Privacy Policy

This policy explains how NO BOX (https://readnobox.com) collects and uses personal data when you visit the site, use the contact form, join the newsletter, or download free materials. It is written to meet the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019.

Who is responsible (data controller)

George Makaronidis (sole trader), K. Karamanli 24, 54639 Thessaloniki, Greece. VAT EL109753066 · GEMI 154021305000.
Data-protection contact: signmak@gmail.com.

What we collect, why, and on what legal basis

• Contact form — your name, email and message. Purpose: to receive and reply to your enquiry. Legal basis: our legitimate interest (GDPR Art. 6(1)(f)) in responding to you, or steps at your request.
• Newsletter — your email, optional first name, and a record of your consent (timestamp/IP). Purpose: to send occasional updates you asked for. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Free downloads — if a download is sent by email, your email address. Purpose: to deliver the file you requested. Legal basis: your consent / steps at your request.
• Analytics — only if you accept non-essential cookies: aggregate, pseudonymised usage data via Google Analytics 4 (with IP anonymisation). Purpose: to understand which pages help and improve the site. Legal basis: your consent (Art. 6(1)(a)). See the Cookie Policy.
• Advertising measurement — only if you accept non-essential cookies: the Meta Pixel records your visit and which pages you view, so we can measure our Facebook/Instagram ads and, where applicable, show our ads to people who have visited the site. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time. See the Cookie Policy.
• Technical & security data — IP address, browser/device type, pages visited, and server/security logs created automatically by our host. Purpose: to keep the site secure, prevent abuse and diagnose problems. Legal basis: our legitimate interest in security (Art. 6(1)(f)).
• Legal/accounting records — where we are legally required to keep records. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).

Who we share it with (processors & recipients)

• Hostinger — website hosting, email and server/security logs.
• Google (Google Analytics 4) — analytics, only after you consent.
• Meta Platforms Ireland Ltd (Meta Pixel) — advertising measurement and audiences, only after you consent.
• Kit (Kit.com, Inc. — “ConvertKit”) — our email newsletter provider; if you subscribe, they store your email address and first name to send you the emails you asked for. You can unsubscribe from any email at any time.
• Shopify and our print-on-demand partner — if you buy merchandise; they handle the order, payment and shipping on their platforms.
• Amazon — if you buy the book; Amazon is the seller and applies its own privacy policy.

We do not sell your personal data, and we do not create public profiles, messaging or comment systems.

International transfers

Some providers (for example Google, Meta, Shopify and Kit) may process data outside the European Economic Area, including in the United States. Where they do, transfers are protected by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. Hosting and email are provided within the EU/EEA.

How long we keep it

• Contact messages: until your enquiry is resolved and then up to 12 months.
• Newsletter data: until you unsubscribe; consent records are kept for a reasonable period afterwards as proof of consent.
• Server/security logs: a short period, typically up to 6–12 months.
• Analytics: retained by Google for up to 14 months.
• Accounting/tax records: for the period required by Greek law (generally at least 5 years).

Your rights

Under the GDPR you have the right to: access your data; have it corrected or erased; restrict or object to processing; data portability; and, where processing is based on consent, to withdraw that consent at any time (without affecting prior processing). We do not carry out automated decision-making that produces legal or similarly significant effects about you (GDPR Art. 22). If you consent to advertising cookies, the Meta Pixel may be used to show you our ads based on your visit; you can withdraw consent at any time. To exercise any right, email signmak@gmail.com.

Complaints

You can lodge a complaint with the Greek supervisory authority, the Hellenic Data Protection Authority (HDPA) — Kifissias 1-3, 115 23 Athens — www.dpa.gr.

Children

The newsletter is intended for adults; in line with Greek law we do not knowingly process the data of children under 15 without parental consent. If you believe a child has given us data, contact us and we will delete it.

Changes

We may update this policy; the “last updated” date above shows the current version.

Contact

Questions about privacy? Email signmak@gmail.com.