Privacy policy
Last updated: 10 November 2026
This policy explains how Adrestock, operated by Toonghuri (Greece), handles personal data under the EU General Data Protection Regulation (GDPR).
What we collect
- Checkout data — name, email, billing country and payment details are collected and processed by Stripe. We receive your name, email, country, order details and Stripe IDs; we never see your full card number.
- Brief data — the store URL, brand details, logos, product photos, offers and notes you submit in our onboarding form.
- Messages — what you send through our contact form.
- Free concept tool — the store URL you enter. We fetch public pages of that store to draft concepts and do not store the result.
- Technical data — standard server logs from our hosting provider (such as IP address and request time) used for security and reliability.
Why we use it (legal basis)
- To deliver the service you bought and to communicate with you about it (performance of a contract).
- To keep records required by tax and accounting law (legal obligation).
- To protect our site against abuse (legitimate interests).
We do not sell personal data and do not use it for advertising profiles. We do not use your brand assets to train AI models.
Who processes it
- Stripe — payments, invoices and the billing portal.
- Hostinger — website hosting and private file storage for briefs and uploads.
- AI and image tools we use in production may process your product images and brief to create your deliverables.
Some providers may process data outside the EEA under appropriate safeguards such as Standard Contractual Clauses.
How long we keep it
Briefs and assets are kept while you are a client and for up to 12 months after your last order, then deleted. Invoices and payment records are kept as long as tax law requires.
Your rights
You can ask to access, correct, delete or export your data, or object to or restrict its processing, via our contact form. You can also complain to the Hellenic Data Protection Authority (dpa.gr) or your local supervisory authority.
Cookies
This site does not use advertising or analytics cookies. Stripe sets its own cookies on its checkout and billing pages for security and fraud prevention.