lef.recoveryMassage at your place

Privacy policy

What I collect, why, where it ends up and how you get it deleted. No legal fog.

Last updated: 29 July 2026

Who I am

The person responsible for your data is Eleftherios Legakis, trading as lef.recovery, based in Alimos, Attica, Greece.

There is no data protection officer — this is a one-person business.

What I collect

Only what you give me. Nothing is collected automatically.

From the contact form

Name
so I know who I'm talking to
Phone
to arrange a time
Area
to work out the distance
Service you're after
so I know what to bring
Your message
whatever you choose to write

A word about the message. The field asks where it hurts and since when. Anything you write there about your health counts as a special category of personal data. I only process it because you give explicit consent by ticking the box. Write what's needed and no more — I don't need your medical history to book an appointment.

If you call or write

I keep your number and what you tell me, for as long as it takes to help you.

On what basis

Contact details
to answer your request
Health details in your message
your explicit consent
Appointments and session history
delivering the service

Consent is given by the checkbox on the form and can be withdrawn whenever you like, with one message.

Where it actually goes

This is the part most websites don't spell out.

Netlify

The form is stored with Netlify

The site is hosted on Netlify. When you hit send, what you wrote is stored in Netlify's dashboard and I get a notification.

The company is based in the US and data may be stored there, under standard contractual clauses.

If you'd rather not, don't use the form: call me and nothing is recorded anywhere.

WhatsApp

Only if you choose it

WhatsApp is now a separate link, not how the form is sent. If you tap it, the details pass through Meta under Meta's own terms. If you don't, Meta isn't involved at all.

Gmail

Email lands with Google

My address is a Gmail one. Anything you write to me is stored on Google's servers.

Nobody else. I don't sell, rent or share your details. There is no mailing list and you will not get marketing from me.

Cookies and tracking

No cookies. That's why there's no consent banner.

  • — No cookies. The site sets none at all.
  • — No pixels from Facebook or anyone else.
  • — No advertising and no selling of data to anyone.
  • — Fonts are self-hosted. Not loaded from Google, so your IP address never leaves.

I only count how many people visit

I use Cloudflare Web Analytics to know how many people visit the site and which pages get read. Nothing beyond that.

  • — It sets no cookie and stores nothing on your device.
  • — It doesn't identify you and doesn't follow you across sites.
  • — Your IP is used momentarily to separate one visit from another and is not stored.
  • — No profile is built and nothing is used for advertising.

That is precisely why no consent is required and there is no banner. If you'd still rather not, any ad blocker stops it and the site works exactly the same.

The hosting provider keeps technical logs (IP, time, page) for security, as every web server does. I have no commercial access to those.

How long I keep it

Message with no booking
up to 12 months
Client details with bookings
while we're working together
After the last session
up to 5 years

Ask for deletion earlier and it's deleted — unless a tax rule requires a receipt to be kept.

Your rights

One message to lefrecovery2@gmail.com and you can ask me to:

I reply within 30 days. You don't have to explain why.

If you think I've mishandled your data, you can complain to the Greek Data Protection Authority — dpa.gr, 1-3 Kifissias Ave, 115 23 Athens.

Something not sitting right?

Ask me. You don't need a lawyer to get an answer.

+30 697 051 0280 lefrecovery2@gmail.com