Legal
Privacy Policy
Last updated: 2026
This privacy policy explains how Sillua ("we", "our") collects, uses and protects the personal data of customers who place orders through our website. We comply with the Turkish Personal Data Protection Law (KVKK) and respect the GDPR principles for EU customers.
Data we collect
- Contact details: your name, email address, and phone number. Used for order confirmation, delivery, and customer support.
- Shipping address (for canvas orders only): used solely for delivery.
- Uploaded photos: the photo you submit is used only to create your artwork. We do not publish, share, or use it for any other purpose.
- Order history: we keep your order records to provide customer support and meet legal obligations (Turkish accounting law requires retention for up to 10 years).
How we use your data
We use your personal data only for:
- Processing and fulfilling your order
- Communicating about your order (email, SMS where applicable)
- Sending marketing emails, only if you opt in
- Meeting our legal and tax obligations
Sharing data with third parties
We share minimum necessary data with:
- Shipping carriers (DHL, UPS, FedEx, local couriers) for canvas delivery
- Payment processors (we don't store credit card data ourselves)
- Cloud infrastructure (Cloudflare R2, Supabase, Vercel) for hosting
We do not sell, rent, or trade personal data.
Your rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (subject to legal retention requirements)
- Withdraw marketing consent at any time
- Object to processing in certain circumstances
To exercise any of these rights, contact us at support@sillua.com.
Cookies
We only use technically essential cookies (session, security, theme preference). We do not use tracking or advertising cookies.
Contact
Questions about this policy? Contact us at support@sillua.com.