Privacy Policy

Last updated: 17 July 2026

This Privacy Policy explains how Ultramarathon.shop collects, uses, stores and protects personal data when you visit our website, place an order, contact us, subscribe to our communications or use our services.

Ultramarathon.shop respects your privacy and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679, applicable Greek data protection legislation and other relevant European Union laws.

1. DATA CONTROLLER

The data controller responsible for the processing of personal data through this website is the business operating under the trading name Ultramarathon.shop.

The complete legal identity, registered business address, registration information and contact details of the data controller are available on our Legal Notice page.

Privacy contact email:

support@ultramarathon.shop

2. PERSONAL DATA WE COLLECT

Depending on how you use our website, we may collect the following categories of personal data:

• Identity information, such as your first name and last name.

• Contact information, such as your email address, telephone number, billing address and delivery address.

• Order information, such as products purchased, quantities, order value, discounts, delivery method and order history.

• Billing and invoicing information, including business details and VAT information where applicable.

• Limited payment and transaction information provided by payment service providers.

• Communications sent through email, contact forms or customer support.

• Information submitted by race organizers, clubs, teams and other partnership applicants.

• Newsletter subscriptions and marketing preferences.

• Technical information, such as IP address, browser type, device information, cookie identifiers and website activity, where permitted by law.

• Information required for fraud prevention, website security and transaction verification.

We do not request special categories of personal data, such as medical information, through our standard ordering and contact processes.

Please do not send us medical or other sensitive personal information unless it is strictly necessary and specifically requested.

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

• Directly from you when you place an order.

• When you create or use a customer account, where this feature is available.

• When you complete a contact, newsletter or partnership form.

• When you communicate with us by email or through customer support.

• Automatically through strictly necessary cookies and similar website technologies.

• Through analytics or marketing technologies where you have provided consent.

• From payment, delivery, ecommerce and technical service providers where necessary to complete a transaction or provide support.

4. HOW WE USE PERSONAL DATA

We may use personal data for the following purposes:

• To receive, confirm, prepare and deliver orders.

• To process payments, refunds, cancellations, exchanges and returns.

• To communicate with you regarding an order or customer service request.

• To issue invoices and maintain legally required accounting records.

• To respond to questions, partnership enquiries and contact requests.

• To operate race, club and team partnership programs.

• To provide participant discount codes, special pricing or event-related services where applicable.

• To prevent fraud, abuse, unauthorized transactions and security incidents.

• To operate, maintain, secure and improve our website and online store.

• To manage customer accounts where this feature is available.

• To send newsletters, offers and product updates where you have provided consent.

• To measure website performance through analytics cookies where you have provided consent.

• To comply with legal, accounting, tax, consumer protection and regulatory obligations.

• To establish, exercise or defend legal claims.

5. LEGAL BASES FOR PROCESSING

We process personal data only where an appropriate legal basis is available.

Performance of a contract

We process information that is necessary to accept, prepare, deliver and support your order, including handling payments, refunds, cancellations and returns.

Legal obligation

We may process and retain information where necessary to comply with tax, accounting, consumer protection, product safety and other legal obligations.

Legitimate interests

We may process limited personal data for legitimate business purposes, such as website security, fraud prevention, customer support, service improvement and the protection of our legal rights.

We consider whether these interests could negatively affect your rights and freedoms before relying on this legal basis.

Consent

We rely on consent for optional activities such as newsletters, promotional communications, analytics cookies and advertising cookies.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

6. ORDERS AND CUSTOMER ACCOUNTS

When you place an order, we process the information necessary to:

• Verify and confirm your order.

• Prepare the products you purchased.

• Process the transaction.

• Arrange delivery.

• Communicate order and delivery updates.

• Provide customer support.

• Handle cancellations, returns and refunds.

• Comply with accounting, tax and consumer protection requirements.

Where customer accounts are available, we may store order history, delivery information and account preferences so that you can access and manage them.

You are responsible for keeping your account credentials confidential and for notifying us if you believe that your account has been accessed without authorization.

7. PAYMENTS

Payments are processed through the payment methods and third-party payment providers displayed during checkout.

Depending on the payment method selected, the payment provider may process information such as:

• Your name.

• Billing details.

• Payment account information.

• Transaction amount.

• Currency.

• Device and fraud-prevention information.

• Payment status.

Ultramarathon.shop may receive limited transaction information, such as the payment status, transaction reference, payment method and amount.

We do not normally receive or store complete payment card numbers or card security codes.

Payment providers process information under their own privacy, legal and security terms.

8. SHIPPING AND DELIVERY

To deliver an order, we may provide the necessary delivery information to courier companies, postal operators, fulfilment providers or other delivery partners.

This information may include:

• Your name.

• Delivery address.

• Telephone number.

• Email address.

• Order or shipment reference.

• Delivery instructions.

• Information required for customs processing where applicable.

Delivery providers may process this information for collection, transportation, delivery, tracking, customer notification and compliance with their legal obligations.

9. RACE, CLUB AND TEAM PARTNERSHIPS

When an organizer, club, team or other organization submits a partnership request, we may process information including:

• Contact name and role.

• Organization or event name.

• Email address and telephone number.

• Country and delivery destination.

• Event name and event date.

• Expected number of participants.

• Requested products, quantities or services.

• Information included in the enquiry.

We use this information to evaluate the request, communicate with the applicant, prepare proposals, manage orders and support an agreed partnership.

Submitting an enquiry does not guarantee that a partnership or commercial agreement will be accepted.

10. NEWSLETTERS AND MARKETING COMMUNICATIONS

We may send newsletters, product updates, special offers, partnership news or promotional communications where we have an appropriate legal basis, normally your consent.

