YOUR PERSONAL DATA
How Kartomania Ltd handles data through Offsetcards.
This notice explains the main personal data used to operate Offsetcards, fulfil orders, answer enquiries and understand website use.
Privacy Policy
Use the right route.
The online shop is for defined products. Expert Recommendation narrows the specification. Bespoke Quote prices a build that is already substantially defined.
CONTROLLER
Kartomania Ltd, trading through Offsetcards.
CONTACT
UPDATED
13 August 2026
WHO WE ARE
The data controller.
Kartomania Ltd, VAT number EL999210464, operates Offsetcards. The registered business is based at 27B Stavraki Street, Agios Ioannis Rentis 182 33, Athens, Greece. Privacy requests may be sent to [email protected].
DATA WE USE
Information supplied by you and generated by the service.
- Account and contact information such as name, email, telephone number and password hash.
- Billing, delivery, VAT and order information.
- Artwork, project specifications and messages supplied for an order, quote or enquiry.
- Transaction references from payment providers; we do not need to store the full card number.
- Technical and usage data such as IP address, device, browser, pages viewed, cookie choices and security events.
WHY WE USE IT
Purposes and legal bases.
- Contract: to create accounts, quote, take payment, produce, deliver and support orders.
- Legal obligations: to keep tax, accounting and transaction records and respond to lawful requests.
- Legitimate interests: to secure the website, prevent fraud, answer business enquiries and improve the service where those interests do not override your rights.
- Consent: for optional analytics, advertising technologies or marketing where consent is required. Consent can be withdrawn.
SERVICE PROVIDERS
Who may receive data.
Data is shared only as needed with providers supporting hosting, website security, email delivery, analytics, customer communication, payment processing and parcel delivery. Current website integrations may include WooCommerce, Stripe, PayPal, Matomo, Google services, Meta services, OpenAI (ChatGPT Ads conversion measurement), Tawk.to and delivery carriers.
Some providers may process data outside the European Economic Area. Where this happens, the provider and Kartomania must rely on an applicable transfer mechanism and safeguards required by data-protection law.
RETENTION
How long information is kept.
Order, tax and payment records are retained for the period required by Greek and EU law. Account data is kept while the account remains active and afterwards where needed for legal claims or record-keeping. Enquiries and artwork are kept only as long as needed to answer the request, perform the work, support repeat production or resolve a dispute. Security logs and analytics are retained according to the configured service periods.
When information is no longer needed, it is deleted, anonymised or securely restricted.
YOUR RIGHTS
Access, correction and control.
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. You may withdraw consent at any time without affecting earlier lawful processing. We may need to verify identity and may retain data where the law requires it.
You have the right to lodge a complaint with a competent data-protection supervisory authority.
SECURITY & CHANGES
Protection is ongoing.
We use access controls, encryption in transit, updates, monitoring and limited staff access appropriate to the service. No internet system can be guaranteed completely secure.
This notice may be updated when services or legal requirements change. The date above identifies the current published version.
PRIVACY REQUEST
Contact the company responsible for the data.
Describe the request and the email or order it relates to. We may ask for enough information to verify identity.