Privacy Policy

Last updated: July 24, 2026

Elsa Saç Fırçaları operates this store and website, including related information, content, features, tools, products and services, to provide customers with a personalised shopping experience (the “Services”). The Services are powered by Shopify. This Privacy Policy explains how we collect, use and share your personal information when you visit or use the Services, make a purchase or other transaction, or otherwise communicate with us. If these terms conflict with our Terms of Service, this Privacy Policy controls regarding the collection, processing and sharing of personal information.

Please read this Policy carefully. By accessing or using any Service, you acknowledge that you have read it and understand the collection, use and sharing described here.

Personal information we collect or process

“Personal information” means information that identifies you or another person or can reasonably be linked to either. It excludes information collected anonymously or de-identified so that it cannot reasonably identify or be linked to you. Depending on how you interact with the Services, where you live, and what applicable law permits or requires, we may collect or process the following categories, including inferences drawn from them:

• Contact information, such as name, address, billing and shipping addresses, telephone number and email address.
• Financial information, such as credit/debit-card and financial-account numbers, payment-card and account information, transaction details, payment method and confirmation.
• Account information, such as username, password, security questions, preferences and settings.
• Transaction information, such as products added to your cart or wish list, purchased, returned, exchanged or cancelled, and transaction history.
• Communications with us, including information supplied in customer-support requests.
• Device information, including information about your device, browser or network connection, IP address and other unique identifiers.
• Usage information, including when and how you interact with or navigate the Services.

Sources of personal information

We may collect personal information directly from you; automatically through the Services and cookies or similar technologies; from service providers that supply technology or collect or process information for us; and from business partners or other third parties.

How we use personal information

• Providing, personalising and improving the Services: to perform our contract, process payments, ship orders, remember preferences, send account notices, process purchases, returns and exchanges, manage accounts, arrange delivery, enable reviews and personalise recommendations and the shopping experience.
• Marketing and advertising: to send marketing or promotional communications by email, text message or post and show online advertisements based on purchases, cart contents and other Service activity.
• Security and fraud prevention: to verify accounts, provide secure payment and shopping, detect, investigate or prevent fraudulent, illegal, dangerous or malicious activity, protect public safety and secure the Services. You are responsible for your account credentials and should not share them.
• Communicating with you: to provide customer support, respond promptly, deliver effective service and maintain our business relationship.
• Legal reasons: to comply with law and valid legal process, respond to law-enforcement or government requests, take part in discovery, manage disputes and investigate or enforce possible violations of our terms or policies.

How we share personal information

For legitimate purposes governed by this Policy, we may share information with Shopify, vendors and other providers that perform services for us, including IT management, payment processing, analytics, customer support, cloud storage, dispatch and shipping; with business and marketing partners that provide marketing and advertising; when you direct or request sharing or expressly consent, such as for delivery or social-media/login integrations; with affiliates or entities in our corporate group; and in connection with business transactions such as a merger or bankruptcy, legal obligations, enforcement of terms, or protection of the Services and the rights of us, users or others.

Business and marketing partners use information under their own privacy notices. Depending on where you live, you may have the right to opt out of sharing used for targeted advertising based on activity across different sellers and websites.

Relationship with Shopify

Shopify hosts the Services and collects and processes information about access and use to provide and improve them. Information supplied to the Services may be transferred to and shared with Shopify and third parties outside your country. We also use advanced Shopify features that draw on interactions with our store, other merchants and Shopify to protect, grow and improve our business. For those features, Shopify may process personal information and is responsible for responding to requests about rights relating to its use.

Learn more in the Shopify Consumer Privacy Policy and, where available, exercise rights through the Shopify Privacy Portal.

Third-party websites and links

The Services may link to websites or platforms operated by third parties. Review their privacy, security and other terms. We do not guarantee or accept responsibility for their privacy, security, accuracy, completeness or reliability. Information you provide publicly or semi-publicly, including on social media, may be visible to Service users or third-party platform users and available for unrestricted use. A link does not imply endorsement unless expressly stated.

Children’s data

The Services are not intended for children, and we do not knowingly collect personal information from children below the legal age of majority where they live. If you believe a child has provided information, contact us to request deletion. As of the effective date of this Policy, we do not have actual knowledge that we have “shared” or “sold”, as defined by applicable law, personal information of anyone under 16.

Security and retention

No security measure is perfect or impenetrable and we cannot guarantee “perfect security”. Information may also be insecure in transit, so do not send sensitive or confidential information through insecure channels.

How long we retain information depends on factors such as whether it is needed to maintain an account, provide Services, comply with legal obligations, resolve disputes or enforce agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the following rights, subject to conditions and legal exceptions: access/knowledge of information held about you; deletion; correction; receiving a copy and, in certain circumstances, transferring it to a third party; and managing communication preferences. You may unsubscribe from promotional emails using the link in them, although we may still send non-promotional messages about your account or orders.

Exercise rights through the points indicated in the Services or by contacting us below. More information about Shopify’s use and available rights is at https://privacy.shopify.com/en.

We will not discriminate against you for exercising rights. We may verify identity before processing requests. Where permitted, an authorised agent may make a request for you; we may require proof of authority and direct identity verification. We will respond within a reasonable period in accordance with law.

Complaints

If you have a complaint about our processing, contact us below. Depending on where you live, you may have the right to appeal our decision or complain to your local data-protection authority.

International transfers

We may transfer, store and process personal information outside your country. For transfers outside the European Economic Area or United Kingdom, we rely on recognised mechanisms such as the European Commission Standard Contractual Clauses or equivalent UK contracts unless the destination is recognised as providing adequate protection.

Changes to this Policy

We may update this Policy to reflect changes in practices or for operational, legal or regulatory reasons. We will publish the revised Policy, update the “Last updated” date and provide notices required by law.

Contact

For questions about privacy or this Policy, or to exercise a right, call us, email the contact address provided in the Services, or contact us at Başakşehir, 34490, Türkiye.