You may unsubscribe at any time by:

• Selecting the unsubscribe link included in a marketing email.

• Contacting us at support@ultramarathon.shop.

• Updating your communication preferences where this option is available.

Unsubscribing from marketing communications does not prevent us from sending necessary messages regarding an active order, payment, delivery, return, security matter or customer support request.

We do not sell personal data to advertisers or other third parties.

11. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses strictly necessary cookies and similar technologies required for essential functions such as:

• Website security.

• Shopping cart operation.

• Checkout.

• Payment processing.

• Session management.

• Remembering cookie preferences.

Analytics and marketing cookies are activated only where you have provided consent through the cookie banner.

You can accept, reject or manage optional cookie categories through the cookie preferences available on the website.

You may withdraw or change your consent at any time.

For further information, please read our Cookie Policy.

12. SERVICE PROVIDERS AND RECIPIENTS

Where necessary, we may share personal data with trusted third-party providers that support the operation of our business.

These providers may include:

• Website hosting and ecommerce platform providers.

• Payment processors and fraud-prevention services.

• Courier companies, postal operators and delivery partners.

• Accounting, tax, legal and professional advisers.

• Email communication and newsletter providers.

• Website analytics and advertising providers where consent has been provided.

• Technical support, cybersecurity and information technology providers.

• Customer service and business management providers.

• Public authorities where disclosure is required by law.

Service providers receive only the information reasonably necessary to perform their services.

They are required to process personal data in accordance with applicable data protection and confidentiality requirements.

13. INTERNATIONAL DATA TRANSFERS

Some service providers used by our website may process personal data outside Greece or outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, an appropriate legal transfer mechanism will be used where required.

Such mechanisms may include:

• A European Commission adequacy decision.

• Standard Contractual Clauses approved by the European Commission.

• Additional contractual, technical or organizational safeguards.

• Another transfer mechanism permitted under applicable data protection law.

Information about relevant transfer safeguards may be requested by contacting us.

14. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods depend on the category and purpose of the information.

These periods may include:

• Order, invoice and transaction information for the period required by applicable tax, accounting and commercial laws.

• Delivery information for as long as necessary to complete and support the delivery.

• Customer service communications for as long as necessary to resolve the request and manage potential legal claims.

• Partnership enquiries for as long as discussions remain active or reasonably relevant.

• Newsletter subscription information until you unsubscribe or withdraw your consent.

• Cookie and analytics information for the periods described in the Cookie Policy and the settings of the relevant service.

• Security and fraud-prevention records for as long as reasonably necessary to investigate and prevent incidents.

• Records required for the establishment, exercise or defence of legal claims for the applicable limitation period.

After the applicable retention period, personal data may be deleted, anonymized or securely restricted unless continued retention is required by law.

15. HOW WE PROTECT PERSONAL DATA

We use appropriate technical and organizational measures designed to protect personal data against:

• Unauthorized access.

• Accidental loss.

• Unauthorized alteration.

• Unlawful disclosure.

• Destruction.

• Misuse.

These measures may include secure website connections, access controls, account protection, trusted payment providers, security monitoring, software updates and restricted access to personal data.

Access to personal data is limited to persons and service providers that require it for legitimate business or legal purposes.

However, no method of online transmission or electronic storage can be guaranteed to be completely secure.

16. YOUR DATA PROTECTION RIGHTS

Subject to the conditions of applicable data protection law, you may have the right to:

• Request confirmation as to whether we process your personal data.

• Request access to the personal data we hold about you.

• Request correction of inaccurate or incomplete personal data.

• Request deletion of your personal data.

• Request restriction of processing.

• Object to processing based on legitimate interests.

• Receive eligible personal data in a structured, commonly used and machine-readable format.

• Request the transfer of eligible data to another controller where technically possible.

• Withdraw consent at any time where processing is based on consent.

• Lodge a complaint with a competent supervisory authority.

Some rights may be subject to legal limitations.

For example, we may need to retain certain order, transaction and invoicing records to comply with tax and accounting obligations even after receiving a deletion request.

To exercise your rights, contact:

support@ultramarathon.shop

Please clearly describe your request and the information to which it relates.

We may request reasonable information to verify your identity before responding.

Exercising data protection rights is normally free of charge. However, applicable law may allow us to charge a reasonable fee or refuse a request where it is manifestly unfounded, excessive or repetitive.

17. COMPLAINTS

If you have a concern about the processing of your personal data, you may contact us first so that we can investigate the issue.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority in the European Union.

Hellenic Data Protection Authority

Greece

18. CHILDREN’S PRIVACY

Our online store is not specifically directed at children.

We do not knowingly collect personal data from children without the authorization required under applicable law.

If you believe that a child has provided personal data to us without valid authorization, please contact us so that we can review and, where appropriate, delete the information.

19. EXTERNAL LINKS

Our website may contain links to external websites, including Ultramarathon.gr, manufacturers, brands, social media platforms and third-party service providers.

External websites operate under their own terms and privacy policies.

We are not responsible for the privacy practices, availability, security or content of external websites.

We recommend reviewing the privacy policy of every external website you visit.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes to:

• Our services and products.

• Payment and delivery providers.

• Website features and technologies.

• Legal and regulatory requirements.

• The way personal data is processed.

The latest version will be published on this page together with the date on which it was last updated.

Where required, we may provide additional notice of significant changes.

21. CONTACT US

For questions about this Privacy Policy, the processing of your personal data or the exercise of your rights, contact:

Ultramarathon.shop

Email: support@ultramarathon.shop

The full legal identity, registered business information and official contact details of the operator of Ultramarathon.shop are available on our Legal Notice page.