Legal
Privacy Policy
Last updated: 30 July 2026
This Privacy Policy explains how Latitude 37 Greece ("we", "us") handles personal data when you use our website and related services, including our launch waitlist, contact forms, and user accounts.
Controller details (placeholder): Replace with your legal entity name, registered address in Greece, VAT number (if any), and a privacy contact email (e.g. privacy@yourdomain.com).
What we collect
- Waitlist: email address, and the date you joined.
- Inquiries / contact: name, email, optional phone, and your message.
- Accounts: email, name (if provided), role, and authentication data managed by our auth provider.
- Technical: necessary cookies and similar data required to run the site securely (see our Cookie Policy).
Why we process data (legal bases)
- Waitlist emails: your consent to receive launch updates (GDPR Art. 6(1)(a)). You can withdraw anytime by contacting us.
- Inquiries: legitimate interests / steps prior to a contract, to respond to your request (Art. 6(1)(b) or (f)).
- Accounts: performance of a contract / providing the service you signed up for (Art. 6(1)(b)).
- Security & operations: legitimate interests in running a secure website (Art. 6(1)(f)).
Where data is stored
We use infrastructure providers to host the site and database, including Vercel (application hosting) and Supabase (database and authentication). Our Supabase project is configured in the EU. Our providers act as processors under appropriate agreements.
How long we keep data
- Waitlist: until we complete launch communications or you ask us to delete your email, then we remove it within a reasonable period.
- Inquiries: as long as needed to handle your request and for ordinary business records, then delete or anonymise.
- Accounts: while your account remains active, and thereafter as required by law.
Your rights (EEA / UK)
You may have the right to:
- access your personal data;
- rectify inaccurate data;
- erase data in certain cases;
- restrict or object to processing;
- data portability where applicable;
- withdraw consent where processing is based on consent;
- lodge a complaint with your supervisory authority (in Greece: the Hellenic Data Protection Authority).
To exercise these rights, contact us using the details in the controller placeholder above.
Children
Our services are not directed at children under 16. We do not knowingly collect their data.
Changes
We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the site after updates means you acknowledge the revised policy.