Last updated: 4 August 2026
1. Who we are
K is a Mediterranean lifestyle house rooted in Greek land, family and the table. Its first expression is K — Greek Extra Virgin Olive Oil.
The organisation responsible for deciding how and why personal information is used is:
GREEK+VENTURES LIMITED, trading as K4EVOO and K
13 Lovell Close, Henley-on-Thames, England, RG9 1PX
Company number: 17296818
For privacy-related enquiries, please contact:
k4evoo@gmail.com
2. Information we collect
When you contact K through WhatsApp, we will normally receive your name or WhatsApp profile name, telephone number and the content of your messages.
Depending on your enquiry or reservation, we may also collect:
• your email address, where provided;
• your delivery or collection address;
• information relating to your reservation, order, payment or delivery;
• correspondence and customer-service records;
• technical information about how you use the website, where analytics cookies have been accepted; and
• your cookie and consent preferences.
We do not intentionally collect special category data through the website. Please do not send sensitive personal information unless it is genuinely necessary for your enquiry.
3. How we collect information
We collect personal information:
• directly from you when you contact K through WhatsApp, email or another communication channel;
• when you make a reservation or purchase;
• when delivery or collection arrangements are made;
• automatically through cookies and similar technologies, where you have given the required consent; and
• from service providers involved in payments, delivery, hosting, analytics or consent management, where applicable.
4. Why we use your information
We use personal information to:
• respond to enquiries;
• manage bottle reservations;
• process or arrange payments;
• organise delivery or collection;
• provide customer service;
• keep appropriate business, accounting and transaction records;
• protect the website, business and customers from misuse or fraud;
• understand website use and improve the experience, where analytics consent has been given;
• comply with legal and regulatory obligations; and
• send marketing communications only where we have a lawful basis and any consent required by law.
5. Lawful bases
Depending on the activity, we may rely on:
Contract — where processing is necessary to take steps at your request before entering into a contract, or to fulfil a reservation or purchase.
Legal obligation — where we need to keep or use information to comply with tax, accounting, consumer or other legal requirements.
Legitimate interests — where necessary for reasonable business purposes, such as responding to enquiries, maintaining records, protecting the business and improving customer service, provided those interests are not overridden by your rights.
Consent — where required, including for non-essential cookies, analytics, certain marketing communications, or the public use of identifiable testimonials, photographs or customer feedback. You may withdraw consent at any time.
These lawful bases reflect K’s confirmed Phase One operating model and should be reviewed if the customer journey or technology stack changes.
6. WhatsApp enquiries and reservations
The website may direct you to WhatsApp to enquire about or reserve a bottle. When you use WhatsApp, your information is also processed by WhatsApp under its own terms and privacy practices.
K will use the information you provide through WhatsApp to respond to your enquiry, manage your reservation, arrange payment and delivery or collection, and provide related customer service.
Messages may remain stored within the WhatsApp Business account, connected devices or backups used by K, subject to K’s retention and security practices and WhatsApp’s own service arrangements.
Contacting K through WhatsApp does not automatically mean that you have agreed to receive future marketing messages.
7. Payments
During the initial launch phase, customers reserve bottles through the website and complete the enquiry through WhatsApp. Payment is then arranged directly with K by bank transfer or upon collection or delivery, depending on the agreed arrangement. No online payment gateway is used at this stage.
Where a third-party payment provider is used, payment information may be processed directly by that provider. K should not receive or store full payment-card details unless this is expressly required and appropriately secured.
K does not request or store payment-card details through the website.
8. Delivery and service providers
We may share the minimum necessary personal information with service providers that support the business, such as:
• payment providers;
• delivery or courier providers;
• website hosting and technology providers;
• consent-management providers;
• analytics providers, where consent has been given;
• professional advisers, accountants or legal advisers; and
• public authorities where required by law.
Customer details will be shared with a delivery or courier provider only where strictly necessary to fulfil an agreed delivery. Otherwise, personal information will not be shared with third parties except as described in this policy or where required by law.
We do not sell personal information.
9. Cookies and analytics
The website may use strictly necessary technologies to operate correctly. Non-essential cookies, including analytics cookies, must not be placed before the required consent has been given.
