Privacy Policy
PRIVACY POLICY
CSUCİTEO — In accordance with UK GDPR & Data Protection Act 2018
Last Updated: 30 March 2026 Data Controller: CSUCİTEO Supervisory Authority: Information Commissioner's Office (ICO) — ico.org.uk
INTRODUCTION
CSUCİTEO operates this store and website, including all related information, content, features, tools, products and services, to provide you with a personal shopping experience ("Services"). CSUCİTEO is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy explains how we collect, use and share your personal information when you visit, use or make a purchase or other transaction through the Services, or when you contact us in any other way.
In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall take precedence in relation to the collection, processing and sharing of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you confirm that you have read and understood this Privacy Policy and that you consent to your information being collected, used and shared as described herein.
⚖️ Your UK Legal Rights: This Privacy Policy is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Your rights as a data subject are set out in full in the "Your Rights" section below.
1. 📋 Personal Information We Collect & Process
When we use the term "personal information", we mean information that identifies you or that can reasonably be linked to you as an individual. This does not include anonymised or aggregated data from which your identity cannot reasonably be determined.
Depending on how you interact with the Services, where you are based, and to the extent permitted or required by applicable UK law, we may collect or process the following categories of personal information:
| Category | Examples |
|---|---|
| 📬 Contact Information | Full name, delivery address, billing address, telephone number, e-mail address |
| 💳 Financial Information | Credit/debit card details, financial account numbers, payment card information, transaction details, payment method and confirmation |
| 🔑 Account Information | Username, password, security questions, preferences and settings |
| 🛒 Transaction Information | Items added to basket or wishlist, purchases, returns, exchanges, cancellations and order history |
| 💬 Communications | Information shared with us when submitting a customer support request or contacting us |
| 📱 Device Information | Device, browser or network connection details, IP address and other unique identifiers |
| 📊 Usage Information | How and when you interact with or browse the Services |
2. 📥 Sources of Personal Information
We may collect personal information from the following sources:
Directly from you — for example, when you create an account, visit or use the Services, contact us, or otherwise provide your personal information to us.
Automatically through the Services — for example, when you use our products or services or visit our websites, through your device and via the use of cookies and similar technologies.
From our service providers — for example, when we engage service providers to supply certain technologies, or when they collect or process personal information on our behalf.
From our business partners or other third parties — in accordance with their own privacy policies and applicable UK law.
3. 🎯 How We Use Your Personal Information
Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:
🛒 Providing, Personalising & Improving the Services
We use your personal information to fulfil our contract with you, process your payments, dispatch your orders, remember your preferences and items of interest, send account-related notifications, process purchases, returns, exchanges or other transactions, create and manage your account, arrange delivery, facilitate returns and exchanges, enable you to submit reviews, and create a personalised shopping experience. This also includes using your personal information to better personalise and improve the Services.
⚖️ Legal Basis (UK GDPR): Contract Performance — necessary to fulfil our contract with you.
📣 Marketing & Advertising
We may use your personal information for marketing and promotional purposes — for example, to send you marketing, advertising and promotional communications by e-mail, SMS or post — and to display online advertisements for products or services on the Services or other websites, based on your previous purchases, basket contents and other activity on the Services.
⚖️ Legal Basis (UK GDPR): Consent — where you have opted in to receive marketing communications. You may withdraw your consent at any time by using the unsubscribe option in any marketing e-mail.
🛡️ Security & Fraud Prevention
We use your personal information to verify your account, provide a secure payment and shopping experience, detect, investigate or take action against potential fraud, unlawful, dangerous or malicious activity, protect public safety and maintain the security of the Services.
⚖️ Legal Basis (UK GDPR): Legitimate Interests — to protect our business and customers from fraud and security threats.
💬 Communicating With You
We use your personal information to provide you with customer support, respond promptly to your enquiries, deliver effective services and maintain our business relationship with you.
