Privacy Policy
Last updated: September 2026
This Privacy Policy explains how Ultramarathon.shop collects, uses, stores and protects personal data when you visit our website, place an order, contact us, subscribe to communications or otherwise use our services.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), applicable Greek data protection legislation and other applicable European Union laws.
For privacy-related questions or requests, contact:
1. Data Controller
The data controller responsible for personal data processed through Ultramarathon.shop is the business operating the online store under the trading name Ultramarathon.shop.
The complete legal identity and official business details of the operator are available in our Legal Notice.
Privacy contact:
2. Personal Data We Collect
Depending on how you use our website, we may collect:
First and last name
Email address
Telephone number
Billing address
Delivery address
Order information
Products purchased
Order history
Billing and invoicing information
Business and VAT information where applicable
Limited payment and transaction information
Customer service communications
Information submitted through contact or partnership forms
Newsletter subscriptions and communication preferences
IP address
Browser and device information
Cookie identifiers and website activity, where permitted
Information required for security and fraud prevention
We do not intentionally request special categories of personal data, such as health information, through our normal ordering or contact processes.
Please do not send us sensitive personal information unless it is genuinely necessary and specifically requested.
3. How We Collect Personal Data
We may collect personal data:
Directly from you when you place an order
When you create or use a customer account, if this feature is available
When you complete a contact, newsletter or partnership form
When you communicate with us by email or customer support
Through strictly necessary cookies and similar technologies
Through analytics or marketing technologies where you have given valid consent
From payment, delivery, ecommerce and technical service providers where necessary to complete an order or provide our services
4. How We Use Personal Data
We may process personal data to:
Receive and process orders
Confirm purchases
Prepare and deliver products
Process payments
Handle cancellations, returns and refunds
Communicate about orders and deliveries
Provide customer service
Issue invoices and maintain accounting records
Respond to enquiries
Manage partnership enquiries
Prevent fraud and unauthorised transactions
Protect website and account security
Operate and maintain our online store
Manage customer accounts where available
Send newsletters or promotional communications where permitted
Measure website performance where consent is required and provided
Comply with legal, accounting, tax and regulatory requirements
Establish, exercise or defend legal claims
5. Legal Bases for Processing
We process personal data only where an appropriate legal basis exists.
Performance of a Contract
We process data necessary to accept, fulfil and support your order, including payment, delivery, returns and refunds.
Legal Obligation
We may process and retain personal data where required by tax, accounting, consumer protection, product safety or other applicable laws.
Legitimate Interests
We may process limited personal data where necessary for legitimate interests such as:
Website security
Fraud prevention
Customer support
Business administration
Service improvement
Protection of our legal rights
We consider the impact on your rights and freedoms before relying on legitimate interests.
Consent
Where required, we rely on your consent for optional activities such as:
Marketing emails
Newsletters
Analytics cookies
Advertising or marketing cookies
You may withdraw your consent at any time.
Withdrawal does not affect processing that was lawful before consent was withdrawn.
6. Orders & Customer Accounts
When you place an order, we may process information necessary to:
Confirm your order
Process payment
Prepare products
Arrange delivery
Provide tracking or delivery updates
Provide customer support
Process returns or refunds
Meet legal and accounting obligations
Where customer accounts are available, we may store information such as:
Order history
Addresses
Account preferences
You are responsible for keeping your account credentials secure.
7. Payments
Payments are processed through the payment methods and payment providers shown during checkout.
Depending on the payment method, payment providers may process information such as:
Name
Billing information
Transaction amount
Currency
Payment account information
Device or fraud-prevention information
Payment status
Ultramarathon.shop may receive limited information such as:
Payment status
Transaction reference
Payment method
Amount
We do not normally receive or store complete payment card numbers or card security codes.
Payment providers process personal data according to their own legal and privacy obligations.
8. Shipping & Delivery
To deliver an order, we may provide necessary personal data to:
Courier companies
Postal operators
Fulfilment providers
Other delivery partners
This may include:
Name
Delivery address
Telephone number
Email address
Shipment reference
Delivery instructions
Information necessary for customs processing where applicable
Delivery providers process this data for purposes including transportation, delivery, tracking, notifications and legal compliance.
9. Partnerships & Business Enquiries
If you contact us regarding a race, club, team, event or other partnership, we may process information including:
Contact name
Role
Organisation or event name
Email address
Telephone number
Country
Event information
Requested products or services
Information included in your enquiry
We use this information to evaluate and respond to the enquiry and, where appropriate, manage any resulting commercial relationship.
Submitting an enquiry does not guarantee acceptance of a partnership.
10. Newsletters & Marketing
We may send newsletters, product updates, news or promotional communications where we have an appropriate legal basis.
Where consent is required, we will obtain it before sending such communications.
You may unsubscribe at any time by:
Using the unsubscribe link in a marketing email
Contacting info@ultramarathon.shop
Changing communication preferences where this option is available
Unsubscribing from marketing does not prevent us from sending essential transactional communications concerning an active order, payment, delivery, return, security issue or customer support request.
We do not sell personal data to advertisers or third parties.
You also have the right to object to processing of your personal data for direct marketing purposes.