Cookiebot is used to manage consent preferences, Google Tag Manager acts as the technical container, and Google Analytics 4 operates only after the appropriate analytics consent.
No non-essential analytics tag should fire before consent.
More information is provided in the Cookie Policy.
10. International processing and transfers
Some technology and service providers used by K may process personal information outside the United Kingdom or make it accessible from another country.
Where this amounts to a restricted transfer under UK data protection law, K will rely on an applicable UK adequacy regulation, appropriate safeguards, or another lawful transfer mechanism, and will provide further information about those safeguards where required.
As K operates between the United Kingdom and Greece, limited customer information may be securely accessed from Greece for order administration and customer support. K will apply appropriate access controls and safeguards and will review the relevant transfer mechanism where required.
11. How long we keep information
K will keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including customer service, accounting, tax, legal and dispute-resolution requirements.
The expected approach is:
• Enquiries that do not result in a reservation or purchase: retained for a limited period that is proportionate to follow-up and customer-service needs.
• Reservation, sales, payment, delivery and accounting records: retained for the period required by applicable tax, accounting and legal obligations. Where the relevant UK company-record rules apply, this will normally be six years from the end of the financial year to which the records relate, or longer where legally required.
• WhatsApp conversations connected to a completed purchase, complaint or dispute: retained only while reasonably needed for customer service, legal compliance or the establishment, exercise or defence of legal claims.
• Marketing consent and opt-out records: retained while consent remains valid and, where necessary, as a minimal suppression record to respect an opt-out.
• Cookie-consent records: retained for the period necessary to manage and demonstrate consent.
• Analytics data: retained according to the Google Analytics 4 retention settings and only where the required consent has been given.
Reservation, order and customer records will normally be retained for approximately six years to support UK accounting, tax and food traceability obligations. Short-lived enquiries that do not result in a reservation or purchase may be deleted sooner when no longer reasonably required.
12. Security
K will take reasonable organisational and technical measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.
No method of transmission or storage is completely secure, but access should be limited to people and providers who genuinely need the information.
13. Automated decision-making
K does not currently use personal information for solely automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
This statement will be reviewed if K later introduces automated customer scoring, personalised pricing, automated eligibility decisions or similar technologies.
14. Your rights
Depending on the circumstances, you may have the right to:
• request access to your personal information;
• ask for inaccurate information to be corrected;
• request deletion of your information;
• request restriction of processing;
• object to certain processing;
• request transfer of information in a portable format;
• withdraw consent where processing is based on consent; and
• complain to the Information Commissioner’s Office.
Your right to object to the use of your personal information for direct marketing is absolute. If you object, K must stop using your information for that purpose.
Some other rights are subject to legal conditions and exceptions.
15. Marketing
K will not automatically add people who make WhatsApp enquiries or reservations to a marketing list.
Where K sends promotional messages by email, SMS or WhatsApp, it will do so only where there is an appropriate lawful basis and any consent required by law. Consent for marketing must be separate, specific and freely given. You may opt out at any time.
K may send product updates, future-launch information or other marketing communications only where the recipient has expressly opted in. Enquiries and reservations do not by themselves constitute marketing consent.
16. Testimonials, photographs and customer feedback
K may wish to use customer feedback, testimonials, names, photographs or videos in its website, social media or marketing materials.
Where the material identifies an individual, K will obtain an appropriate lawful basis and will normally seek clear, specific permission describing the intended use. Separate approval should be considered for materially different uses, such as organic social media, the website and paid advertising.
Anonymous or de-identified feedback may be used where an individual cannot reasonably be identified.
17. Complaints
Please contact K first so that we have an opportunity to address your concern.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.
18. Third-party links
The website may contain links to third-party services, including WhatsApp. K is not responsible for the privacy practices of third-party websites or platforms.
19. Changes to this policy
This Privacy Policy may be updated from time to time to reflect changes in the website, business, technology or legal requirements. The latest version and effective date will be shown on this page.
20. Contact
GREEK+VENTURES LIMITED, trading as K4EVOO and K
13 Lovell Close, Henley-on-Thames, England, RG9 1PX
k4evoo@gmail.com