Privacy policy
This Privacy Policy describes how NCSquared ("we", "us") collects, uses and discloses your personal information when you visit ncsquared2.com or buy from us.
Who we are
NCSquared is the trading name of NCSquared2, 84 Faneromenis Avenue, 189 00 Salamina, Greece — full business details are in our legal notice. Email: info@ncsquared2.com. We are the data controller for the information described below.
What we collect and why
Device and browsing information
- What: browser version, IP address, time zone, cookie data, the pages and products you view, search terms, and how you interact with the site.
- Why: to load the site correctly for you and to understand how the shop is used so we can improve it.
- How: collected automatically using cookies, log files and pixels.
- Basis: your consent for analytics and advertising cookies; our legitimate interest in keeping the site secure and working for strictly necessary processing.
- Shared with: Shopify (our platform and processor), Google Analytics, and the advertising platforms listed below.
Order information
- What: your name, billing address, shipping address, payment information, email address and phone number.
- Why: to take and fulfil your order, process payment, arrange delivery, send you confirmations and receipts, screen orders for fraud, and — if you have opted in — send you marketing.
- How: collected from you at checkout.
- Basis: performance of our contract with you; legal obligation for tax and accounting records; legitimate interest for fraud screening; your consent for marketing.
- Shared with: Shopify, our payment provider, and the courier delivering your parcel.
Customer support information
- What: whatever you include when you email us — typically your name, order number and the details of your question.
- Why: to answer you and resolve the issue.
- Basis: our legitimate interest in answering you, or performance of our contract where your question concerns an order.
- Shared with: Google (our email is hosted on Gmail).
Minors
This site is not intended for anyone under 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has given us personal information, email us at the address above and we will delete it.
Sharing your information
We share your personal information only with the service providers we need in order to run the shop and fulfil our contract with you — and, where you have consented, with the advertising platforms:
- Shopify Inc. powers our online store. You can read how Shopify handles your information at shopify.com/legal/privacy.
- Google provides our analytics and hosts our email. See policies.google.com/privacy. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout.
- Meta Platforms and Google Ads, where we run advertising, receive information about your visit so we can measure and target our ads.
- Our courier, which receives the name and address needed to deliver your parcel.
We may also disclose your information to comply with the law, to respond to a lawful request from an authority, or to protect our rights.
Advertising
We run, or plan to run, ads on Meta (Facebook and Instagram) and Google. These platforms use cookies and similar technologies to show you our ads and to measure whether they worked. We set analytics and advertising cookies only after you consent through the cookie banner, and you can change or withdraw your consent at any time through the "Cookie preferences" link at the bottom of every page.
You can also limit ad targeting directly with each platform:
You can also opt out through the Digital Advertising Alliance at optout.aboutads.info.
Marketing emails
You get marketing emails from us only if you signed up for them — through the newsletter pop-up or the tick-box at checkout. Signing up is never a condition of buying. Every marketing email identifies us, includes our postal address, and contains an unsubscribe link that works in one click. We honour unsubscribes promptly.
"Sale" and "sharing" under US state law
We do not sell your personal information for money. We do use advertising cookies from Meta and Google Ads, which collect information about your visit; some US state laws call this "sharing" for targeted advertising. You can opt out at any time by declining or withdrawing cookie consent through the "Cookie preferences" link, or by emailing info@ncsquared2.com.
Lawful basis (GDPR)
If you are in the European Economic Area, we process your personal information on the following bases:
- Performance of a contract — to take, fulfil and deliver your order.
- Your consent — for marketing emails and for non-essential cookies. You can withdraw consent at any time.
- Legal obligation — to keep tax and accounting records.
- Legitimate interests — to prevent fraud and to keep the shop working properly, where those interests do not override your rights.
How long we keep it
We keep order and invoice records for as long as Greek tax law requires — generally five years, or longer while an audit or dispute is open. Marketing contact details are kept until you unsubscribe. Support emails are kept for two years. Analytics data is kept for 14 months, after which it is deleted or aggregated; advertising cookie lifetimes are listed in the cookie table below. You can ask us to erase your information at any time — see "Your rights" below.