⚖️ Legal Basis (UK GDPR): Contract Performance and Legitimate Interests.
⚖️ Legal Compliance
We use your personal information to comply with applicable laws or to respond to valid legal processes, including requests from law enforcement or government authorities, to conduct or participate in legal proceedings, and to investigate or enforce potential breaches of our terms or policies.
⚖️ Legal Basis (UK GDPR): Legal Obligation — required by UK law.
4. 📤 How We Share Your Personal Information
In certain circumstances, we may share your personal information with third parties for legitimate purposes, subject to this Privacy Policy. These circumstances include:
Service Providers — We share information with Shopify and other third-party vendors who provide services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and delivery services.
Business & Marketing Partners — We share information with our business and marketing partners to provide you with marketing services and advertising. For example, we use Shopify to support personalised advertising across different vendors and websites based on your online activity. Our business and marketing partners will use your information in accordance with their own privacy notices.
At Your Direction or With Your Consent — We share certain information with third parties when directed, requested or explicitly consented to by you — for example, for product delivery or when you use social media widgets or login integrations.
Within Our Corporate Group — We may share information with our affiliates or other entities within our corporate group.
Legal & Business Transactions — We may share information in connection with business transactions such as a merger or insolvency, to comply with applicable legal obligations (including responding to court orders, search warrants and similar requests), to enforce applicable terms or policies, and to protect and defend the Services, our rights, and the rights of our users or others.
⚠️ Please Note: We do not sell your personal information to any third parties under any circumstances.
5. 🛍️ Our Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information relating to your access to and use of the Services in order to provide and improve the Services. Information you provide through the Services will be transferred to and shared with Shopify and third parties located in countries other than your country of residence for the purpose of providing and improving the Services.
We also use certain advanced Shopify features that draw on data and information derived from your interactions with our store, other merchants and Shopify, in order to protect, grow and develop our business. In order to provide these advanced features, Shopify may use personal information collected about your interactions with our store, other merchants and Shopify. In these cases, Shopify is responsible for the processing of your personal information and for responding to requests to exercise your rights in relation to such use.
For further information about how Shopify uses your personal information and the rights you may have, please visit the Shopify Consumer Privacy Policy. Depending on where you are based, you may be able to exercise certain rights in relation to your personal information through the Shopify Privacy Portal at https://privacy.shopify.com/en.
6. 🔗 Third-Party Websites & Links
The Services may contain links to websites or other online platforms operated by third parties. If you follow links to sites that are not affiliated with or under our control, you should review their privacy and security policies and other terms and conditions. We make no warranties and accept no responsibility or liability in relation to the privacy or security of such sites, including the accuracy, completeness or reliability of information found on those sites.
Information provided in public or semi-public areas, including information shared on third-party social media platforms, may be visible to other users of the Services and/or users of those third-party platforms and may be used by us or third parties without restriction. The inclusion of such links on the Services does not constitute an endorsement of the linked platforms or their owners or operators, unless expressly stated otherwise on the Services.
7. 👶 Children's Data
The Services are not designed for use by children. We do not knowingly collect personal information from children below the legal age of majority in their jurisdiction of residence.
If you believe that your child has provided us with their personal information, please contact us using the details below to request deletion of that information.
As of the effective date of this Privacy Policy, we have no actual knowledge that we "share" or "sell" personal information of individuals under the age of 16, as defined under applicable law.
⚖️ UK GDPR Note: Under UK GDPR, the age of digital consent is 13 years. We do not knowingly process the personal data of children under 13 years of age without verifiable parental consent.
8. 🔒 Security & Retention of Your Information
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security". Information you transmit to us may also not be secure during transmission. We therefore recommend that you do not use unsecured communication channels to transmit sensitive or confidential information to us.
