How we protect your payment and your details — and what you can do to stay safe.
Contents
1. Encrypted connection
All communication with our websites takes place over an encrypted TLS (HTTPS) connection. Every piece of information you send — account details, address, form contents — is encrypted before it leaves your device and is decrypted only on the destination server.
The protocol also includes an integrity mechanism, which detects whether the data was altered in transit.
🔒 How to check it yourself
Look at your browser’s address bar: it must start with https:// and show the padlock icon. Click the padlock and you will see which domain the certificate was issued for — it must read shop.zeolife.gr.
2. Your card details
✅ We never see them — and we do not store them
When you pay by card, the details are entered inside the payment provider’s secure environment. The card number, the expiry date and the CVV code never pass through our own servers and are not stored anywhere on our side.
We receive only the outcome of the transaction (successful or not) and a reference code.
The payment providers we work with are licensed payment institutions supervised in the European Union and comply with the PCI DSS card data security standard.
3. Strong authentication (3-D Secure)
Card payments are protected by strong customer authentication, as required by the European PSD2 directive. In practice, your bank will ask you for a second confirmation step — approval in your e-banking app, a one-time SMS code or biometric authentication.
This step takes place directly between you and your bank. Neither we nor the payment provider see your codes.
4. Our payment methods
At checkout you see only the methods that are available for your own country and your own shipping method.
| Payment method | How you are protected | Availability |
|---|---|---|
| Debit or credit card via Revolut |
Secure environment of a licensed provider, PCI DSS, 3-D Secure. We never see the card details. | Greece & EU |
| Digital Wallet Apple Pay · Google Pay |
Your card is replaced by an encrypted digital token. Neither we nor the provider receive its real number. | Greece & EU |
| Revolut Pay | You approve the payment inside the Revolut app, with its own authentication. | Greece & EU |
| PayPal | We do not share your payment details at all; PayPal’s purchase protection applies. | Greece & EU |
| IRIS with QR code or banking app | Instant transfer from inside your bank’s app. You approve the amount yourself, without giving any card details. | Greek bank accounts only |
| IRIS with VAT number | Same principle, with the payee identified through their VAT number — at no cost to you. | Greek bank accounts only |
| Direct bank transfer | Our IBAN is sent only inside the official order confirmation email. See the warning in section 6. | Greece & EU |
| Cash on delivery | You pay the delivery driver on delivery, at no extra cost. | Greece only, courier only |
💡 Why you do not always see all the options
Cash on delivery is not offered for BOX NOW deliveries, nor outside Greece. IRIS works only between Greek bank accounts. If a method does not appear at your checkout, it is not an error — it simply is not supported for that particular combination of country and shipment.
5. Your account & password
Your password is stored encrypted with an irreversible method. Not even we can see it — which is why, if you forget it, we send you a reset link instead of reminding you of it.
Three practices that make the difference:
- Use a unique password for our shop — not the same one you use elsewhere.
- Prefer a long password or passphrase (e.g. four unrelated words) rather than a short complicated one.
- Log out when you are using a shared computer.
If you suspect that someone has gained access to your account, change your password immediately and let us know at [email protected].
6. What we never ask you for
🚫 We never ask you, by any means, for:
- Your card number, its expiry date or the CVV — not by email, not by SMS, not by phone.
- The password of your account or of your e-banking.
- The one-time codes (OTP) that your bank sends you.
- To install a remote access application so that we can “fix” a payment.
- To make a deposit to an IBAN different from the one in the official confirmation email.
⚠️ The most common scam: a changed IBAN
Emails are circulating that look like an order confirmation but contain a different bank account, often in an “urgent” tone. Our own account is held with Eurobank — an IBAN at any other bank is in itself a sign of fraud.
Before every deposit, call us on 2311 29 55 20 and confirm the IBAN. A 30-second phone call.
7. How to recognise genuine communication from us
| What you check | Genuine | Suspicious |
|---|---|---|
| Website address | Ends in zeolife.gr, with a padlock | Variants such as zeolife-gr.com or zeoIife.gr (capital i instead of L) |
| Email sender | An @zeolife.gr address | Free email addresses, or names with spelling variations |
| Tone of the message | Calm, with an order number | Time pressure, threat of cancellation, “last chance” |
| Links | Lead to shop.zeolife.gr | Shortened or unknown domains |
| Attachments | We do not send executable files | .zip, .exe, .html “invoice” files |
| IBAN | Always the same one, with Eurobank | Any other bank, or a “new account” |
Whenever in doubt, do not click the links in the message. Open shop.zeolife.gr yourself and check the order from your account.
8. If you suspect fraud
Stop. Do not proceed with the payment and do not give out any details.
Contact us: 2311 29 55 20 or [email protected]. We confirm immediately whether the message comes from us.
If you have already given card details, call your bank immediately to block the card and dispute the transaction.
If you have already made a deposit, ask your bank to recall the transfer — the sooner you do it, the greater the chances.
👮 Where to report it
In Greece: the Cyber Crime Division of the Hellenic Police — astynomia.gr, tel. 11188.
In another Member State: to the corresponding cybercrime police authority of your country. Let us know as well, so that we can block the fake message and warn other customers.
9. Reporting a vulnerability
If you find a security hole in our websites, we would greatly appreciate it if you disclosed it to us privately at [email protected], before making it public.
We reply to every such report and we undertake not to take legal action against anyone who researches in good faith, without gaining access to third-party data and without disrupting the operation of the service.
Questions about transaction security?
[email protected] · 2311 29 55 20, Monday – Friday 09:00 – 17:00