PRIVACY POLICY

Last Updated: October 27, 2026

House of Shiver respects your privacy and is committed to handling your personal information responsibly. This Privacy Policy explains what information we may collect when you visit our website, place an order, contact us, or otherwise interact with our services.

This policy should be read together with any separate privacy notices, cookie notices, and consent requests presented on our website.

1. Who We Are

House of Shiver operates an online store through which customers can browse and purchase products.

For privacy-related enquiries, please contact:

Email: info@houseofshiver.com

Data Controller: [Insert the full legal name of the business or individual operating House of Shiver]

Registered Address: [Insert the complete registered business address]

The identity and contact details of the legal data controller should be completed before this policy is published.

2. Personal Information We Collect

Depending on how you use our website, we may collect the following categories of personal information:

A. Information You Provide

• Name and surname.

• Billing and shipping address.

• Email address and telephone number.

• Order details, purchased products, and transaction references.

• Information you provide when contacting customer support.

• Information you submit through forms, surveys, or other website features.

• Preferences and communication choices you voluntarily provide.

B. Order and Transaction Information

When you place an order, we may process information necessary to manage the transaction, including:

• Products purchased and quantities.

• Order number and order status.

• Payment status and transaction reference.

• Billing and delivery information.

• Refund, cancellation, and return records.

Payment card information is handled according to the systems and security procedures of the relevant payment provider. We do not claim to store full payment card details unless our actual payment systems and procedures support that statement.

C. Technical and Usage Information

When you browse our website, certain information may be collected automatically, depending on your browser settings and the technologies used on the website. This may include:

• IP address.

• Browser type and device information.

• Operating system and language preferences.

• Pages visited and interactions with the website.

• Referring website or campaign information.

• Cookie identifiers and similar technical identifiers.

• Website performance, security, and diagnostic information.

D. Customer Support Information

If you contact us, we may retain your correspondence and the information needed to respond to your enquiry, manage your order, or resolve a complaint.

3. How We Use Personal Information

We process personal information only for defined purposes and where an applicable legal basis permits us to do so.

These purposes may include:

• Processing and fulfilling orders.

• Arranging delivery and communicating order updates.

• Processing payments, cancellations, returns, and refunds.

• Responding to questions and customer support requests.

• Managing customer accounts, where this feature is available.

• Maintaining accounting, invoicing, and transaction records.

• Detecting, preventing, and investigating fraud or misuse.

• Maintaining website security and functionality.

• Meeting legal, regulatory, and record-keeping obligations.

• Managing disputes and exercising or defending legal claims.

• Measuring website performance and improving the shopping experience, where permitted.

• Sending marketing communications where the required legal conditions and consent requirements have been met.

We will not use personal information for an unrelated purpose without an appropriate legal basis and any additional notice or consent required by law.

4. Legal Bases for Processing

Where the Turkish Personal Data Protection Law No. 6698 (KVKK) applies, personal data may be processed on one or more applicable legal bases, including:

• The processing is expressly provided for by law.

• Processing is necessary to perform or establish a contract with the data subject.

• Processing is necessary for the data controller to fulfil a legal obligation.

• Processing is necessary to establish, exercise, or protect a legal right.

• Processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.

• Explicit consent has been obtained where required by law.

The specific legal basis depends on the particular processing activity. Consent will be requested separately where it is legally required and will not be treated as a blanket authorisation for all processing.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functionality and, where enabled, analytics, personalisation, or advertising.

These technologies may be used to:

• Keep the shopping cart and checkout functioning.

• Remember certain website preferences.

• Support website security.

• Understand how visitors use the website.

• Measure the performance of marketing campaigns.

• Support advertising or personalised experiences where permitted.

Strictly necessary technologies may operate where legally permitted. Non-essential analytics or advertising technologies will be handled according to applicable consent requirements.

You may be able to manage cookies through your browser settings and any cookie preference tool provided on our website. Blocking certain cookies may affect website functionality.

The actual cookies, analytics tools, advertising pixels, and consent mechanisms used by House of Shiver should be listed and configured according to the website's live setup.

6. Marketing Communications

We may send service-related communications concerning orders, payments, deliveries, returns, security, or changes that affect your use of our services.

