This Privacy Policy Last Updated: October 2, 2026
Welcome to Work & Roll! This page explains what personal information we collect, why we collect it, and how we keep it safe.
We respect your privacy. We follow the General Data Protection Regulation (GDPR) — the European law that protects your personal data.
If you have any questions, you can always reach us at **@***********ll.com.
Who We Are
Business Name: Work & Roll
Owner: Faye Kokkinaki
Location: Greece, European Union
Website: work-and-roll.com
Contact Email: **@***********ll.com
Under GDPR, Work & Roll is the data controller. This means we decide what personal data to collect and how to use it.
What Information We Collect
We only collect what we need to provide our services and run our website. Here’s exactly what we collect:
Personal Information You Give Us
When you book a session, buy a product, or contact us, you may share:
First name and last name
Email address
Phone number
Mailing address
VAT number (only if you’re purchasing as a company)
Payment Information
When you make a purchase, our payment system (WooCommerce) collects:
Credit or debit card details
We accept payments through: Revolut, PayPal, Stripe, Google Pay, Apple Pay, and bank transfer.
Important: We do NOT store your full card details on our servers. Our payment processors (Revolut, PayPal, Stripe, Google Pay, Apple Pay) handle your payment securely using their own protected systems.
Technical Information (Collected Automatically)
When you visit our website, some information is collected automatically:
IP address — your computer’s internet address
Cookies — small files stored on your device (more on this below)
Analytics data — information about how you use our website (which pages you visit, how long you stay)
Why We Collect Your Information
We use your data for these reasons — and only these reasons:
| Purpose | What data we use | Why it’s allowed (legal basis) |
|---|---|---|
| To deliver our services (sessions, programs, digital products) | Name, email, phone, address | We need it to fulfil our contract with you |
| To process your payments | Payment details, name, address, VAT number | We need it to fulfil our contract with you |
| To send you booking confirmations and updates | Name, email | We need it to fulfil our contract with you |
| To respond to your questions | Name, email | It’s in our legitimate interest to help you |
| To improve our website | IP address, cookies, analytics data | It’s in our legitimate interest to make our site better |
| To run marketing campaigns (only with your permission) | Email, website activity (via Facebook Pixel) | Your consent — you can withdraw anytime |
| To comply with tax and legal requirements | Name, address, VAT, payment records | We’re required by law |
Who We Share Your Data With
We never sell your personal data. We only share it with trusted services that help us run our business:
| Service | What they do | What data they may access |
|---|---|---|
| Hostinger | Hosts our website | Technical data (IP address, site data) |
| WooCommerce | Runs our online shop | Name, email, address, payment info |
| Revolut, PayPal, Stripe, Google Pay, Apple Pay | Process your payments | Payment details, name, email |
| FluentBooking | Manages appointment bookings | Name, email, phone, booking details |
| Facebook Pixel | Helps us show relevant ads (with your consent) | Website activity, IP address |
| Analytics plugins | Help us understand website traffic | IP address, pages visited, device info |
All these services are required to protect your data under GDPR or equivalent standards.
International transfers: Some of these services may process data outside the European Union (for example, in the United States). When this happens, they use approved safeguards like Standard Contractual Clauses to keep your data protected.
Cookies
What Are Cookies?
Cookies are small text files that websites save on your device (computer, phone, or tablet). They help the website remember things like your preferences or what’s in your shopping cart.
Please read our Cookie-Policy here: work-and-roll.com cookie-policy-eu
What Cookies Do We Use?
| Type | Purpose | Required? |
|---|---|---|
| Necessary cookies | Make the website work properly (login, shopping cart, security) | Yes — the site can’t work without them |
| Analytics cookies | Help us understand how visitors use our site | No — you can say no |
| Marketing cookies (Facebook Pixel) | Help us show you relevant ads on social media | No — you can say no |
How to Control Cookies
When you first visit our website, you’ll see a cookie banner. You can choose which cookies to allow.
You can also change your cookie settings in your browser at any time.
To learn how to manage cookies in your browser, visit www.allaboutcookies.org.
If you turn off cookies, some parts of our website may not work properly.
How Long We Keep Your Data
We don’t keep your data forever. Here’s how long we hold onto it:
| Type of data | How long we keep it |
|---|---|
| Customer records (name, email, purchase history) | Up to 6 years after your last purchase (required by Greek tax law) |
| Booking and session records | Up to 3 years after the service is completed |
| Payment records | Up to 6 years (required by tax and accounting law) |
| Analytics and cookie data | Up to 26 months |
| Marketing consent records | As long as you stay subscribed, plus 3 years after you unsubscribe |
After these periods, we securely delete or anonymise your data.
Your Rights
Under GDPR, you have strong rights over your personal data. Here they are in plain language:
Right to see your data — You can ask us what information we have about you. We’ll send you a copy.
Right to fix your data — If anything is wrong or outdated, tell us and we’ll correct it.
Right to delete your data — You can ask us to erase your personal data. We’ll do it unless we’re legally required to keep it (like tax records).
Right to take your data with you — You can ask for your data in a common, machine-readable format so you can move it to another service.
Right to stop us using your data — You can object to how we use your data, especially for marketing.
Right to limit how we use your data — You can ask us to pause processing your data while we sort out a concern.
Right to withdraw consent — If you gave us permission for something (like marketing emails), you can take it back anytime. Just click “unsubscribe” in any email or contact us.
How to Use Your Rights
Send us an email at **@***********ll.com with your request. Please include your full name and email address so we can find your records.
We will respond within 30 days. If your request is complex, we may need up to 60 days, but we’ll let you know.
There is no fee for exercising your rights in most cases.
Right to Complain
If you feel we haven’t handled your data properly, you have the right to complain to your country’s data protection authority.
For Greece, this is the Hellenic Data Protection Authority (HDPA):
Website: www.dpa.gr
Email: co*****@*pa.gr
How We Protect Your Data
We take the security of your data seriously. Here’s what we do:
Our website uses SSL encryption (the padlock icon in your browser) — this means data sent between you and our site is encrypted
We use secure payment processors that comply with PCI-DSS standards (the industry standard for payment security)
We limit access to personal data — only people who need it to do their job can see it
We regularly update our website and plugins to fix security issues
Our hosting provider (Hostinger) uses firewalls, malware scanning, and regular backups
No system is 100% secure, but we work hard to protect your information.
Children’s Privacy
Our services are designed for adults (women 40+ who run their own businesses). We do not knowingly collect data from anyone under 16 years old. If we discover we have, we will delete it immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do:
We’ll change the “Last Updated” date at the top
If the changes are significant, we’ll notify you by email or by posting a notice on our website
We encourage you to check this page occasionally.
Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Email: **@***********ll.com
Website: work-and-roll.com
Owner: Faye Kokkinaki, Greece
We’re happy to help and will do our best to respond quickly.
This Privacy Policy is compliant with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and applicable Greek data protection law.
