Headline that lands the value in one breath

Last updated: [PLACEHOLDER: YYYY-MM-DD]. This Privacy Policy explains how [PLACEHOLDER: Company legal name] ("we", "us", or "our") collects, uses, and protects information about visitors and customers of this website. Please read it together with our Terms & Conditions. By using this site you agree to the practices described below.

1. Who we are

[PLACEHOLDER: Company legal name] is the data controller for personal data processed through this site. Our registered address is [PLACEHOLDER: full registered address, country]. You can reach us with privacy-related questions at [PLACEHOLDER: [email protected]]. If we are required to appoint a Data Protection Officer, their contact details will be published here.

2. What data we collect

We collect personal data in three ways. First, data you give us directly when you create an account, place an order, sign up for our newsletter, or contact support — typically name, email address, shipping and billing addresses, phone number, and the contents of messages you send us. Second, data we collect automatically when you visit the site, including IP address, device and browser identifiers, language and country, pages visited, and referrer URL. Third, data we receive from third parties — for example, payment processors confirming that a charge succeeded, or shipping carriers confirming that a package was delivered.

We do not knowingly collect data from children under the age of 16. If you believe a child has provided us with personal data, contact us and we will delete it.

3. Why we use your data and our legal basis

Under the EU General Data Protection Regulation (GDPR), we may only process your personal data when one of six legal bases applies. The bases we rely on are: performance of a contract (to process and ship your order, manage your account, and handle returns); compliance with a legal obligation (accounting, tax, consumer-protection record-keeping); your consent (for marketing emails and optional analytics cookies, which you can withdraw at any time); and our legitimate interests (to operate and secure the site, detect fraud, and improve the products we offer — balanced against your rights and freedoms).

4. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember the contents of your cart, measure how the site is used, and (where you have consented) to personalise content and advertising. Strictly necessary cookies do not require consent and cannot be switched off. Analytics and marketing cookies are only set after you opt in via the cookie banner. You can change your preferences at any time by clearing your browser cookies and re-loading the site.

5. Who we share your data with

We share personal data only with service providers that help us run the shop, and only to the extent necessary for that purpose. These typically include: payment processors (Stripe, and depending on your region, iyzico), shipping carriers and fulfilment partners, transactional email and notification providers, hosting and cloud-storage providers, search and product-recommendation services, customer-support tooling, and analytics providers. A current list of processors is available on request from [PLACEHOLDER: [email protected]]. We do not sell your personal data to anyone.

6. International data transfers

Some of the service providers listed above may process data outside the European Economic Area. Where that happens, we rely on the European Commission's Standard Contractual Clauses or an applicable adequacy decision to ensure your data continues to be protected at the level required by EU law.

7. How long we keep your data

We keep personal data only for as long as we need it. Order records are retained for [PLACEHOLDER: 7] years to meet tax and accounting requirements. Account data is retained for as long as your account is active and for a reasonable period afterwards to handle returns and disputes. Marketing-consent records are kept until you withdraw consent. Anonymised analytics data may be kept longer.

8. Your rights

Under the GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; have data erased ("right to be forgotten") where there is no overriding legal reason to keep it; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time without affecting the lawfulness of earlier processing. To exercise any of these rights, email [PLACEHOLDER: [email protected]]. We respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority in your country of residence.

9. How we protect your data

We use industry-standard technical and organisational measures to protect personal data — including TLS encryption in transit, access controls on production systems, and least-privilege defaults for staff and contractors. No system is perfectly secure: if a personal-data breach occurs and is likely to result in a risk to your rights, we will notify the supervisory authority and (where required) affected users without undue delay.

10. Changes to this policy

We may update this Privacy Policy from time to time — for example, when we add new features, change processors, or update legal references. The "Last updated" date at the top of the page reflects the most recent change. For substantive changes that affect how we use your personal data, we will notify you in advance by email or via a banner on the site.

11. Contact

For any privacy-related question, email [PLACEHOLDER: [email protected]] or write to us at [PLACEHOLDER: full registered address]. For general support, use the contact form on the contact page.