Privacy Policy

Last updated: [DATE]

This Privacy Policy describes how [LEGAL BUSINESS NAME], doing business as Durmus Ink Co. (“Company,” “we,” “us,” or “our”), collects, uses, and shares information in connection with our website and custom apparel services. This is a draft. Replace bracketed placeholders and have qualified counsel review it before launch. It is not legal advice.

1. Who we are

Controller: [LEGAL BUSINESS NAME], [BUSINESS ADDRESS], [STATE/COUNTRY].
Contact: [PRIVACY CONTACT EMAIL] / [BUSINESS PHONE].

2. Information we collect

We collect information you submit and information created when you use the site, including:

• Identity and contact data: name, work email, phone number, company name.
• Order and support data: quote details, order items and status, messages you send to support.
• Account data: login email, profile fields you save, and authentication identifiers from our provider.
• Technical data: approximate device/browser information and essential cookie data needed to operate the site.

We do not require an account for quote, contact, or newsletter forms. Those submissions are stored as leads so we can follow up.

3. How we use information

We use information to:

• Respond to quote requests, contact forms, and newsletter signups.
• Create and administer customer accounts.
• Fulfill, track, and support orders.
• Operate, secure, and improve the website.
• Comply with law and enforce our terms.

We do not sell personal information.

4. Legal bases (if applicable)

If [GDPR / OTHER PRIVACY LAW] applies, we process data where necessary to perform a contract, to pursue legitimate interests in operating a B2B apparel business, with consent (for example, optional newsletter signup), or to comply with legal obligations. Identify the bases that actually apply with counsel.

5. How we share information

We share information with service providers that help us run the business, which currently include:

• Firebase / Google Cloud for authentication, database, file storage, and hosting ([FIREBASE PROJECT / REGION]).
• Carriers, blank-goods suppliers, and decoration partners as needed to produce and ship an order.
• Professional advisors (legal, accounting) and authorities when required by law.

We require processors to use information only on our instructions where required by applicable law.

6. Retention

Leads, accounts, orders, and support tickets are retained for as long as needed to provide services, maintain business records, and meet legal/accounting requirements, then deleted or anonymized according to our retention schedule: [RETENTION PERIODS].

7. Security

We use industry-standard technical and organizational measures, including access-controlled databases and hashed passwords handled by Firebase Authentication. No method of transmission or storage is completely secure.

8. Your rights

Depending on [STATE/COUNTRY] law, you may have rights to access, correct, delete, or export your information, or to object to or restrict certain processing. To make a request, email [PRIVACY CONTACT EMAIL]. We may need to verify your identity. You may also have the right to lodge a complaint with a supervisory authority.

If you are in a U.S. state with a consumer privacy statute, additional disclosures may be required: [CCPA / STATE ADDENDUM — TO BE COMPLETED].

9. Children

The site is intended for business users and is not directed to children under 16 (or 13, as applicable). We do not knowingly collect personal information from children.

10. International transfers

If you access the site from outside [STATE/COUNTRY], your information may be processed in [PROCESSING LOCATIONS, e.g., United States] where our providers operate. Additional transfer safeguards may be required: [TRANSFER MECHANISM].

11. Changes

We may update this Policy by posting a new version on this page and revising the “Last updated” date. Material changes will be highlighted as required by law.

12. Contact

Privacy questions and requests: [PRIVACY CONTACT EMAIL].