information). We will always explain our reasoning if we cannot fulfill a request in part or in full.

Children’s Privacy

Our services and website are not intended for children under the age of 13, and we do not knowingly collect personal information from anyone under 13 years old. If you are under 13, please do not provide any personal information to us. In the event we learn that we have inadvertently collected personal data from a child under 13 (or under the applicable age of consent in your jurisdiction, which may be higher, such as 16 in parts of the EU), we will take immediate steps to delete such information from our records. If you are a parent or guardian and you believe your child has provided personal information to us without consent, please contact us so that we can investigate and delete the data as necessary.

Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we update the policy, we will change the “Last Updated” date at the top of this document. If the changes are significant, we may also provide a more prominent notice (such as a banner on our website or an email notification). We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information and any updates to our data practices. Your continued use of our website or services after we post any modifications to this Policy will constitute your acknowledgment of the changes and your agreement to be bound by the updated Policy.

Contact Us

Olea Legacy welcomes your questions, comments, and requests regarding this Privacy Policy or our data practices. For any privacy-related inquiries or to exercise your rights, please do not hesitate to contact us:

  • Email: info@olealegacy.com

When you contact us, please provide sufficient information for us to verify your identity (if you are requesting information about your data) and to understand and respond to your request. We will address your inquiry as promptly as possible, and in any event within any timeframes required by law.

Thank you for trusting Olea Legacy. We are dedicated to safeguarding your personal information and ensuring that your privacy is respected in all aspects of our business. If you have any concerns about your privacy or how we handle data, please reach out using the above contact information and we will be happy to assist you.