Keepinboxes Privacy Policy

This Privacy Policy explains how Keepinboxes (CPG TECHNOLOGY SINGLE MEMBER P.C.) processes personal data while providing package receiving, storage, and ShopForMe facilitation services.

1. Data Controller

CPG TECHNOLOGY SINGLE MEMBER P.C. (Keepinboxes)
Kon/nou Paleologou 62, Alexandroupoli 681 31, Greece
support@keepinboxes.com

2. Personal Data We Collect

Account data: name, email, account identifiers, preferences
Service data: shipment info, tracking numbers, pickup/storage records
Collector data: the first and last name of a person you authorize to collect your shipments on your behalf (only if you enter it), the name stated at pickup, the date/time of pickup, the delivery code used and the branch that handed over the parcels. We do not take ID copies or signatures; an ID document may be asked to be shown only in exceptional cases (suspicious transaction, dispute) and is never copied.
Payment/subscription data via payment providers (we do not store card data)
Technical data: IP, device/browser info, security logs

3. Purposes & Legal Bases

Contract performance (providing the service)
Legal obligations (accounting, compliance)
Legitimate interests (security, abuse prevention, improvements)
Consent (optional analytics/performance cookies)

4. Cookies

Necessary cookies are required for the site. Analytics cookies are used only with your consent. Manage preferences on the Cookie Preferences page.

5. Sharing of Data

We share limited data with logistics providers, payment providers, and IT vendors when necessary to deliver the service or comply with law.

Keepinboxes does not sell personal data or share it for advertising/third-party marketing.

6. Retention

We keep personal data for as long as the purpose of processing requires:

Support conversations: 5 years from the last message (defence of potential claims — Greek Civil Code art. 250).
Files and images attached to conversations: 90 days. Attachments are kept solely to verify the related case and are deleted once that purpose ends.
Account, shipment and payment records: retained for the duration of the service relationship and thereafter. These records are kept to meet accounting and tax obligations (minimum 5 years under Greek law), to defend potential claims and disputes, and to preserve your history should you reactivate your account.
Transaction and audit records: operational corrections — including shipments cancelled due to incorrect entry — are logged and retained for fraud prevention and dispute resolution.
Delivery records: for every handover, who collected (you or the person you authorized), which shipments, when and from which branch; kept as proof of delivery for the same period as shipment and payment records. We process the authorized person's name on the basis of contract performance and legitimate interest (proving delivery to the right person); informing that person is your responsibility.
Address/code registry: an irreversible cryptographic hash of your email address is stored so that your CPG code remains stable. If you register again with the same email you receive the same code, and parcels sent with the old code are not lost.
Technical and analytics records: retained for service security, abuse prevention and service improvement.

When you close your account it is deactivated; the records above continue to be retained for the purposes stated. You may request erasure; except for records we are legally required to keep or that are necessary for the defence of legal claims, your data will be deleted or anonymised so that it can no longer be linked to you.

7. International Transfers

Some vendors may process data outside the EEA. Where applicable, we use GDPR-compliant safeguards (e.g., SCCs).

8. Your Rights

You may request access, rectification, deletion, restriction, portability, or object to processing. Contact: support@keepinboxes.com

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

9. Security

We apply reasonable technical and organizational measures. Absolute security cannot be guaranteed on the internet.

10. Changes

This policy may be updated. Updates are published on our website.