Legal

Privacy Policy

How we collect, use, and protect your personal information.

On this page

This website is operated by WPPDECOR LLC (16192 Coastal Hwy, Lewes, DE 19958, USA). Orders placed within Türkiye are fulfilled by MAREWALL DEKORASYON DİJİTAL BASKI REKLAM SAN. VE TİC. LTD. ŞTİ. This Privacy Policy explains what personal data we collect, why, how long we keep it, who we share it with, and the rights you have. Your applicable rights depend on your location — see the region-specific sections below.

Data We Collect

  • Order & account data: name, billing and shipping address, email, phone, and order history.
  • Payment data: processed by our payment provider, Stripe. We do not store full card numbers on our servers.
  • Technical data: IP address, approximate location (used to determine your region, currency and language), device and browser information, and pages visited.
  • Consent data: your cookie choices, stored locally in your browser (mw-cookie-consent).

Why We Use It

To fulfil and ship your order; process payments and issue invoices; provide customer support; prevent fraud and keep the site secure; and — only with your consent — run analytics and advertising to improve the site and measure campaigns.

Who We Share It With

  • Payment: Stripe.
  • Shipping: FedEx, on a Delivered Duty Paid (DDP) basis.
  • Shipping label preview: Labelary (USA), which converts our shipping labels — containing the recipient's name and delivery address — into PDF/PNG so our staff can view them.
  • Email: Resend, for transactional emails.
  • Analytics (consent-based): Google Analytics 4, Microsoft Clarity.
  • Advertising (consent-based): advertising and retargeting partners such as Meta (Facebook/Instagram) Pixel and Google Ads, where enabled, to measure and personalise advertising.
  • Infrastructure & security: Cloudflare, DigitalOcean; error monitoring via Sentry.

We do not sell your personal data for money. See the California section below for the CPRA-specific meaning of "sell" and "share".

International Data Transfers

Some providers (Google, Microsoft, Meta, Stripe, Cloudflare, Sentry, Labelary) process data on servers located outside your country, including in the United States. Where data is transferred out of the EEA or the UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

Data Retention

We keep order and invoice data for the period required by tax and commercial law (up to 10 years under Turkish commercial/tax rules where MAREWALL DEKORASYON DİJİTAL BASKI REKLAM SAN. VE TİC. LTD. ŞTİ. is the seller). Other personal data is kept only as long as necessary and is then deleted or anonymised by a weekly automated process:

  • Security and activity logs: IP addresses, browser/device details, names and other personal details in our logs are anonymised after 365 days.
  • Orders that were never paid: the name, email address, phone number, address and IP address linked to the order are anonymised after 180 days. Paid orders are kept as described above.
  • Email content: the body of the emails we send is deleted after 90 days; the delivery record (recipient, subject, date) is kept.
  • Newsletter sign-ups that are never confirmed (double opt-in) are deleted after 30 days.
  • Welcome coupons that are never used: the email address linked to the coupon is anonymised 180 days after it was issued, once the coupon has expired.
  • Site search: search terms are stored with email addresses and long numbers (such as phone numbers) removed, and are deleted after 90 days without a repeat search.
  • Saved addresses: an address you delete from your account is erased; an address used for an order is kept with that order's records.
  • Support messages: spam is deleted after 30 days; conversations linked to an order are deleted 10 years after the last message, and other conversations after 2 years.

Analytics and advertising data are retained according to each provider's settings. Your consent record stays on your device until you clear it.

Security

We use TLS encryption, access controls, and reputable processors. No method of transmission is completely secure, but we apply commercially reasonable safeguards.

EEA / UK Users (GDPR & UK GDPR)

Our legal bases under Article 6 GDPR are: performance of a contract (order fulfilment); legal obligation (tax and invoicing); legitimate interests (security and fraud prevention); and consent (analytics and advertising cookies).

You have the right to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. You may lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office, ICO). To exercise any right, contact hello@marewall.com.

California Residents (CCPA / CPRA)

In the past 12 months we collect the categories above (identifiers, commercial information, internet activity, and geolocation). Using analytics and advertising tools that set third-party identifiers may qualify as "sharing" under the CPRA.

You have the right to know, delete, and correct your personal information, to opt out of the "sale" or "sharing" of personal information, and to limit the use of sensitive personal information — without discrimination. To exercise these rights, use the "Do Not Sell or Share My Personal Information" link in the footer, or email hello@marewall.com.

Türkiye Kullanıcıları (KVKK)

Veri sorumlusu: MAREWALL DEKORASYON DİJİTAL BASKI REKLAM SAN. VE TİC. LTD. ŞTİ. (Davutpaşa V.D. 6121441925). Kişisel verileriniz 6698 sayılı KVKK kapsamında işlenir; KVKK m.11 haklarınızı kullanmak için hello@marewall.com adresine başvurabilirsiniz. Ayrıntı için Türkçe Gizlilik Politikası'na bakınız.

Contact

hello@marewall.com.