Privacy
Privacy notice
Data controller
- Seller: [Company legal name] (trading as Paz Leather Art)
- Address: [Full address]
- Tax office / number: [Tax office] / [Tax number]
- Phone: [Phone]
- E-mail: info@pazleather.com
- Web: pazleather.com
What we collect
When you order or create an account: your name, e-mail, phone, shipping address, order history and, for customers in Türkiye who choose to give it, the national ID number needed for the invoice. If you create an account, your password is stored only as a one-way hash. Card details are entered on iyzico’s secure page and never reach us.
Why, and on what legal basis
- To make and deliver your order and handle returns — performance of the contract.
- To issue invoices and keep accounting records — legal obligation.
- To answer your messages and protect the shop against fraud — legitimate interest.
- To send the occasional atelier letter — only if you tick the box (consent), which you can withdraw at any time.
Who receives it
iyzico (payment), the courier that carries your parcel, our accountant, and public authorities when the law requires it. For deliveries abroad, the courier and customs offices of the destination country receive the shipping details. We do not sell personal data.
How long we keep it
Order and invoice records are kept for as long as Turkish tax and commercial law requires (up to 10 years). An account is kept until you ask us to close it.
Cookies and storage
The shop uses one essential cookie to keep you signed in and to show you your own order, and keeps your cart in your browser’s storage. There are no advertising or tracking cookies. Fonts are loaded from Google Fonts, which receives your IP address.
Your rights
You can ask to see, correct or delete your data, learn who received it, or object to its use, by writing to info@pazleather.com. Customers in Türkiye have the rights in article 11 of the Personal Data Protection Law (KVKK, No. 6698) and may complain to the Personal Data Protection Authority; customers in the EU or UK have the rights under the GDPR / UK GDPR and may complain to their supervisory authority.