Privacy Policy
This Privacy Policy explains how Iakovos Vais Digital Business Solutions (“we”, “us”, “our”) collects, uses, and protects personal data when you visit sovokai.com (the “Site”) or contact us about our services.
We operate as a sole proprietorship registered in New Jersey, USA, run by Iakovos Vais from Athens, Greece. Because we are established in the EU, we handle personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Greek law, as well as relevant US requirements.
For the purposes of the GDPR, the data controller is:
Iakovos Vais Digital Business Solutions
Registered in New Jersey, USA
Email: hello@sovokai.com
1. What data we collect
We only collect data we actually need. Depending on how you use the Site, this may include:
- Contact details you give us — your name, email address, phone number, company, and the contents of any message you send through a contact form or by email.
- Project information — details you share when discussing a web, advertising, or design project (for example, your website, business goals, and existing accounts).
- Usage and analytics data — pages visited, time on page, referring site, approximate location (city/country), device and browser type. This is collected via cookies and similar technologies (see our Cookie Policy).
- Advertising data — if you arrive via one of our ads, limited data may be collected to measure ad performance.
- Technical/server logs — IP address and request data automatically logged by our hosting provider for security and reliability.
We do not intentionally collect special-category (sensitive) data, and we ask that you do not send it to us through the Site.
2. Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your enquiry and providing a quote | Steps prior to entering a contract / legitimate interest |
| Delivering services you’ve engaged us for | Performance of a contract |
| Measuring and improving Site performance (analytics) | Consent |
| Showing and measuring advertising | Consent |
| Keeping the Site secure and operational (server logs) | Legitimate interest |
| Sending you updates or marketing (only if you opt in) | Consent |
| Meeting legal, tax, and accounting obligations | Legal obligation |
Where we rely on consent, you can withdraw it at any time (see Section 7).
3. Cookies and tracking
The Site uses cookies and similar technologies for essential functionality, analytics, and advertising. Non-essential cookies are only set after you consent through our cookie banner. Full details — including the specific cookies used — are in our separate Cookie Policy.
4. Who we share data with
We don’t sell your personal data. We share it only with trusted service providers (“processors”) who help us run the business, including:
- Hosting provider — to host the Site and store data securely.
- Google (Analytics & Ads) — to measure traffic and ad performance.
- PayPal & Stripe — to process invoices and payments.
- Email/communication tools — to correspond with you and, if you opt in, send updates.
Each provider only processes data on our instructions and under its own data protection terms. We may also disclose data where required by law.
5. International data transfers
We operate between Greece (EU) and the United States, and some of our providers (e.g. Google, PayPal) are based in or transfer data to the US. Where personal data leaves the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an equivalent approved transfer mechanism.
6. How long we keep your data
- Enquiries that don’t become projects: up to 18 months, then deleted.
- Client records: for the duration of our engagement and afterwards as required for tax, accounting, and legal purposes (typically up to 7 years).
- Analytics data: in line with the retention period set in our analytics tool (Google Analytics 4 default 14 months).
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Restrict or object to certain processing.
- Data portability — receive your data in a portable format.
- Withdraw consent at any time, without affecting prior processing.
To exercise any of these, email hello@sovokai.com. We’ll respond within one month.
If you believe we’ve mishandled your data, you can lodge a complaint with the Greek supervisory authority, the Hellenic Data Protection Authority (HDPA) — www.dpa.gr — or your local EU authority.
8. Children
The Site is intended for business clients and is not directed at children. We do not knowingly collect data from anyone under 16.
9. Security
We use reasonable technical and organisational measures — including HTTPS, access controls, and reputable hosting — to protect your data. No method of transmission over the internet is completely secure, but we work to keep your data safe.
10. Changes to this policy
We may update this policy from time to time. The “Last updated” date above reflects the latest version. Material changes will be highlighted on this page.
11. Contact
Questions about this policy or your data? Contact:
Iakovos Vais Digital Business Solutions
Email: hello@sovokai.com
This document is for transparency about how we handle your data, and is not a substitute for legal advice. It will be reviewed periodically.