Privacy
Last updated 3 November 2026
The short version
- We only ask for your email to tell you when Pip’s Museum opens, and to answer you if you write to us.
- We don’t use cookies, advertising trackers or anything that follows you around the web.
- We never sell your data.
- You can unsubscribe or ask us to delete your data at any time.
Who we are
Pip’s Museum is run by Georgios Lagoudakis, a sole proprietor (ατομική επιχείρηση) based in Greece.
- VAT number (ΑΦΜ): 164719531
- Email: hello@pipsmuseum.com
We are the “controller” of your personal data under the EU General Data Protection Regulation (GDPR). For anything about this page or your data, email us at the address above.
What we collect and why
When you join the waitlist
- What: your email address.
- Why: to send you a link to confirm your email, and then one email when Pip’s Museum opens.
- Legal basis: your consent. You give it by confirming your email, and you can withdraw it at any time with the unsubscribe link in our emails or by writing to us.
If you don’t click the confirmation link, you won’t be added to the waitlist.
When you use the contact form
- What: your name, email address, the topic you choose and your message.
- Why: to read and answer your message.
- Legal basis: our legitimate interest in replying to people who contact us.
When you visit the website
- Anonymous statistics: we use Umami Analytics to count visits, see which pages are popular and which pricing plan people click. If you answer the one-question survey after confirming your email, including a wing you type in yourself (up to 40 characters), that answer is counted the same anonymous way. Umami doesn’t use cookies and doesn’t store IP addresses or anything that identifies you. It works out an approximate location (country, region and city) from your IP address and then discards it. Legal basis: our legitimate interest in understanding how the site is used.
- Security: to stop spam and abuse, our server briefly keeps your IP address in memory to limit how many forms can be sent from one address. It is never stored and is forgotten within 10 minutes. Legal basis: our legitimate interest in keeping the site safe.
- Hosting: like any website host, our hosting provider processes your IP address and technical details of your browser to deliver the pages to you.
We don’t use cookies or store anything on your device.
Who else handles your data
We use a few trusted services to run the site. They only process your data on our behalf and under data processing agreements.
| Service | What it does | Where data is processed |
|---|---|---|
| Resend | Stores the waitlist and sends our emails | Emails are sent from Ireland (EU). Account data, including the waitlist and email logs, is stored in the United States. |
| Vercel | Hosts the website and runs the forms | United States and other regions |
| Umami Analytics | Anonymous visit statistics | European Union only |
Resend and Vercel are certified under the EU-US Data Privacy Framework, which the European Commission recognises as giving an adequate level of protection for data transferred to the United States.
How long we keep your data
- Waitlist emails: until you unsubscribe or ask us to delete them. If Pip’s Museum doesn’t launch, we delete the waitlist.
- Unconfirmed sign-ups: confirmation links expire after 7 days, and we don’t add you to the waitlist unless you confirm.
- Contact messages: for as long as we need them to answer you, and no longer than 12 months.
- Security data: IP addresses used for spam protection are forgotten within 10 minutes.
Your rights
Under the GDPR you can ask us to:
- see the personal data we hold about you
- correct it if it’s wrong
- delete it
- restrict or object to how we use it
- send it to you, or to someone else, in a common format
You can also withdraw your consent at any time, without affecting anything we did before.
To use any of these rights, email us at hello@pipsmuseum.com. We’ll reply within one month.
If you’re unhappy with how we handle your data, you can complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the data protection authority in the EU country where you live.
Age
The waitlist is for people aged 16 and over. If you’re younger, please don’t sign up. If we learn that someone under 16 has joined, we’ll delete their email.
Changes to this page
If we change this page, we’ll update the date at the top. If a change is important, we’ll tell people on the waitlist by email.