Privacy policy

EBRU GURLEK operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). EBRU GURLEK is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we refer to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that has been collected anonymously or de-identified.

Depending on how you interact with the Services, where you live, and as permitted or required by law, we may collect or process the following categories of personal information:

  • Contact details such as your name, billing address, shipping address, phone number, and email address.

  • Financial information, including payment method details and transaction information, processed securely through our payment service providers. EBRU GURLEK does not store full payment card numbers.

  • Account information such as username, password, preferences, and settings.

  • Transaction information including products viewed, added to cart or wishlist, purchased, returned, exchanged, or cancelled, as well as past transactions.

  • Communications with us, including information you provide when contacting customer support.

  • Device information, including browser type, IP address, device identifiers, and network information.

  • Usage information, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you, when you create an account, place an order, communicate with us, or otherwise provide information.

  • Automatically, through your use of the Services, including via cookies and similar technologies.

  • From service providers, when they process information on our behalf (e.g., payment processing, shipping, analytics).

  • From partners or third parties, where permitted by law.

We use cookies and similar technologies for essential site functionality, analytics, and marketing purposes. You can manage your cookie preferences through our cookie banner or your browser settings, where applicable.

How We Use Your Personal Information

Depending on how you interact with the Services, we may use your personal information to:

Provide, Tailor, and Improve the Services

To perform our contract with you, process payments, fulfill orders, manage accounts, arrange shipping, facilitate returns or exchanges, send service-related communications, enable reviews, and personalize your shopping experience. This may include processing information related to purchases made under specific conditions, such as final-sale periods, in accordance with our Terms & Conditions and Refund Policy.

Marketing and Advertising

To send marketing communications (where permitted), provide promotional content, and display advertisements based on your interactions with the Services, subject to your consent and preferences.

Security and Fraud Prevention

To authenticate accounts, secure transactions, detect and prevent fraudulent or unlawful activity, and protect the Services and users.

Communicating with You

To respond to inquiries, provide customer support, and maintain our business relationship.

Legal Reasons

To comply with applicable laws, respond to lawful requests, enforce our terms and policies, and protect our legal rights.

Legal Basis for Processing (EEA & UK)

If you are located in the European Economic Area or the United Kingdom, we process your personal information only where we have a lawful basis, including:

  • Performance of a contract, to fulfill orders, process payments, deliver products, and manage returns.

  • Compliance with legal obligations, such as tax, accounting, and consumer protection laws.

  • Legitimate interests, including improving the Services, ensuring security, preventing fraud, and understanding how clients interact with our website, provided these interests do not override your rights.

  • Your consent, where required (for example, marketing communications or certain cookies), which you may withdraw at any time.

How We Disclose Personal Information

We may disclose personal information in the following circumstances:

  • With Shopify, vendors, and service providers that perform services on our behalf (e.g., payment processing, hosting, analytics, shipping, customer support).

  • With marketing and advertising partners, where permitted, to provide personalized advertising. Depending on your location, you may have the right to opt out of targeted advertising.

  • When you direct or consent to such disclosure (e.g., shipping providers or social media integrations).

  • With affiliates or within our corporate group.

  • In connection with legal obligations or business transactions, such as mergers or asset transfers.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information to provide and improve the Services. Information may be transferred to countries outside your place of residence. Shopify may also process data in connection with enhanced features and personalized advertising. Shopify is responsible for processing personal data for those purposes.

You can learn more about Shopify’s privacy practices and exercise your rights through the Shopify Privacy Portal:

https://privacy.shopify.com/en

Third-Party Websites and Links

The Services may include links to third-party websites. We are not responsible for the privacy practices, content, or security of those sites. We encourage you to review their policies before providing any information.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from individuals under the age of majority in their jurisdiction. If you believe a child has provided us with personal information, please contact us to request deletion.

Security and Retention of Your Information

We implement reasonable technical and organizational measures to protect personal information. However, no system is completely secure.

We retain personal information only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

Your Rights and Choices

Depending on your location, you may have the right to:

  • Access your personal information

  • Request correction or deletion

  • Request data portability

  • Object to or restrict processing

  • Withdraw consent

  • Opt out of targeted advertising or data sharing

You may exercise your rights by contacting us using the details below. We may verify your identity before processing requests and will respond within the timeframe required by law.

You may also lodge a complaint with your local data protection authority.

International Transfers

We may transfer, store, and process personal information outside your country of residence. Where transfers occur outside the EEA or UK, we rely on recognized safeguards such as Standard Contractual Clauses, unless an adequacy decision applies.

For questions about this Privacy Policy or to exercise your rights, please contact:

EBRU GURLEK

 Email: hello@ebrugurlek.com
Address: Carrer de la Palma 15, B, 08720, Spain

For the purposes of applicable data protection laws, EBRU GURLEK is the data controller of your personal information.