GLOBAL PRIVACY POLICY
INTRODUCTION
As CEMRE KATI/SOUR GLOBAL TEKSTİL (hereinafter referred to as "Sour Mélange"), we place great importance on the protection of the personal data of users visiting our website https://sourmelange.com/ (the "Website"). This Privacy Policy outlines how we process and protect personal data in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA & CPRA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Brazil’s General Data Protection Law (LGPD), China’s Personal Information Protection Law (PIPL), and other applicable global data protection laws, including:
Australia: Australian Privacy Act 1988
South Korea: Personal Information Protection Act (PIPA)
Singapore: Personal Data Protection Act (PDPA)
This policy applies to all Sour Mélange websites, mobile applications, and digital platforms worldwide.
WHAT PERSONAL DATA DO WE COLLECT?
We collect personal data in the following ways:
Cookie Type | Description | Example Usage |
Essential (Functional) Cookies | Ensure the core functionality of our website. | Managing user sessions, implementing security measures, remembering shopping cart contents. |
Functionality and Preference Cookies | Remember user preferences to provide a personalized experience. | Remembering language preferences, saving login details. |
Performance and Analytics Cookies | Analyze how our website is used and help us make improvements. | Tracking visitor statistics with tools such as Google Analytics, Hotjar, Mixpanel. |
Advertising and Targeting Cookies | Used to show ads relevant to your interests. | Providing personalized ads via Google Ads, Meta (Facebook), and other advertising platforms. |
Social Media Cookies | Enable interaction with social media accounts. | Logging in or sharing content via Facebook, Instagram, LinkedIn, etc. |
PURPOSES OF DATA PROCESSING
We process personal data for the following purposes:
To process and fulfill orders
To provide customer support
To send marketing communications (with your consent)
To analyze and improve our website and services
To ensure fraud prevention and security
To comply with legal and tax regulations
Legal Basis for Processing:
Contractual necessity (e.g., fulfilling an order)
Legal compliance (e.g., tax reporting)
Legitimate business interests (e.g., fraud prevention)
User consent (e.g., marketing preferences)
DATA SHARING & INTERNATIONAL TRANSFERS
We may share your personal data with:
Third-party service providers (payment processors, logistics, marketing platforms including Google, Meta, Stripe, Shopify)
Legal authorities (when required by law)
Affiliated companies (for customer support and business operations)
Since we operate globally, your data may be stored and processed in the European Union (EU), the United States, Canada, the United Kingdom, Brazil, China, and other regions. We ensure compliance with GDPR’s Standard Contractual Clauses (SCCs) and other international data transfer frameworks.
USER RIGHTS & CHOICES
Depending on your location, you have specific rights regarding your personal data:
GDPR (EU & UK):
Right to access, rectify, or delete your data
Right to restrict or object to processing
Right to data portability
CCPA & CPRA (California, USA):
Right to request data disclosure
Right to opt out of the sale of personal data
Right to request data deletion
PIPEDA (Canada):
Right to access and correct personal information
Right to withdraw consent
LGPD (Brazil) & PIPL (China):
Right to request anonymization
Right to request deletion of personal data
To exercise your rights, contact us:
Email: [email protected]
Mailing Address: Bahçeşehir 1. Kısım mahallesi Asmalı caddesi No:6/26 34488 İSTANBUL TÜRKİYE
DATA RETENTION POLICY
We retain personal data only as long as necessary for:
Legal compliance (e.g., tax reporting for up to 7 years)
Order fulfillment and customer support (typically 2-5 years)
Security and fraud prevention (up to 10 years, depending on legal requirements)
Once data is no longer required, we securely delete, anonymize, or archive it.
CHANGES TO THIS PRIVACY POLICY
This policy is reviewed and updated at least annually. Any significant changes will be notified via email or website announcements.
Last Updated: 14.02.2025
LEGAL JURISDICTION & DISPUTE RESOLUTION
This policy is governed by the laws of Turkey, and any disputes shall be subject to the jurisdiction of Istanbul courts. However, for users located outside Turkey:
EU Users: Subject to the jurisdiction of the European Data Protection Board
US Users: Subject to arbitration agreements as per US privacy laws
DATA PROTECTION OFFICER (DPO) & CONTACT
As per GDPR requirements, a Data Protection Officer (DPO) has been appointed for data protection inquiries. To contact our DPO:
Email: [email protected]