Last updated: 23 September 2026

This Privacy Policy explains how we collect and use personal data when you visit angryparrot.gr, contact us about our services, subscribe to our newsletter, or use and buy our WordPress plugins. We process personal data in line with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Greek Law 4624/2019.

1. WHO WE ARE (DATA CONTROLLER)

Nikiforos Bafas of Ioannis (sole proprietorship), trading as Angry Parrot Creative Studio (ANGRY PARROT ΔΗΜΙΟΥΡΓΙΚΟ ΓΡΑΦΕΙΟ)
Address: Koleti 21A, 45221 Ioannina, Greece
VAT No.: EL114471149
General Commercial Registry (GEMI) No.: 121816829000 (EUID: ELGEMI.121816829000)
Mobile: 6972923992
E-mail: doit@angryparrot.gr

2. WHAT DATA WE COLLECT AND WHY

Contact form and e-mails. When you contact us, we collect your name, e-mail address, phone number (optional), the service you are interested in and your message. We use them to reply to you and to prepare an offer. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR).

Clients of our services. For projects we carry out (design, web development, 3D, photography), we process the contact, invoicing and project data needed to deliver the work and issue invoices. Legal basis: performance of a contract and compliance with our tax and accounting obligations (Art. 6(1)(b) and (c) GDPR).

Newsletter. If you subscribe, we collect your e-mail address and, optionally, your first name, together with the date, time and IP address of your subscription and confirmation. We use double opt-in: you are only subscribed after you confirm through the link we send you. We only send news about our plugins and related updates. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through the unsubscribe link in every e-mail.

Plugin purchases. Our paid plugins are sold through Freemius, Inc., which acts as the reseller and Merchant of Record. Freemius processes the payment, billing details, taxes and invoices, and manages licenses. We receive from Freemius the data needed to provide the license, updates and support, such as your name, e-mail address, plan, license status and the website(s) where the plugin is activated. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Freemius processes payment data as an independent controller under its own privacy policy.

Plugin usage data (opt-in). When you activate one of our plugins, you may choose to share basic, non-sensitive diagnostic data through Freemius, such as your site URL, WordPress and PHP versions, the plugin version and your admin e-mail. This is optional, and the plugin works fully without it. Legal basis: your consent (Art. 6(1)(a) GDPR). You can opt out at any time from the plugin’s account page.

Support requests. When you contact us for plugin support, we process your e-mail, license details and the information you send us in order to help you. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Website analytics and advertising. With your consent, given through our cookie banner, we use Google Analytics 4 to understand how visitors use the website and Google Ads to measure the results of our advertising campaigns. Legal basis: your consent (Art. 6(1)(a) GDPR). See section 7 on cookies.

3. WHO RECEIVES YOUR DATA

We do not sell, rent or exchange your personal data. We only share it, to the extent necessary, with:

• our web hosting provider, which stores the website and its database;
• Google (Google Workspace / Gmail for e-mail, Google Analytics and Google Ads);
• Freemius, Inc. for plugin sales, payments, licensing and optional usage data;
• our e-mail delivery provider for newsletters (Amazon Web Services);
• our accountant, and public or judicial authorities when the law requires it.

Our newsletter list is managed with FluentCRM, which runs on our own website, so this data is not handed to a separate newsletter company.

4. TRANSFERS OUTSIDE THE EU

Some of the providers above (for example Google, Freemius and Amazon Web Services) may process data outside the European Economic Area, including in the United States. In those cases, transfers rely on the safeguards provided by the GDPR, such as the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

5. HOW LONG WE KEEP YOUR DATA

• Enquiries that do not lead to a project: up to 2 years after our last communication.
• Client, contract and invoicing data: for as long as required by Greek tax and accounting law.
• Newsletter data: until you unsubscribe. Sign-ups that are never confirmed receive no newsletters.
• Plugin license and support data: for as long as your license is active, and afterwards for as long as needed for legal, tax or dispute-related reasons.
• Analytics data: according to the retention settings of Google Analytics (up to 14 months).

6. YOUR RIGHTS

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, and to data portability (Articles 15–22 GDPR). Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing before the withdrawal. To exercise your rights, e-mail us at doit@angryparrot.gr. We will reply within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (1–3 Kifissias Ave., 11523 Athens, www.dpa.gr).

7. COOKIES

The website uses strictly necessary cookies so that it works properly, plus analytics and advertising cookies (Google Analytics, Google Ads) only if you accept them in the cookie banner. You can change or withdraw your choice at any time through the cookie settings button on the website, or delete cookies from your browser settings.

8. SECURITY

The website is served exclusively over an encrypted connection (HTTPS/SSL). We take appropriate technical and organisational measures to protect personal data from loss, misuse and unauthorised access. Card payments for plugins are handled entirely by Freemius and its payment providers; we never see or store your card details.

9. CHILDREN

Our services and plugins are not intended for children. We do not knowingly collect personal data from persons under 15. If you believe a child has sent us personal data, please contact us and we will delete it.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy when our services or the law change. The date at the top of this page shows the latest update.