Privacy Policy

Last updated: September 2026

This privacy policy explains how Sillua ("we", "our") collects, uses and protects the personal data of customers who place orders through our website. Sillua is operated from Türkiye and complies with the Turkish Personal Data Protection Law (KVKK). If you are in the EU/EEA or the UK, you additionally have the rights provided by the GDPR / UK GDPR: access, rectification, erasure, restriction, data portability, objection, and the right to lodge a complaint with your local supervisory authority. Your data is processed in Türkiye and may be handled by service providers located in other countries. We use the safeguards required by applicable data-protection law for these transfers. To exercise any right, use our privacy request page or email us.

Data we collect

• Contact details: your name, email address, and phone number. Used for order confirmation, delivery, and customer support.
• Address details: billing address is used for secure payment processing and invoicing; shipping address is collected for canvas delivery. We do not receive or store your full card number or security code.
• Uploaded photos: the photo you submit is used only to create your artwork. We do not publish, share, or use it for any other purpose.
• Order history: we keep your order records to provide customer support and meet legal obligations (Turkish accounting law requires retention for up to 10 years).

How we use your data

We use your personal data only for:

• Processing and fulfilling your order
• Communicating about your order (email, SMS where applicable)
• Sending marketing emails, only if you opt in
• Meeting our legal and tax obligations

When the uploaded photo depicts you, the processing necessary to create your artwork is based on taking steps at your request and performing our contract with you. Images of other people are handled only for the requested artwork, based on our legitimate interest in fulfilling that request and your confirmation that you have the necessary rights and permissions. If we need consent for a separate optional use, we request it separately before that use begins. Ordering never gives us permission to use your photo or artwork for advertising or public promotion.

How we collect data

We collect data electronically through the order, photo-upload, payment, contact and support areas of our website. We may also receive order, payment and delivery status records from the service providers involved in fulfilling your order.

Sharing data with third parties

We share minimum necessary data with:

• Shipping carriers (DHL, UPS, FedEx, local couriers) for canvas delivery
• Payment processors (we don't store credit card data ourselves)
• Hosting and cloud storage services for securely operating the website and storing order files
• Image-processing services solely to prepare your personalized artwork

We share only the minimum data needed to provide each service. We do not sell, rent, or trade personal data.

Some hosting, cloud storage, image-processing, email, printing and delivery services may be provided from other countries. Where an international transfer requires contractual safeguards, the transfer is made only after the applicable contractual and regulatory steps have been completed.

Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (subject to legal retention requirements)
• Withdraw marketing consent at any time
• Object to processing in certain circumstances

To exercise any of these rights, contact us at hello@sillua.com.

Cookies

Essential storage supports security, your preferences and your order draft. If you accept advertising and measurement cookies, Meta Pixel may run and we measure visits to checkout steps, upload and form errors, and payment screen interactions. Our journey measurements use a random session identifier, screen-size category, site language and a broad traffic-source category. They do not contain names, email addresses, phone numbers, photos, card details, form contents or session recordings. Payment events may be linked to our payment record to verify the outcome. Journey events are retained for 90 days and removed by a daily cleanup. Declining does not prevent ordering.

Contact

Questions about this policy? Contact us at hello@sillua.com.