Privacy Policy

Privacy Polcicy for theexitart.com

Last Updated: August 18, 2024

This Privacy Policy describes how theexitart.com (“we,” “our,” or “us”) collects, uses, stores, and shares your personal information when you visit or make a purchase from theextart.com (the “Website”). We are committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR).

1. Information We Collect

1.1 Personal Data

When you visit our Website, make a purchase, or contact us, we may collect the following personal data:

  • Contact Information: Name, email address ([email protected]), billing and shipping address, and phone number.
  • Payment Information: Payment card details and billing information, which are processed securely by third-party payment processors.
  • Account Information: If you create an account, we may collect your username, password, and purchase history.
  • Device Information: IP address, browser type, operating system, and browsing behavior on our Website.
  • Order Information: Details of your orders, including the products you purchased and any communications related to those orders.

1.2 Non-Personal Data

We may also collect non-personal data, which does not directly identify you. This data may include aggregated information about how users interact with the Website.

2. How We Use Your Information

We use your personal data for the following purposes:

  • To Process Orders: To fulfill and ship your orders, process payments, and provide customer support.
  • To Improve Our Services: To enhance your experience on our Website, including analyzing usage patterns and improving our products and services.
  • To Communicate with You: To send you updates on your order status, respond to inquiries, and provide marketing communications, if you have opted in.
  • To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual Necessity: To fulfill the contract we have with you when you place an order.
  • Legitimate Interests: To improve our Website, services, and customer experience.
  • Consent: Where you have given explicit consent, such as for receiving marketing communications.
  • Legal Compliance: To comply with legal obligations, such as tax and accounting requirements.

4. Data Sharing and Disclosure

We may share your personal data with the following parties:

  • Service Providers: Third-party vendors who assist in operating our Website, processing payments, and delivering orders. These providers are contractually obligated to protect your data.
  • Legal Authorities: If required by law or to protect our rights, we may disclose your information to regulatory bodies, law enforcement, or other legal entities.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. This includes encryption of sensitive information, secure data storage, and regular security audits.

6. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Once your data is no longer needed, we will securely delete or anonymize it.

7. Your Rights

Under the GDPR, you have the following rights concerning your personal data:

  • Access: The right to request a copy of the personal data we hold about you.
  • Rectification: The right to correct any inaccuracies in your personal data.
  • Erasure: The right to request the deletion of your personal data, subject to legal constraints.
  • Restriction: The right to restrict the processing of your personal data in certain circumstances.
  • Data Portability: The right to receive your data in a structured, commonly used, and machine-readable format.
  • Objection: The right to object to the processing of your data for direct marketing or legitimate interests.
  • Withdraw Consent: The right to withdraw your consent at any time, where consent is the basis for processing.

To exercise these rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR.

8. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our site. For more information, please refer to our [Cookie Policy].

9. International Data Transfers

As our operations are based in Istanbul, Turkey, your personal data may be transferred to, and stored in, a country outside the European Economic Area (EEA). We ensure that such transfers are compliant with GDPR by implementing appropriate safeguards.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the effective date.

11. Contact Information

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

By using our Website, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your personal data as described.