Promotional emails, SMS messages, or similar marketing communications will be sent only where the applicable legal requirements have been met.

• You may unsubscribe from marketing emails using the unsubscribe mechanism provided in the email, where available.

• You may withdraw marketing consent through the available channel or contact us at info@houseofshiver.com.

• Unsubscribing from promotional messages will not prevent us from sending essential service communications relating to your orders or legal obligations.

Where applicable, electronic commercial communications will also comply with relevant Turkish commercial communication and consent requirements.

7. How We Share Personal Information

We may share relevant personal information with service providers where necessary for the purposes described in this policy, subject to applicable law and appropriate safeguards.

Depending on the services actually used by House of Shiver, these recipients may include:

• Shopify or the providers supporting our online store.

• Payment service providers and financial institutions.

• Delivery companies and logistics providers.

• Website hosting, security, and technical support providers.

• Customer service and communication platforms.

• Analytics or advertising providers, where lawfully configured.

• Accountants, auditors, legal advisers, and professional consultants.

• Public authorities, courts, or regulators where disclosure is legally required.

We do not sell personal information to third parties in exchange for money as a general business practice. Any sharing or processing will be assessed according to its purpose, legal basis, and applicable requirements.

8. International Data Transfers

Some service providers supporting an online store may process information in countries outside Türkiye.

Where personal data is transferred internationally, House of Shiver will implement the transfer mechanism and safeguards required under applicable law, including KVKK requirements where relevant.

Depending on the circumstances, this may require an adequacy decision, standard contracts, or another legally recognised transfer mechanism.

The actual service providers, recipient countries, and applicable safeguards should be verified against the store's current Shopify configuration and connected applications.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal retention obligations.

Retention periods may depend on:

• The duration of the customer relationship.

• The completion of orders, returns, and refunds.

• Applicable accounting, tax, and commercial record-keeping requirements.

• The handling of disputes or legal claims.

• Security, fraud prevention, and regulatory requirements.

• Consent withdrawal or objection where these affect the applicable processing activity.

When information is no longer required, it will be deleted, destroyed, or anonymised in accordance with applicable law and our retention procedures.

10. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure, or misuse.

These measures may include access controls, secure service providers, appropriate account permissions, and security procedures relevant to our systems.

No online transmission or storage method can be guaranteed to be completely secure. We will handle personal data incidents in accordance with applicable legal obligations.

11. Your Privacy Rights

Subject to the applicable legal conditions, individuals whose personal data is processed under KVKK may have the right to:

• Learn whether their personal data is being processed.

• Request information about the processing.

• Learn the purpose of processing and whether the data is used in accordance with that purpose.

• Learn the third parties to whom personal data is transferred domestically or abroad.

• Request correction of incomplete or inaccurate personal data.

• Request deletion or destruction where the legal conditions for doing so are met.

• Request notification of relevant correction, deletion, or destruction actions to recipients where required by law.

• Object to certain outcomes arising from analysis conducted exclusively through automated systems, where the statutory conditions apply.

• Claim compensation for damage caused by unlawful processing, where applicable.

Requests may be submitted to info@houseofshiver.com. We may request reasonable information to verify your identity and will respond within the applicable statutory period.

These rights are subject to applicable legal exceptions and retention obligations.

12. Children's Privacy

Our website is not intended to encourage children to provide personal information without the involvement of a parent or legal guardian where such involvement is required.

If you believe that a child has provided personal information in circumstances that require further action, please contact info@houseofshiver.com.

13. Third-Party Websites

Our website may contain links to third-party websites or services. Those websites operate under their own privacy policies and practices.

House of Shiver is not responsible for the privacy practices of third-party websites that it does not control. Please review their policies before submitting personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business, website functionality, service providers, or applicable law.

The updated version will be published on this page with a revised date. Where required by law, we will provide additional notice or obtain consent before implementing relevant changes.

15. Contact

For privacy questions, requests, or complaints, please contact:

House of Shiver
Email: info@houseofshiver.com

Legal Business Name: [Insert full legal name]
Registered Address: [Insert complete address]

If you are not satisfied with our response, you may have the right to apply to the relevant data protection authority or other competent body under applicable law.