Privacy policy
Privacy Policy
Last updated: 7 September 2026
This policy explains what personal data ESLEMS collects when you visit or buy from eslems.com, why we hold it, who we share it with, and the rights you have over it. It is written for customers in the United Kingdom.
Who we are
ESLEMS is the trading name of ESLEMS GROUP MUHENDISLIK VE DIS TICARET LIMITED SIRKETI, a company registered in Türkiye (company registration number 242641-5, VAT number 3801071256), with its registered address at Başakşehir, Istanbul, Türkiye.
We are the data controller for the personal data described in this policy. That means we decide what data is collected and why.
Email: eslemsgroup@gmail.com
Phone: +90 505 222 68 16
What we collect
When you place an order: your name, delivery and billing address, email address, phone number, the items you bought, and your order history.
When you pay: your payment is handled by our payment provider. We receive confirmation that payment succeeded and the last four digits and card type. We never see or store your full card number.
When you create an account: your email address, password (stored encrypted) and saved addresses.
When you sign up for marketing: your email address, and your phone number if you opt in to SMS.
When you leave a review: your name or the name you choose to display, your rating and your review text.
When you contact us: whatever you include in your message, and our reply.
When you browse the site: your IP address, device and browser type, the pages you view, what you add to your basket, and how you arrived at the site. This comes from cookies and similar technologies.
We do not collect special category data — nothing about your health, ethnicity, beliefs, biometrics or sexuality — and we do not knowingly collect data about children.
Why we use it, and our lawful basis
To fulfil your order — process payment, arrange delivery, send order confirmations and dispatch notices, and handle returns and refunds. Lawful basis: performance of our contract with you.
To keep accounting and tax records — we must retain records of sales. Lawful basis: legal obligation.
To send marketing emails and SMS — only if you have asked us to. You can unsubscribe from any message, or email us. Lawful basis: your consent.
To answer your questions and provide support. Lawful basis: performance of our contract, or our legitimate interest in running a business people can talk to.
To prevent fraud and keep the site secure. Lawful basis: our legitimate interest in protecting the store and our customers.
To understand how the site is used and improve it. Lawful basis: your consent, given through cookie preferences.
To invite you to review a product you bought. Lawful basis: our legitimate interest in collecting genuine customer feedback. You can decline.
Who we share it with
We do not sell your personal data. We share it only with the following, and only for the purposes above.
Shopify — the platform this store runs on. Shopify hosts the site and stores order and customer data on our behalf.
Our payment provider — they process your payment and carry out their own fraud checks. They act as a controller of that payment data in their own right.
AutoDS and our fulfilment suppliers — we use AutoDS to route orders to the suppliers who pack and ship them. This means your name, delivery address and phone number are passed to the supplier handling your order, and to the carrier delivering it, so that your parcel can reach you.
Klaviyo — email and SMS marketing, if you have subscribed.
Judge.me — product reviews. If you leave a review, the display name and content you submit are published on our product pages.
Matrixify — a data tool we use to import and export catalogue and order records.
Professional advisers and authorities — our accountants, and any regulator, court or law enforcement body where we are legally required to disclose.
Each of these providers is bound by contract to use your data only on our instructions, except where they act as a controller in their own right, as noted above.
Where your data is processed
Our team accesses and administers your data from Türkiye, which is outside the United Kingdom. Some of our providers also process data outside the UK.
Türkiye is not covered by UK adequacy regulations, which means the UK has not formally determined that its data protection law offers equivalent protection. Where your data is transferred to us or to a provider outside the UK, we rely on the safeguards permitted under Chapter V of the UK GDPR. You can ask us for details of the safeguards that apply to your data by emailing eslemsgroup@gmail.com.
How long we keep it
Order and transaction records: six years from the end of the relevant financial year, as required for tax purposes.
Account details: for as long as your account is open. Ask us and we will close and delete it.
Marketing subscriptions: until you unsubscribe, and we keep a record of the unsubscribe so we do not contact you again by mistake.
Support correspondence: two years from the last message.
Reviews: published until you ask us to remove yours.
Website analytics: in line with the retention settings of the tools we use, typically no more than 14 months.
Your rights
Under UK data protection law you have the right to:
- Be told what data we hold about you and why
- Access a copy of it
- Have it corrected if it is wrong or incomplete
- Have it erased, where we have no continuing reason to keep it
- Restrict how we use it while a query is resolved
- Object to processing we carry out on the basis of legitimate interests, and to direct marketing at any time and without giving a reason
- Portability — receive the data you gave us in a machine-readable format, or ask us to send it to another provider
- Withdraw consent at any time, where we relied on it
To exercise any of these, email eslemsgroup@gmail.com. We will respond within one month. There is no charge. We may need to confirm your identity before acting, to make sure we are not disclosing your data to somebody else.
Cookies
We use cookies that are necessary for the site to work — keeping items in your basket, keeping you signed in, and securing checkout. These cannot be switched off.
We also use analytics and marketing cookies, which we set only with your consent. You can change your choice at any time through the cookie banner or your browser settings. Blocking non-essential cookies does not stop you shopping with us.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first — email eslemsgroup@gmail.com and we will look into it.
You also have the right to complain to the UK's data protection regulator at any time:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk
You may contact the ICO whether or not you have raised the matter with us first.
Changes to this policy
We update this policy when our practices change or when the law requires it. The date at the top shows when it was last revised. If a change materially affects how we use your data, we will tell you by email before it takes effect.
Contact
Any question about this policy or your personal data: eslemsgroup@gmail.com