Privacy policy

This Privacy Policy explains what personal data FurBuddy collects when you visit or buy from furbuddy.sbs, why we collect it, who we share it with, and what rights you have. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Who we are

The controller of your personal data is:

Remzi Kaan Çağlar
Ölüdeniz Mahallesi, 210 Sokak No: 5
48300 Fethiye / Muğla, Türkiye
Email: info@norogr.com

We trade as FurBuddy at furbuddy.sbs.

2. What we collect

Information you give us

Name, email address, shipping and billing address, phone number
Order contents and order history
Messages you send us through the contact form or by email
Your email address if you subscribe to our newsletter
Account details if you create an account (email address and login information)

We do not receive or store your full card number. Payments are processed directly by our payment providers.

Information collected automatically

Device information: browser, operating system, screen size, IP address
Usage information: pages viewed, referring site, time on site
Cookies and similar technologies (see section 6)

3. Why we use it, and our legal basis

To fulfil your order — process payment, ship your parcel, send order and delivery emails, handle returns. Legal basis: performance of a contract.
To provide customer support — answer your questions and resolve problems. Legal basis: performance of a contract and our legitimate interest in supporting customers.
To send marketing emails — only if you subscribed. Legal basis: your consent. You can withdraw it at any time via the unsubscribe link in every email.
To keep the store secure and prevent fraud — screening orders for fraud risk. Legal basis: our legitimate interest and our legal obligations.
To understand and improve the store — anonymous and aggregated analytics. Legal basis: your consent for non-essential cookies, otherwise our legitimate interest.
To meet legal obligations — tax, accounting and consumer-law record keeping. Legal basis: legal obligation.

4. Who we share it with

We never sell your personal data. We share it only with service providers who need it to run the store:

Shopify Inc. — the e-commerce platform that hosts this store and processes orders. Shopify's own privacy policy: shopify.com/legal/privacy
Payment providers — to take payment securely. They receive the data needed for the transaction.
Our fulfilment partner and shipping carriers — your name, address and phone number, so your parcel can be produced, dispatched and delivered.
Email service providers — to send order notifications and, if you subscribed, newsletters.
Analytics providers — where you have accepted analytics cookies.

We may also disclose data where we are legally required to, or to protect our rights.

5. International transfers

Some of our providers are located outside the European Economic Area, including in the United States and, for order fulfilment, in China. Where data leaves the EEA or the UK, the transfer is protected by an approved safeguard — normally the European Commission's Standard Contractual Clauses, or the provider's own adequacy certification. You can ask us for details at info@norogr.com.

6. Cookies

We use cookies to keep your shopping bag working, remember your preferences, and understand how the store is used.

Strictly necessary cookies — required for the cart, checkout and security. These cannot be switched off.
Analytics cookies — help us see which pages are useful. Used only with your consent.
Marketing cookies — used only with your consent.

You can change or withdraw your cookie choices at any time through the cookie banner, or by clearing cookies in your browser settings. Blocking strictly necessary cookies will stop checkout from working.

7. How long we keep it

Order and invoice records — kept for as long as required by tax and accounting law (typically up to 10 years).
Customer account data — kept until you ask us to delete your account.
Newsletter subscriptions — kept until you unsubscribe.
Support emails — normally kept for up to 3 years.
Analytics data — normally kept for up to 14 months.

8. Your rights

If you are in the EU or the UK, you have the right to:

Access the personal data we hold about you
Have inaccurate data corrected
Have your data deleted ("right to be forgotten")
Restrict or object to how we use your data
Receive your data in a portable format
Withdraw consent at any time, without affecting processing that already took place
Complain to your national data protection authority

To exercise any of these rights, email info@norogr.com. We reply within 30 days. We may ask you to confirm your identity first, so that we do not hand your data to someone else.

9. Children

This store is not intended for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, contact us and we will delete it.

10. Security

The store runs over HTTPS and payment data is handled by PCI-DSS compliant providers. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.