Privacy Policy

The com­pany below (“Aftab Gallery”, “we” or “us”) is respon­si­ble for your per­sonal infor­ma­tion as its data controller.

[Com­pany name]
[Address], Istan­bul, Türkiye
Email: info@aftabgallery.com

This policy applies to our web­site, to enquiries, quotes and orders, to the Aftab Reg­istry, to our news­let­ter and to our work with trade clients. It is writ­ten to meet the Turk­ish Per­sonal Data Pro­tec­tion Law (KVKK) and, where they apply, other laws such as the EU and UK GDPR and the data pro­tec­tion laws of the Gulf countries.

Con­tact and enquiry details. Your name, email and phone number, your coun­try, your com­pany or studio, and any­thing you tell us in a mes­sage, such as links, sketches, plans, photos or project details.

Order details. Billing and deliv­ery addresses, the pieces you order, your choices of size and finish, invoices and pay­ment records. Pay­ment providers handle card pay­ments, and we never receive or store full card details.

Deliv­ery infor­ma­tion. Notes on access to your address, and the name and phone number of the person receiv­ing the piece, shared with our logis­tics part­ners so they can deliver it.

Reg­istry details. For each owner, their name and email, the pieces reg­is­tered to them, any photos or doc­u­ments shared on a piece’s pri­vate page, and records of ownership transfers.

News­let­ter. If you choose to join, your email and your consent.

Tech­ni­cal details. Your IP address, browser, device and the pages you request, recorded in our server logs for secu­rity and to keep the website working.

We do not ask for sen­si­tive infor­ma­tion, such as details about health or reli­gion. Please do not send it to us.

We col­lect most infor­ma­tion directly from you, when you fill in a form, write to us or place an order. Some is col­lected auto­mat­i­cally when you visit the web­site. We may also receive details from others, such as a designer or archi­tect who intro­duces you, a new owner in a Reg­istry trans­fer, or a logis­tics part­ner updat­ing us on your delivery.

To reply to you and pre­pare quotes, because you asked us to, and to take the steps needed before we agree a contract.

To make, deliver and look after your piece, includ­ing invoices, deliv­ery, cus­toms and care after the sale, because this is needed to carry out our contract with you.

To keep the Aftab Reg­istry, to record where our pieces come from and to handle own­er­ship trans­fers, which is in our legit­i­mate inter­est and in the inter­est of their owners.

To run and pro­tect our busi­ness and web­site, for exam­ple to keep records, pre­vent fraud and fix prob­lems, as our legitimate interest.

To meet legal duties, such as tax, account­ing and customs rules.

To send our news­let­ter, only with your consent.

In Türkiye, these pur­poses rely on the legal grounds in Arti­cle 5 of the KVKK, such as the per­for­mance of a con­tract, legal obli­ga­tions, legit­i­mate inter­ests and, where it is needed, your explicit consent.

If you join our news­let­ter, we will send you news about new pieces and the studio. Every email has a link to unsub­scribe, or you can write to us at any time. We never share your email with others for their own marketing.

We share per­sonal infor­ma­tion only when it is needed, and only as much as is needed: with logis­tics part­ners and cus­toms bro­kers, to crate, ship and deliver your piece, and with local part­ners for place­ment in your room; with pay­ment providers and banks, to process payments; and with our web­site host and our email and IT ser­vice providers, who handle it on our behalf and under our instructions.

Where needed, we also share it with pro­fes­sional advis­ers, such as our accoun­tants and lawyers; with public author­i­ties, such as tax and cus­toms offices, courts or reg­u­la­tors, when the law requires it; and with a buyer of our busi­ness, if it is ever sold, under the same pro­tec­tions. We never sell your personal information.

Our part­ners and ser­vice providers may be in other coun­tries, includ­ing out­side Türkiye, the Euro­pean Union and the Gulf. When we trans­fer your infor­ma­tion abroad, we use the safe­guards the law requires, such as stan­dard data pro­tec­tion con­tracts and, in Türkiye, the trans­fer rules of the KVKK.

Enquiries that do not lead to an order: up to two years after our last contact.

Orders, invoices and pay­ment records: as long as tax and com­mer­cial laws require, which in Türkiye can be up to ten years.

Reg­istry details: for as long as you are the reg­is­tered owner. After a trans­fer, or if you ask, we remove your per­sonal details, and only the record of the piece itself remains.

News­let­ter: until you unsub­scribe. Server logs: briefly, for secu­rity. When we no longer need infor­ma­tion, we delete it or anonymise it.

We use secure con­nec­tions, give access only to the people who need it, and choose ser­vice providers who pro­tect infor­ma­tion prop­erly. No system is com­pletely secure, but if a breach ever puts your infor­ma­tion at risk, we will tell you and the author­i­ties as the law requires.

Depend­ing on where you live, you have the right to know whether we hold infor­ma­tion about you and to receive a copy, to cor­rect it, to ask us to delete it, to limit or object to how we use it, to receive it in a por­ta­ble format, to with­draw your con­sent at any time and to know who we have shared it with. Under the KVKK, you also have the rights set out in its Arti­cle 11. We do not make deci­sions about you using automated means alone.

To use your rights, write to us from the email address you use with us. We may ask you to con­firm your iden­tity. We reply within 30 days and free of charge, unless the law allows a fee for requests that are exces­sive or repeated.

If you are not happy with our reply, you can com­plain to a data pro­tec­tion author­ity: in Türkiye, the Per­sonal Data Pro­tec­tion Author­ity (KVKK); in the EU or the UK, the author­ity in your country; and in the UAE or Saudi Arabia, the national author­ity for data protection.

Cook­ies are small files that a web­site stores on your device. We use only the cook­ies our web­site needs to work, such as those that keep it fast and secure and keep our team signed in. We do not use adver­tis­ing, ana­lyt­ics or track­ing cook­ies, so we do not ask for cookie consent.

Our pages load fonts from Google’s servers, which means Google receives your IP address in order to deliver them. If we ever add ana­lyt­ics or other optional cook­ies, we will ask for your con­sent first and update this policy.

Our web­site and ser­vices are not intended for chil­dren under 18, and we do not know­ingly col­lect information about them.

Our web­site links to other web­sites and to our pages on social media, such as Insta­gram, Pin­ter­est and Face­book. Those ser­vices have their own pri­vacy poli­cies, and we are not respon­si­ble for how they use your information.

We may update this policy from time to time. The date at the top of this page shows the latest ver­sion, and we will tell you about impor­tant changes where appro­pri­ate. For any ques­tion about this policy or your infor­ma­tion, write to us using the details in section 1.