Effective date: 31st July 2025

Dr Georgios (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit or use our website https://drgeorgios.com (“Website”), purchase our products or services, or otherwise interact with us. It also explains your rights under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Who We Are

This website is operated by:

Georgios Mavropalias
Agia Triada Epi Agrotemachiou
57019, Agia Triada, Thessaloniki, Greece
Email:

Phone number:

We are the data controller responsible for the processing of your personal information as described in this policy.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

• Identity Data: name, username, date of birth
• Contact Data: email address, billing address, phone number
• Health & Coaching Data (with explicit consent): health history, treatment details, goals, progress notes
• Technical Data: IP address, browser type, operating system, device information
• Usage Data: browsing behavior, page visits, navigation patterns
• Transaction Data: order details, payment history (processed via secure third-party providers)
• Marketing Data: your preferences in receiving newsletters or updates

We do not knowingly collect data from individuals under 18 years of age.

3. How We Collect Your Data

We collect data through:

• Forms you fill in on our site (e.g. checkouts, contact forms)
• Purchases of digital products or coaching services
• Email subscriptions and surveys
• Your use of the website, through cookies and analytics tools
• Secure integrations with third-party platforms (e.g. Stripe, Wise, MemberPress).

4. How We Use Your Personal Data

We use your personal data for the following lawful purposes:

• To deliver your purchases and services
• To communicate with you about bookings, programs, and updates
• To personalize your coaching experience
• To comply with legal and financial regulations
• To respond to inquiries and provide customer support
• To send marketing emails (only with your explicit consent)
• To monitor website performance and improve our content and offerings

We do not sell or rent your personal data to any third parties.

5. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases to process your personal data:

• Consent – for email marketing and sensitive health data
• Contract – to fulfill services you have purchased
• Legal obligation – to meet tax, anti-fraud, and payment compliance requirements
• Legitimate interest – to improve services and ensure website security

6. Data Sharing

We may share your data with:

• Payment providers (e.g. Stripe, Wise) to process your transactions
• Hosting and software services (e.g. WordPress, analytics tools)
• Government authorities if legally required
• Payment networks (e.g. Visa, Mastercard) for fraud detection and compliance checks
• Wise specifically, for verifying buyer information and issuing payment confirmations in compliance with their Terms of Service

All third parties are required to protect your data in accordance with GDPR and are only allowed to process your data on our instructions.

7. International Transfers

Your data may be transferred outside the European Economic Area (EEA), such as to servers or services in the United States. We ensure such transfers are lawful by relying on standard contractual clauses or other legal mechanisms.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. These include:

• Functional cookies (e.g. remembering login details)
• Analytical cookies (e.g. Google Analytics)
• Third-party cookies (e.g. YouTube, embedded tools)

You can modify your cookie preferences through your browser settings.

9. Data Retention

We retain your data only for as long as necessary to fulfill the purposes for which it was collected:

• Coaching data: Coaching records and session notes may be retained indefinitely to support continuity of care, protect against legal claims, and improve long-term program effectiveness. You may request the deletion of your data at any time, and we will comply unless we are legally required to retain the records.
• Purchase records: 7 years (required by tax law)
• Comments: indefinitely unless you request deletion
• Email subscribers: until you unsubscribe

10. Your Rights Under GDPR

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict data processing
• Withdraw your consent at any time
• Request a copy of your data in a portable format
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at

11. Data Security

We take appropriate technical and organizational measures to protect your data:

• SSL encryption on all site pages
• Secure password protection
• Use of PCI-compliant third-party payment gateways
• Access control for all user and admin data

12. Your Responsibilities

You must ensure that any data you provide is accurate and up to date. You are responsible for safeguarding login credentials and using our services appropriately.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect legal, technical, or operational changes. The updated version will be posted on this page with a revised “Effective Date.”

14. Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, contact:

Email:

Phone number:
Address: Agia Triada Epi Agrotemachiou, 57019, Agia Triada, Thessaloniki, Greece