Privacy Policy

1.1 Information You Provide

We collect information that you voluntarily provide when registering for our services, making a purchase, creating an account, subscribing to our newsletter, sending us an email, or otherwise interacting with us. This information may include:

• Contact and identification information such as your name, surname, email address, phone number, postal address, and billing address
• Account information such as username, password, and account preferences
• Payment information including credit card numbers, bank account details, and other payment information
• Shopping information such as order history, product reviews, and comments
• Demographic information such as age, gender, body measurements, and shopping preferences
• Other information you provide when contacting our customer service team

1.2 Automatically Collected Information

When you use our services, we automatically collect the following information:

• Usage information such as IP address, device ID, browser type and version, operating system, referring URL, pages visited, date and time of visit
• Location information: Precise GPS location (if you permit) or approximate location information based on your IP address
• Information collected through cookies and similar tracking technologies

1.3 Information from Third Parties

We may sometimes receive information about you from third parties, such as:

• Our business partners, suppliers, and subcontractors
• Payment processing service providers, fraud prevention services
• Advertising networks, analytics providers, and search information providers
• Social media platforms (if you have granted permission)

We use the information we collect for the following purposes:

• To provide and maintain our services
• To communicate with you, answer your questions, and provide customer support
• To process your orders, handle payments, and arrange deliveries
• To inform you about relevant products, special offers, and promotions (if you have granted permission)
• To provide you with personalized content, product recommendations, and shopping experiences
• To improve and enhance our services
• To prevent and detect fraud and ensure security
• To fulfill our legal obligations

2.1 Legal Bases

The legal bases we rely on for processing your personal data are:

• Performance of a contract: When necessary for the performance of our contract with you (for example, when you purchase a product)
• Legal obligations: When necessary to comply with our legal obligations
• Legitimate interests: When necessary for our legitimate interests, such as improving our services, ensuring security, and preventing fraud
• Consent: When you have given your consent, particularly for marketing communications

We may share your information with third parties in the following circumstances:

• Service Providers: With third-party service providers who provide services to us such as payment processing, order delivery, email delivery, customer service, data analysis, and marketing
• Business Partners: With business partners with whom we collaborate to provide you with products or services
• Legal Requirements: When required to comply with a legal obligation, fulfill a legal process, protect public safety, or investigate illegal activities
• Corporate Transactions: In the event of a merger, acquisition, asset sale, or bankruptcy, your information may be transferred

We do not sell, rent, or otherwise share your information with third parties without your explicit consent.

We implement various technical and organizational measures to ensure the security of your information, including:

• Protecting data transmission using SSL/TLS encryption
• Limiting access to sensitive data and storing it securely
• Conducting regular security assessments and tests
• Employing alert systems against security breaches and incidents
• Training our employees on data security

While we take measures to ensure the security of your information, please note that no electronic transmission or data storage method is 100% secure. Please contact us immediately if you suspect any data breach.

We use cookies, web beacons, pixel tags, and similar tracking technologies in our services. These technologies collect information about your use of our services and are used for the following purposes:

• To provide website functionality (e.g., remembering your shopping cart)
• To analyze site usage and improve performance
• To personalize user experience
• To deliver targeted advertisements (if you permit)
• To prevent fraud and enhance security

For more information about the use of cookies and how you can manage your cookie preferences, please refer to our Cookie Policy.

You can reject cookies or manage cookie settings by changing your browser settings; however, this may cause certain parts of our website or services to not function properly.

Under the Personal Data Protection Law No. 6698 and other relevant data protection laws, you have the following rights:

• Right of access: The right to request a copy of your personal data that we hold
• Right to rectification: The right to request correction of incorrect or incomplete information
• Right to erasure: The right to request deletion of your personal data under certain conditions
• Right to restrict processing: The right to restrict the processing of your data under certain conditions
• Right to data portability: The right to receive your data in a structured, commonly used, and machine-readable format
• Right to object: The right to object to the processing of your data based on our legitimate interests
• Right not to be subject to automated decision-making: The right not to be subject to decisions based solely on automated processing

To exercise these rights, you can contact us through our Contact page or at privacy@irematelier.com. We will respond to your request within 30 days.

You also have the right to file a complaint with the Personal Data Protection Authority regarding the processing of your personal data.

Our services are intended for individuals 18 years of age and older. We do not knowingly collect personal data from individuals under 18 years of age. If you are under 18, please do not send us your personal information.

If we learn that a child under 18 has provided us with personal data, we will take reasonable steps to delete this information from our records. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at privacy@irematelier.com to have this information deleted from our records.

To provide our services, we may transfer your personal data to countries outside of Turkey. These countries may have data protection laws different from those in Turkey. When we transfer your data internationally, we take the following measures to protect your data:

• Transfers to countries recognized by the European Commission as providing adequate protection
• Use of EU Standard Contractual Clauses (SCCs) or other approved data transfer mechanisms
• Signing data protection agreements with data recipients
• Encryption and protection of transferred data

For more information about international data transfers, please contact us at privacy@irematelier.com.

We may update this Privacy Policy from time to time. When any changes are made, we will publish the updated policy on our website and change the "Last Updated" date at the top of the policy.

In case of significant changes, we will inform you via email or by posting a prominent notice on our services. We recommend that you regularly review the changes made to this policy.

Your continued use of our services after the changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us through the following channels:

If you have any questions or complaints about your data privacy rights, the use of your personal data, or this policy, please contact us first. If we cannot resolve your issue, you have the right to file a complaint with your local data protection authority (in Turkey, the Personal Data Protection Authority).