Privacy Policy

Last updated: 2026

This privacy policy explains how Sillua ("we", "our") collects, uses and protects the personal data of customers who place orders through our website. Sillua is operated from Türkiye and complies with the Turkish Personal Data Protection Law (KVKK). If you are in the EU/EEA or the UK, you additionally have the rights provided by the GDPR / UK GDPR: access, rectification, erasure, restriction, data portability, objection, and the right to lodge a complaint with your local supervisory authority. Your data is processed in Türkiye and stored on cloud infrastructure (Cloudflare) that may be located outside your country; we apply appropriate safeguards for such transfers. To exercise any right, use our privacy request page or email us.

Data we collect

• Contact details: your name, email address, and phone number. Used for order confirmation, delivery, and customer support.
• Shipping address (for canvas orders only): used solely for delivery.
• Uploaded photos: the photo you submit is used only to create your artwork. We do not publish, share, or use it for any other purpose.
• Order history: we keep your order records to provide customer support and meet legal obligations (Turkish accounting law requires retention for up to 10 years).

How we use your data

We use your personal data only for:

• Processing and fulfilling your order
• Communicating about your order (email, SMS where applicable)
• Sending marketing emails, only if you opt in
• Meeting our legal and tax obligations

Sharing data with third parties

We share minimum necessary data with:

• Shipping carriers (DHL, UPS, FedEx, local couriers) for canvas delivery
• Payment processors (we don't store credit card data ourselves)
• Cloud infrastructure (Cloudflare R2, Supabase, Vercel) for hosting

We do not sell, rent, or trade personal data.

Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (subject to legal retention requirements)
• Withdraw marketing consent at any time
• Object to processing in certain circumstances

To exercise any of these rights, contact us at destek@sillua.com.

Cookies

We use only technically essential (strictly necessary) cookies — for session/login, security, your theme preference, and to remember this notice (stored about 1 year). Under applicable data-protection rules, such cookies do not require opt-in consent. We do not use any analytics, advertising, profiling, or third-party tracking cookies, so we show a short notice instead of an accept/reject prompt. You can delete or block cookies in your browser settings, but essential cookies are needed for parts of the site to work.

Contact

Questions about this policy? Contact us at destek@sillua.com.