Privacy Policy

DİMARE DESIGN TASARIM TİCARET LİMİTED ŞİRKETİ, trading as Dimare Design, is responsible for the personal data it processes for this website and its direct business relationships. Our registered address and contact details appear below.

This notice covers enquiries, accounts, orders, professional contacts and website use. Turkish Law No. 6698 (KVKK) applies to our processing; GDPR or other mandatory local protections apply where their legal scope covers the activity. This notice is information about processing, not a request for blanket consent.

Enquiries and projects: name, business, email, telephone where supplied, location, project brief, selected products, quantities, timing and correspondence. We receive these through forms, email, WhatsApp and direct discussions to respond, prepare proposals and manage the project. Form source and limited campaign codes may accompany a submitted enquiry.

Accounts and transactions: account identity, contact details, a password hash, sign-in records, approved specifications, billing and shipping information, invoices and payment references as needed. These support access, order fulfilment, accounting, export documents and aftercare. Please do not send full card details or passwords in a message; online checkout is currently unavailable.

Professional contacts: business contact details may also come from company websites, professional profiles, referrals, events or an existing relationship, for relevant business research and communication. Public availability does not itself mean consent to marketing or inclusion in an advertising audience.

Technical information: hosting and security services process request, network and device information to deliver and protect the site. Optional measurement can process public-page activity, campaign attribution and events such as contact-link clicks, catalogue downloads and enquiry outcomes. Providers may receive network or device identifiers.

For enquiries, accounts and orders, processing may be necessary to establish or perform a contract. Invoicing, commercial records and customs obligations rely on applicable legal requirements. Security, proportionate business administration and relevant professional-contact research may rely on legitimate interests where these do not override the individual’s fundamental rights. Records may also be needed to establish, exercise or protect a legal right.

These grounds correspond to the relevant conditions in KVKK Article 5; where GDPR applies, the applicable Article 6 ground is assessed for the activity. Optional analytics and advertising measurement use consent. Marketing communications that require permission use a separate permission basis; sending an enquiry does not subscribe you to every marketing activity.

Essential sign-in, security, saved selections, currency preferences and privacy choices support the site. Hosting, externally delivered images and fonts may create network requests before optional measurement is accepted.

Optional Google Tag Manager / Google Ads measurement, Meta Pixel, Vercel Web Analytics and Vercel Speed Insights are enabled only after optional measurement is accepted on eligible public pages. Private account, payment and project-document pages are excluded from the site’s optional measurement components. Our custom event payloads omit names, email addresses, phone numbers and message text.

Use Cookie choices, available at the bottom of the page, to accept, reject or withdraw optional measurement. Rejection does not prevent an enquiry or account access. Withdrawal stops future optional collection and may reload the page; it does not erase data already received by a provider.

Consent-based campaign storage lasts for the current tab session. Separately, a campaign code already present in a link may accompany an enquiry that you submit as part of its source record. Avoid including personal or confidential information in URL campaign parameters.

We do not sell personal data. Information is shared as needed for the relevant service. Providers can have their own responsibilities and privacy terms; not every recipient acts solely as our processor.

• Supabase: enquiry, account and operational record storage.
• Formspree: form delivery, alongside our enquiry-recording route.
• Telegram: internal enquiry notifications, where configured, which can include contact details and a brief excerpt.
• Resend and business email services: transactional correspondence, proformas and related attachments or document links.
• Vercel: hosting and delivery; optional analytics and performance tools when accepted. Sanity: website content and image delivery. Google Fonts: font delivery.
• Google and Meta: optional advertising measurement. WhatsApp processes correspondence when you choose that channel.
• Order recipients: banks or an agreed payment provider, carriers, customs representatives, professional advisers and authorised public bodies, to the extent needed for the order or a legal duty.

Following a social or marketplace link takes you to that service’s environment. Its own notice applies to its independent processing.

Cloud, communications and measurement services may process information outside Türkiye, including in the United States or Europe. The locations and transfer arrangements depend on the provider, service and configuration; this notice does not promise that all data remains in a single country.

Cross-border processing is subject to KVKK Article 9 and, where applicable, GDPR Chapter V or other relevant rules. You may contact us for the recipient, location and safeguard information applicable to your data. Accepting optional cookies is not treated as blanket permission for every international transfer.

Enquiry, account, order and correspondence records are kept according to their purpose, the relationship, legal retention requirements and legitimate dispute or security needs. We do not promise a single automatic deletion period for every business record. Contact us to ask about the records relevant to you.

In this browser, the privacy preference is valid for up to 180 days; sign-in sessions can last up to 30 days. Consent-based campaign storage lasts for the tab session. Saved selections and currency preferences may remain until you change or clear them. Clearing browser storage does not delete records already held by us or a service provider.

Provider-side measurement retention depends on the service and account settings. A deletion request is considered against the purpose, applicable retention duties and provider responsibilities.

Under KVKK Article 11, you may ask whether your data is processed, obtain information about its processing and recipients, request correction or deletion where the conditions are met, request notification of relevant changes to recipients, object to a detrimental result based solely on automated analysis, and seek compensation for unlawful processing.

Where GDPR applies, additional or corresponding rights can include access, erasure, restriction, portability and objection, subject to their conditions. You can withdraw consent where processing relies on it. We do not make solely automated decisions producing legal or similarly significant effects through the website’s measurement tools.

Write to hello@dimare.design with enough detail to locate your records. We may verify identity proportionately. KVKK requests are answered as soon as possible and within 30 days; GDPR requests follow its one-month rule and permitted extension requirements. You retain the right to complain to the competent data-protection authority.

We use access controls, protected connections and other measures appropriate to the service. Please avoid including unnecessary sensitive information in an enquiry. If you believe information has reached us in error, including information about a child, contact us.

We update this notice when our practices change. The date above identifies this version. A revised notice or continued website use does not substitute for consent where consent is required.