Skip to content

Cookie Policy

Last updated:

GDPR & EU ePrivacy
CCPA / CPRA
GPC
20+ US state laws

What are cookies?

Cookies are small text files stored on your device when you visit a website. They help us recognise your browser, remember your preferences, and understand how our site is used. Some cookies are essential for the site to work; others are optional and only set with your consent.

This policy explains what cookies we use, why we use them, and how you can control them — including through your browser’s Global Privacy Control (GPC) signal.

Categories of cookies we use

Category Purpose Examples Consent required?
Strictly necessary Enable core functions: login sessions, security, load balancing. Cannot be disabled. Session ID, CSRF token No — always active
Functional Remember your preferences such as language, region, or display settings. locale, theme Yes (EU/UK)
Analytics Measure traffic, page views, and site performance. Data is aggregated and anonymised where possible. _ga, _gid Yes (EU/UK)
Marketing / targeting Deliver relevant ads, retargeting, and measure campaign effectiveness. Includes affiliate tracking. _fbp, affiliate IDs Yes — all regions

Global Privacy Control (GPC)

We automatically honour the GPC browser signal. If your browser sends a GPC opt-out, we will not set marketing or analytics cookies and will not sell or share your personal information — without you needing to take any additional action.

GPC is recognised under California (CCPA/CPRA), Colorado, Connecticut, Montana, Oregon, Texas, and other US state laws. You can enable GPC in browsers such as Firefox and Brave, or via extensions like Privacy Badger.


If you are in the EU, EEA, or UK

We are established in Greece (EU) and subject to the General Data Protection Regulation (GDPR) and Greek Law 4624/2019. We rely on your explicit opt-in consent before setting any non-essential cookies. You can give, change, or withdraw consent at any time using our Cookie Preference Centre.

Our supervising authority is the Hellenic Data Protection Authority (HDPA)hdpa.gr. EU/UK residents may lodge a complaint with their national Data Protection Authority at any time.

Your rights under GDPR

AccessRequest a copy of the data we hold about you.
RectificationAsk us to correct inaccurate personal data.
ErasureRequest deletion of your personal data.
PortabilityReceive your data in a machine-readable format.
Restrict processingLimit how we use your data in certain circumstances.
ObjectObject to processing based on legitimate interests.
Withdraw consentOpt out at any time without affecting past lawful processing.
Lodge a complaintContact your national Data Protection Authority.

Our lawful basis for non-essential cookies is consent (Art. 6(1)(a) GDPR). Strictly necessary cookies rely on legitimate interests (Art. 6(1)(f)) limited to security and service operation.

If you are in California (CCPA / CPRA)

We do not sell your personal information as defined under the CCPA/CPRA. We may share certain data with affiliate and advertising partners for cross-context behavioural advertising — you have the right to opt out at any time using the link in our site footer or by enabling GPC in your browser.

Your rights under CCPA / CPRA

KnowKnow what personal information we collect, use, and share.
DeleteRequest deletion of your personal information.
CorrectRequest correction of inaccurate personal information.
Opt out“Do Not Sell or Share My Personal Information” — see our footer link.
Limit sensitive dataLimit use of sensitive personal information beyond essential purposes.
Non-discriminationWe will not discriminate against you for exercising your rights.

California residents may designate an authorised agent to make requests. We will respond to verifiable consumer requests within 45 days.

Other US state privacy laws

Residents of Colorado, Connecticut, Virginia, Texas, Montana, Oregon, and other states with active privacy laws have equivalent rights to access, correct, delete, and opt out of the sale or sharing of personal data. We honour these rights regardless of which US state you reside in. Submit a request using the contact details below.

Third-party cookies and affiliate tracking

Some cookies are set by third-party services embedded on our site, including affiliate networks whose links appear in our content. These providers operate under their own privacy policies:

Provider Purpose Their privacy policy
Google Analytics Traffic analytics & measurement policies.google.com
Google Ads Advertising & retargeting policies.google.com
Meta (Facebook) Advertising & retargeting facebook.com/privacy
Amazon Associates Affiliate link tracking amazon.com/privacy

Opt out of interest-based advertising at youronlinechoices.eu (EU) or optout.aboutads.info (US).

How to manage your cookie preferences

  • Cookie Preference Centre — use the “Manage cookies” link in our footer to review and update your choices at any time.
  • Browser settings — most browsers let you block or delete cookies. Note that blocking essential cookies may affect site functionality.
  • Global Privacy Control (GPC) — enable GPC in your browser and we will automatically apply an opt-out for sale/sharing and non-essential cookies.
  • Opt-out link — use the “Do Not Sell or Share My Personal Information” link in our footer (California residents).

Data retention

Analytics cookies typically expire after 13 months. Marketing and affiliate cookies vary by provider, usually between 30 and 90 days. Strictly necessary session cookies expire when you close your browser. You can view the full cookie list and specific expiry dates in our Cookie Preference Centre.

Changes to this policy

We may update this Cookie Policy to reflect changes in law, technology, or our data practices. When we do, we will update the “Last updated” date at the top of this page and, where required by law, notify you via banner or email.

Contact us & exercise your rights

To exercise any of your rights, or if you have questions about this policy, please get in touch:

Email
info@microdermabrasionhome.com
Post
MicrodermabrasionHome, P.O. Box 7008, Epanomi, 57500, Greece
Authority
Hellenic Data Protection Authority — hdpa.gr