Privacy Policy

1. Introduction

Welcome to Derlara Store, operated by Dilara Koç. This Privacy Policy explains how we collect, use, disclose, and protect your personal information as a visitor or customer of our personal store website. We are committed to respecting your privacy and protecting your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Personal Data We Collect

As a personal store operated solely by Dilara Koç, we collect and process limited personal data to fulfill orders and provide a personalized shopping experience. The types of personal data we may collect include:

– Contact Information: We collect your name and contact email when you place an order or contact us regarding your purchases.
– Order Information: We collect information necessary to process and fulfill your orders, including shipping addresses and order details.
– Communication History: We retain email correspondence and customer support inquiries to ensure effective communication with our customers.
– Payment Information: We do not collect or store your payment information directly. All payments are securely processed through reputable third-party payment gateways.

3. Use of Personal Data

We use your personal data for the following purposes:

– Order Fulfillment: To process and deliver your orders, including shipping and providing order status information.
– Communication: To communicate with you regarding your purchases and provide customer support.
– Personalization: To personalize your shopping experience, recommend products, and send promotional offers or newsletters if you have opted to receive them.
– Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds as defined in the GDPR:

– Contractual Necessity: Processing necessary for the performance of a contract between you and us, such as processing and fulfilling your orders.
– Legitimate Interests: Processing necessary for our legitimate business interests, such as providing a personalized shopping experience and communicating with our customers effectively.

5. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by law. Personal data that is no longer needed will be securely deleted or anonymized.

6. Data Security

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

7. Your Rights

As an individual within the European Economic Area (EEA), you have certain rights regarding your personal data, including the right to access, rectify, erase, restrict processing, object, and portability. You also have the right to withdraw consent for processing where applicable. To exercise your rights or request further information, please contact us using the contact details provided below.

8. Third-Party Services

We may engage trusted third-party service providers to assist with certain aspects of our operations, such as shipping carriers and payment processors. These service providers have access to personal data only as necessary to perform their functions and are obligated to maintain its confidentiality.

9. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this Privacy Policy periodically for any updates. The updated Privacy Policy will be effective upon posting on our website.