How long we retain your personal information depends on a number of factors, including whether we need it to maintain your account, provide the Services to you, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.
| Data Type | Retention Period |
|---|---|
| 📦 Order & Transaction Records | 7 years (UK legal requirement) |
| 💬 Customer Communications | 3 years |
| 📣 Marketing Preferences | Until you withdraw consent |
| 🔒 Technical & Security Data | 12 months |
9. ✅ Your Rights Under UK GDPR
Depending on where you are based, you may have some or all of the following rights in relation to your personal information. Please note that these rights are not absolute, may apply only in certain circumstances, and we may refuse your request where permitted by applicable law.
| Right | What This Means |
|---|---|
| 👁️ Right of Access | You may request access to the personal information we hold about you |
| 🗑️ Right to Erasure | You may request deletion of the personal information we hold about you |
| ✏️ Right to Rectification | You may request correction of inaccurate personal information we hold about you |
| 📦 Right to Data Portability | You may request a copy of your personal information and, in certain circumstances and subject to exceptions, request that it be transferred to a third party |
| 📣 Managing Communication Preferences | We may send you promotional e-mails. You may opt out at any time using the unsubscribe option in any such e-mail. Please note that we may continue to send you non-promotional e-mails, such as those relating to your account or orders |
| ⏸️ Right to Restriction | You may request that we restrict our processing of your personal information in certain circumstances |
| 🚫 Right to Object | You may object to our processing of your personal information where we rely on legitimate interests as our lawful basis |
| 🤖 Right to Avoid Automated Decisions | You have the right not to be subject to solely automated decision-making that produces legal or similarly significant effects on you |
You may exercise these rights by contacting us at the details set out below or at the relevant points on the Services. For further information about how Shopify uses your personal information and other rights you may have, please visit https://privacy.shopify.com/en.
We will not discriminate against you for exercising any of these rights. To the extent permitted by applicable law, we may need to verify your identity before processing your request. In accordance with applicable law, you may designate an authorised representative to submit requests on your behalf, though we may require proof of their authority to act on your behalf and may require you to verify your identity directly with us. We will respond to your request within a reasonable timeframe and in accordance with applicable UK law.
⏱️ Response Timeframe: We will respond to all valid requests within 30 days in accordance with UK GDPR. In complex cases, we may extend this by a further 60 days and will notify you accordingly.
10. 🏛️ Complaints
If you have a complaint about how we handle your personal information, please contact us in the first instance using the details below. We will endeavour to resolve your complaint promptly and fairly.
If you remain dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's independent data protection supervisory authority:
| 🌐 Website | ico.org.uk |
| 📞 Helpline | 0303 123 1113 |
| 📮 Address | Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
11. 🌍 International Transfers
Please be aware that we may transfer, store and process your personal information in countries outside the United Kingdom.
Where we transfer personal information outside the UK or the European Economic Area (EEA), we rely on recognised transfer mechanisms — such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or adequacy regulations made by the UK Secretary of State — unless the transfer is to a country that has been deemed to provide an adequate level of protection.
12. 🍪 Cookies
We use cookies and similar tracking technologies on our website. Cookies help us to provide you with a better experience and enable certain features of the Services to function correctly.
You may manage your cookie preferences at any time through our cookie settings tool on the website. Please note that disabling certain cookies may affect the functionality of the Services.
For full details on how we use cookies, please refer to our Cookie Policy available on our website.
13. 🔄 Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last Updated" date, and provide any notices required by applicable UK law.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
14. 📞 Contact Us
If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please contact us:
| csuciteo.destek@gmail.com | |
| 🌐 Website | csuciteo.com |
📅 Last Updated: 30 March 2026 ⚖️ Governing Law: UK GDPR & Data Protection Act 2018 🏛️ Supervisory Authority: Information Commissioner's Office (ICO) — ico.org.uk
⚠️ Legal Disclaimer: This Privacy Policy is provided for general informational purposes. We strongly recommend consulting a qualified UK data protection solicitor to ensure full compliance with UK GDPR and the Data Protection Act 2018 for your specific business circumstances. 💼