11. Cookies & Similar Technologies
Ultramarathon.shop uses cookies and similar technologies.
Strictly necessary technologies may be used for functions including:
Website security
Shopping cart functionality
Checkout
Session management
Payment processes
Remembering cookie preferences
Optional analytics or marketing technologies are used only where permitted and, where required, after you have provided consent.
You may accept, reject or manage optional cookies through the cookie controls available on our website.
You may change or withdraw your consent at any time.
For more information, please read our Cookie Policy.
12. Service Providers & Other Recipients
We may share personal data where necessary with trusted service providers, including:
Website hosting and ecommerce providers
Payment processors
Fraud-prevention providers
Couriers and delivery companies
Accounting and tax professionals
Legal and professional advisers
Email and newsletter providers
Analytics providers where permitted
Advertising providers where valid consent has been obtained
Technical support and cybersecurity providers
Public authorities where disclosure is legally required
We aim to provide service providers only with the information reasonably necessary for the relevant service.
Where a service provider processes personal data on our behalf, appropriate contractual and data-protection safeguards are required. GDPR requires processors acting on behalf of a controller to be governed by appropriate contractual or legal arrangements.
13. International Data Transfers
Some service providers may process personal data outside Greece or outside the European Economic Area (EEA).
Where required, international transfers will rely on an appropriate legal mechanism, which may include:
A European Commission adequacy decision
European Commission Standard Contractual Clauses
Appropriate additional safeguards
Another legally recognised transfer mechanism
You may contact us at info@ultramarathon.shop for further information about applicable transfer safeguards.
14. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law.
Retention periods depend on the type of information and may include:
Order and invoice information for legally required accounting and tax periods
Delivery information for as long as necessary to complete and support delivery
Customer service correspondence for an appropriate period after the matter is resolved
Partnership enquiries while discussions remain active or reasonably relevant
Newsletter information until you unsubscribe or withdraw consent
Cookie and analytics information according to applicable cookie settings and retention periods
Security and fraud-prevention information for as long as reasonably necessary
Records needed for legal claims for the applicable limitation period
After the applicable retention period, personal data may be deleted, anonymised or securely restricted unless continued retention is legally required.
15. How We Protect Personal Data
We use appropriate technical and organisational measures designed to protect personal data against:
Unauthorised access
Accidental loss
Unauthorised alteration
Unlawful disclosure
Destruction
Misuse
Measures may include:
Secure website connections
Access controls
Account protection
Trusted payment providers
Software updates
Security monitoring
Restricted access to personal information
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
16. Your GDPR Rights
Subject to applicable law, you may have the right to:
Be informed about how your personal data is used
Access your personal data
Correct inaccurate or incomplete information
Request deletion of personal data in eligible circumstances
Restrict processing
Object to certain processing
Receive eligible data in a structured, commonly used and machine-readable format
Request eligible data be transferred to another controller where applicable
Withdraw consent where processing is based on consent
Object to direct marketing
Lodge a complaint with a competent Data Protection Authority
These rights are subject to the conditions and limitations provided by applicable law.
To exercise your rights, contact:
Please describe your request clearly.
We may request reasonable information to verify your identity.
Requests are normally free of charge.
We will respond without undue delay and generally within one month, as required by the GDPR. In certain cases permitted by law, the response period may be extended.
We may need to retain certain information even after a deletion request where retention is necessary to comply with legal obligations.
17. Complaints
If you have concerns about how we process your personal data, please contact us first:
You also have the right to lodge a complaint with a competent supervisory authority.
For Greece, the supervisory authority is:
Hellenic Data Protection Authority
Greece
The Hellenic Data Protection Authority accepts complaints concerning alleged violations of data-protection law and GDPR rights.
18. Children's Privacy
Our online store is not specifically directed at children.
We do not knowingly collect personal data from children where the required authorisation under applicable law has not been provided.
If you believe that a child has submitted personal data to us improperly, please contact:
We will review the matter and take appropriate action where required.
19. External Links
Ultramarathon.shop may contain links to external websites, including:
Manufacturer websites
Brand websites
Courier services
Social media platforms
Other third-party providers
External websites operate under their own terms and privacy policies.
We are not responsible for the privacy practices or independent content of third-party websites.
20. Changes to This Privacy Policy
We may update this Privacy Policy where necessary to reflect changes in:
Services
Products
Website technology
Payment or delivery providers
Data-processing activities
Legal or regulatory requirements
The latest version will be published on this page with its most recent update date.
Where required by law, we may provide additional notice regarding significant changes.
21. Contact Us
For questions about this Privacy Policy, personal data or the exercise of your GDPR rights:
Ultramarathon.shop
Email: info@ultramarathon.shop
The complete legal identity and official business information of the operator are available in our Legal Notice.
Ultramarathon.shop
Fuel the Distance.
Specialized endurance nutrition, hydration and essential gear for ultramarathon runners, trail athletes, cyclists and triathletes.
SHOP
Shop All Products
Hydration
Nutrition & Energy
Recovery
Race Packs
© 2026 Ultramarathon.shop. All rights reserved.
FUEL THE DISTANCE.