Privacy Policy

Data Controller

The controller of your personal data is Ismail Hakki Cekin, operating the Cekin Amber store as an unregistered business activity (działalność nierejestrowana) at ul. 2 Morskiego Pułku Strzelców 18C/44, Gdynia, Poland.

You can contact us about your data at any time at Ismail_Hakki@cekinamber.com.

What Data We Collect

We collect only the data needed to process and deliver your order:

• •First and last name
• •Email address
• •Phone number (optional)
• •Shipping address (street, city, postal code, country)
• •Order details and history

Payment Data

Payments are processed directly and securely by Stripe. We never receive or store your full card details.

Purposes and Legal Bases

We process your data for the following purposes:

• •Performing the sales contract — processing and delivering your order (Art. 6(1)(b) GDPR).
• •Complying with legal obligations such as accounting and handling complaints (Art. 6(1)(c) GDPR).
• •Our legitimate interests — answering enquiries, preventing fraud and securing the website (Art. 6(1)(f) GDPR).
• •Your consent — optional cookies and any marketing messages, which you can withdraw at any time (Art. 6(1)(a) GDPR).

Who We Share Data With

We use trusted service providers who process data on our behalf:

• •Stripe — payment processing
• •Supabase — database and order hosting (servers in the EU)
• •Resend — sending order confirmation and notification emails
• •Netlify — website hosting and delivery

Transfers Outside the EEA

These providers act as our processors and only handle your data on our instructions. Some may process data outside the European Economic Area under appropriate safeguards such as Standard Contractual Clauses.

If you ask us to ship your order outside the European Economic Area (for example to Turkey, the United Arab Emirates or Saudi Arabia), we will share the delivery details necessary to complete that shipment with the relevant postal and courier operators.

How Long We Keep Your Data

We keep order-related data for as long as necessary to fulfil your order and to meet legal obligations, including the periods during which complaints or withdrawal rights can be exercised. After that, the data is deleted or anonymised.

Your Rights

Under the GDPR you have the right to:

• •Access your data and request a copy
• •Correct inaccurate data
• •Request erasure ('right to be forgotten')
• •Restrict or object to processing
• •Data portability
• •Withdraw consent at any time, without affecting processing carried out beforehand

Exercising Your Rights and Complaints

To exercise any of these rights, email us at Ismail_Hakki@cekinamber.com. You also have the right to lodge a complaint with the Polish supervisory authority — the President of the Personal Data Protection Office (UODO), www.uodo.gov.pl.

Cookies

Our website uses cookies. For details on which cookies we use and how to manage your choices, please see our Cookie Policy.

Changes and Contact

We may update this Privacy Policy from time to time. The current version is always available on this page. For any questions, contact us at Ismail_Hakki@cekinamber.com.