This policy explains how your personal data is handled when you visit the Merchuns website and when you contact us through the contact form, WhatsApp, phone or email. We process your data in line with the data protection legislation in force in North Cyprus and, where applicable, the principles of the EU General Data Protection Regulation (GDPR).
01Data controller
The company responsible for your personal data is Merchuns Ltd. (İlkokul Yolu, Yeniboğaziçi, Gazimağusa, Kuzey Kıbrıs). For any privacy question, write to [email protected].
02What we collect
This website is a product catalog. We do not take online payments or create user accounts. The data we collect is limited to:
- Contact and quote form: your name, your company or hotel name if given, email address and/or phone number, city, your message and the product you asked about.
- Information you share when you write to us on WhatsApp, by phone or by email.
- Technical logs: short lived records such as IP address, browser type and request time, kept for server security.
03Why we use it
We use your data only to:
- Reply to your request, quote or stock question.
- Schedule installation appointments and provide after sales support.
- Protect the site against abuse and spam.
- Meet our legal obligations (for example invoice records).
04Legal basis
When you send the form, your data is processed to answer your request and to take steps before a possible sale. Security logs rely on our legitimate interest, invoice records on legal obligation. We do not send marketing messages; if we ever do, it will only be with your explicit consent.
05Cookies and analytics
This site does not use advertising or tracking cookies. Strictly necessary technical storage (for example remembering your cookie choice in your browser) is always used.
Only if you allow it, we load Umami analytics, hosted on our own server (analytics.celya.tech), to measure which pages are visited. Umami sets no cookies, does not store your IP address and does not follow you across sites; it produces anonymous, aggregate statistics only.
To stop spam and bot submissions, the contact and quote forms may use Cloudflare Turnstile. During this check Cloudflare processes technical data such as your IP address and browser information for security purposes only, not for advertising or tracking. This is a strictly necessary security measure.
You can change your choice at any time with the "Cookie settings" link at the bottom of every page.
06How long we keep it
Contact form submissions and correspondence are kept for up to 24 months after your request is closed. When a request turns into a sale, invoice and warranty records are kept for the periods required by law. Technical logs are deleted after a short time.
07Sharing
We do not sell your data or share it with third parties for marketing. Data may only be shared, as far as the service requires, with suppliers bound by confidentiality, such as the infrastructure providers that host this site. Where the law requires it, data may be disclosed to the competent authorities.
08Your rights
You can contact us at any time to:
- Find out whether we process data about you and get access to it.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data or restrict its processing.
- Object to processing and withdraw consent where you gave it.
- Receive a copy of your data in a commonly used format.
Send your request to [email protected]. We reply within 30 days at the latest. If you are not satisfied with our answer, you have the right to complain to the relevant data protection authority.
09Security
Your data is transmitted over an encrypted connection (HTTPS) and stored on systems only authorised staff can access. The admin panel is protected by password and session security.
10Changes
We may update this policy from time to time. The current version is always published on this page with its last updated date.