Where your information goes
We are based in Greece and your information is mainly processed in the European Union. Some of our providers process it outside the EEA: Shopify stores data in the United States and Canada (Canada is covered by a European Commission adequacy decision; US transfers are covered by the Commission's Standard Contractual Clauses), and Google and Meta process data in the United States under the EU-U.S. Data Privacy Framework, to which both are certified. Where we rely on Standard Contractual Clauses, you can request a copy of them by emailing info@ncsquared2.com.
Automated decision-making
We do not make decisions with legal or similarly significant effects about you by fully automated means. Shopify applies limited automated fraud screening — temporary blocklists of IP addresses and payment cards associated with repeated failed transactions — which lasts hours or days and has no legal or similarly significant effect on you.
Your rights
You have the right to access the personal information we hold about you, to receive a copy of it, and to ask us to correct, update or erase it. You can also object to processing and ask us to restrict it.
You can also: withdraw any consent at any time (every marketing email we send contains an unsubscribe link, and cookie consent can be changed via the "Cookie preferences" link); object at any time to direct marketing, which we will always honour; and ask for data portability — a copy of the information you gave us in a structured, commonly used, machine-readable format, transmitted to another provider where technically feasible.
To exercise any of these rights, email info@ncsquared2.com. We will respond within one month. If your request is complex or you make several, we may extend this by up to two further months — we will tell you within the first month if so. We may ask you to confirm your identity before we act on a request.
If you are unhappy with our response, you can complain to the Hellenic Data Protection Authority at dpa.gr, or to the supervisory authority in your own country.
If you are a California resident, you have equivalent rights to know, delete and correct, the right to opt out of "sharing" for targeted advertising, and the right not to be discriminated against for exercising them. Contact us at the same address.
Cookies
A cookie is a small file stored on your device when you visit the site. We use cookies that are necessary for the shop to work — keeping your cart, your session and your checkout intact — as well as analytics and advertising cookies, which we set only where you have consented.
Necessary cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ab | Shopify | Admin access. | 2 years |
| _secure_session_id | Shopify | Navigation through the storefront. | 24 hours |
| cart, cart_sig, cart_ts | Shopify | Your shopping cart and checkout. | 2 weeks |
| checkout_token | Shopify | Checkout. | 2 weeks |
| secret | Shopify | Checkout. | 1 year |
| secure_customer_sig, storefront_digest | Shopify | Customer login. | persistent |
| _shopify_u | Shopify | Updating your account details. | 12 hours |
| _tracking_consent | Shopify | Records your consent preferences. | 1 year |
| localization, cart_currency | Shopify | Language and currency selection. | up to 2 years |
Analytics and advertising cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _landing_page, _orig_referrer | Shopify | Records how you arrived at the site. | 2 weeks |
| _s, _shopify_s | Shopify | Shopify analytics. | 30 minutes |
| _shopify_y, _y | Shopify | Shopify analytics. | 1 year |
| _shopify_sa_p, _shopify_sa_t | Shopify | Shopify analytics for marketing and referrals. | 30 minutes |
| _ga, _ga_* | Google Analytics. | 2 years | |
| _gcl_au | Google Ads conversion measurement. | 3 months | |
| _fbp | Meta | Meta advertising. | 3 months |
| _fbc | Meta | Meta advertising (ad-click attribution). | 3 months |
You can block or delete cookies through your browser settings, but parts of the shop may stop working properly if you block the necessary ones.
Do Not Track
There is no consistent industry standard for responding to "Do Not Track" browser signals, so we do not currently change our practices when we receive one.
Changes to this policy
We may update this policy to reflect changes in how we work or in the law. The date below tells you when it was last changed.
Contact
For anything to do with your privacy, email info@ncsquared2.com or write to us at NCSquared2, 84 Faneromenis Avenue, 189 00 Salamina, Greece.
Last updated: 2 August 2026