Privacy notice
This notice explains how we use your personal data. It's written to meet the UK GDPR and the Data Protection Act 2018, and Turkish Personal Data Protection Law No. 6698 (KVKK). Our full Privacy policy is also available in the footer.
1. Data controller. Lyro Dijital Reklam Tasarım Ticaret Limited Şirketi, trading as Furhood, Ünalan Mah. Libadiye Cad. Emar Residence No: 82 E, İç Kapı No: 291, Üsküdar, İstanbul, Türkiye. Email: hello@furhoodkids.com.
2. What we collect. Your name, email address, delivery address, phone number, order details, messages you send us, and information about how you use our website (such as cookies, where you've agreed to them). We don't see or store your full card details: payments are handled by our payment provider.
3. Why we use it. To take and deliver your order, to handle returns and refunds, to answer your questions, to meet our legal and tax obligations, to prevent fraud, and, if you agree, to send you news and offers. The legal bases are performance of our contract with you, our legal obligations, our legitimate interests in running a safe online shop, and your consent for marketing and non-essential cookies.
4. Who we share it with. Only with the companies that help us run the shop: our e-commerce platform (Shopify), our payment provider, our order fulfilment and delivery partners, and our email and customer service tools. Some of these are outside the UK and Turkey. Where data is transferred abroad, we rely on appropriate safeguards required by law.
5. How long we keep it. Order and invoice records are kept for as long as tax and commercial law requires. Marketing data is kept until you unsubscribe. Other data is deleted when it's no longer needed.
6. Your rights. You can ask to access, correct or delete your data, to restrict or object to how we use it, to receive a copy of it, and to withdraw your consent at any time. You can also ask what data we hold and whether it has been transferred. Email hello@furhoodkids.com and we'll reply within 30 days. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or the Turkish Personal Data Protection Authority (kvkk.gov.tr).