Skip to content
Legal

Privacy Policy

How we collect, use, and protect your personal data.

Last updated: October 18, 2026

1. Who we are

SmartWavesGR is a digital design and web development studio based in Heraklion, Crete. The data controller responsible for the personal data described in this policy is the site's owner, who can be reached at info@smartwaves.gr.

2. What information we collect

We only collect what you choose to share with us:

  • Through the contact form: full name, business name (optional), phone number, email address and a short description of your request.
  • Through the AI assistant: the messages you write and, if you ask us to get in touch, the details you choose to leave (name, email or phone, business name, the service you are interested in).
  • If you agree to receive updates: your email address.

3. How and why we use it

We use the details you send us solely to get in touch, understand what you need, and put together a proposal or reply. We don't use your information for advertising, we don't build behavioural profiles, and we never sell or share it with third parties beyond what's described in this policy. We never ask for, and do not collect, any sensitive personal data.

4. The contact form

Our contact form is powered by a third-party service, FormSubmit (formsubmit.co). When you submit the form, the details you enter are sent directly from your browser to FormSubmit, which forwards them to our email address. Your email is also recorded as a contact in our database so that we can follow up on your request.

5. The AI assistant

The messages you write to the assistant are sent to an AI service provider (Groq), which generates the reply. Please don't write sensitive personal data in the chat, such as health or payment details.

If you ask us to get in touch and leave your details, they are sent to our email together with a summary of the conversation and stored in our database, solely so that we can reply to you. If you don't leave any details, we don't keep your conversation on our servers.

The assistant is an automated tool and doesn't replace human advice. You can ask to speak to a person at any time.

6. Cookies and local storage

This site doesn't use tracking cookies or any third-party cookies. The only things stored on your device, through your browser's localStorage and sessionStorage, are: your conversation with the assistant (cleared when you visit again on a different day), a flag that you have seen the page intro, and the place on the page you were at when you switch language (both until you close the tab). Your language is not stored: it comes from the address of the page (/ for Greek, /en for English). None of this is used for tracking. You can clear it at any time through your browser settings.

7. Analytics and third-party services

We don't run any analytics or visitor-tracking tools on the main site. Our fonts are self-hosted and served from our own server rather than Google's, so no data is shared with Google for that purpose.

Our demo pages (such as Villa Ammos and BLACKOUT), which are not linked from the home page, load images from Unsplash and an embedded Google Map purely for design demonstration. They don't represent real businesses, and any booking forms on those pages run in demo mode only, with no data sent anywhere.

8. Data storage and security

The site is hosted on third-party infrastructure (Vercel), which may process basic technical connection data (such as your IP address) as part of standard server operation, under its own privacy policy. The contact details you send us are stored in our email account and in a business database, accessible only to the site's owner. We use the Resend service to send email.

9. Data retention

We keep the information you send us only for as long as needed to respond to your enquiry or for the duration of our working relationship. If you subscribed to updates, we keep your email until you unsubscribe through the link in the messages. You can ask us to delete your data at any time, as described below.

10. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access the data we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your data ("the right to be forgotten")
  • Restrict or object to how it's processed
  • Receive your data in a portable format

11. Contact for privacy matters

To exercise any of these rights, or for any question about how we handle your personal data, email us at info@smartwaves.gr and we'll get back to you as soon as possible.

12. Changes to this policy

We may update this policy from time to time as the site and our work evolve. The date of the latest update is shown at the top of this page. This document is provided for informational purposes and does not constitute personalized legal advice.