Privacy & cookie policy.

This Privacy & Cookie Policy explains how L'EAUPHANT collects, processes, stores, transfers, and protects your personal data when you visit leauphant.com, and outlines the role and function of cookies used on this website.

The policy is prepared in accordance with applicable international data protection regulations, including but not limited to:

• The EU General Data Protection Regulation (GDPR);
• The UK Data Protection Act 2018;
• The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA);
• The Turkish Personal Data Protection Law (KVKK, Law No. 6698);
• Comparable data protection frameworks in the Gulf Cooperation Council, Asia-Pacific, and other jurisdictions where leauphant.com is accessible.

L'EAUPHANT conducts all data processing activities in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and security.

L'EAUPHANT collects only the data necessary for the purposes stated in this policy and does not collect, store, or share data for any undisclosed purpose.

Legal Entity: Leauphant Tekstil Mobilya Ayakkabı Sanayi Ticaret Limited Şirketi ("L'EAUPHANT" or the "Company").

Registered address: Maslak Mah., AOS 55. Sokak, 42 Maslak B Blok No: 4/542, Sarıyer / Istanbul, Türkiye.

Contact: customercare@leauphant.com.

L'EAUPHANT acts as the Data Controller responsible for the processing of personal data collected through leauphant.com.

When you interact with leauphant.com, the following categories of personal data may be processed:

Identity & contact data

Name, surname, address, telephone number, and email address. Used for order fulfillment, billing, delivery coordination, and customer support.

Customer transaction data

Order history, return records, cart information, invoice and billing data. Used to manage customer experience, accounting obligations, and after-sales services.

Transaction security data

IP address, device identifiers, session logs, browser information, and traffic records. Used for fraud prevention, cybersecurity monitoring, and compliance obligations.

Marketing data (consent-based)

Browsing behaviour, purchase preferences, wish lists, campaign interactions, and voluntary profile information. Processed only with explicit consent to provide personalised communications and recommendations.

Personal data is processed on the basis of one or more of the following lawful grounds: contractual necessity, legal obligation, legitimate interest, and explicit consent where required.

Order fulfillment & customer service

Identity, contact, and transaction data are processed for formation and execution of distance sales agreements; order preparation, shipment, and delivery; invoice issuance and accounting compliance; account verification and login services; and after-sales support.

Legal basis: contractual necessity and legal obligation.

Marketing & customer experience

Marketing data is processed for personalised product recommendations, segmentation and analytical studies, loyalty initiatives, and campaign communications.

Legal basis: explicit consent.

Transaction security & legal compliance

Security data is processed for cybersecurity and fraud prevention, compliance with statutory retention and audit requirements, and responding to lawful requests from competent authorities.

Legal basis: legitimate interest and legal obligation.

L'EAUPHANT uses cookies, pixel tags, and similar technologies to enable website functionality, security, and analytics. Cookies are small data files placed on your device through your browser. They do not contain harmful software and do not damage your device.

Cookie categories

Strictly necessary / technical cookies are essential for the operation and security of the website and cannot be disabled. Functionality cookies remember language, currency, and user preferences. Performance & analytics cookies (consent required) anonymously measure site traffic and detect performance issues. Targeting & advertising cookies (consent required) are used to deliver relevant advertisements and measure campaign effectiveness.

Examples of cookies used

• _session_id — session management; retained for session duration;
• cart — stores product selections; retained up to two weeks;
• secure_customer_sig — login authentication; retained up to one year;
• checkout_token — secures payment sessions;
• _shopify_m — device risk assessment for fraud prevention;
• _shopify_country — displays correct currency and tax rules;
• _orig_referrer — tracks referral source for campaign accuracy;
• _ga, _gid — Google Analytics, consent-based.

Cookie retention

Session cookies are deleted when the browser closes. Persistent cookies are retained until their defined expiration date. Strictly necessary cookies are retained as required for core site functions.

Managing cookies

You may manage, delete, or block cookies through your browser settings or via the cookie banner displayed upon your first visit. Disabling essential cookies may result in inability to access your cart, checkout disruptions, or login issues.

Personal data may be shared, strictly where necessary, with:

Service fulfillment partners

Logistics and courier companies such as FedEx; banking institutions and payment processors; customer service and technical support providers.

Technological infrastructure

L'EAUPHANT operates on Shopify Inc.'s global e-commerce infrastructure. As a result, certain data may be processed or stored on secure international servers, including in the United States and other jurisdictions, under appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent legal mechanisms recognised under applicable data protection law.

Legal obligations

Personal data may be disclosed to courts and judicial authorities, consumer protection boards and regulatory agencies, and competent public institutions where legally required.

No sale of personal data

L'EAUPHANT does not sell personal data. Certain trusted advertising and analytics partners may process limited data solely for measurement and optimisation purposes, always under contractual safeguards.

All data transmissions are protected through industry-standard TLS/SSL encryption.

Payment processing is conducted through Shopify Payments, a PCI-DSS Level 1 compliant payment infrastructure. Card details are encrypted and processed exclusively by certified payment providers and are never stored or accessible by L'EAUPHANT.

L'EAUPHANT applies appropriate technical and organisational measures to safeguard personal data against unauthorised access, accidental loss, alteration, or disclosure.

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

Specific retention periods are as follows:

• Account data: five (5) years following the last account activity;
• Order and invoice records: ten (10) years, for accounting and tax compliance;
• Marketing data: until consent is withdrawn, or three (3) years following the last interaction;
• Transaction security logs: two (2) years;
• Cookies: as specified in Cookies & Tracking.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

L'EAUPHANT's transactional services, including the placement of orders, are intended for users aged eighteen (18) and above. Children's clothing offered on leauphant.com is sold to adult purchasers; orders involving children's products are placed and consented to by adults.

Browsing of leauphant.com is permitted for users aged thirteen (13) and above under parental supervision. No transactional account may be created by a user under 18 without parental authorisation.

L'EAUPHANT does not knowingly collect personal data from individuals under 18. Should we become aware that personal data has been inadvertently collected from a minor, such data will be promptly deleted.

L'EAUPHANT does not engage in automated decision-making that produces legal or similarly significant effects concerning individuals.

Where profiling is conducted for marketing purposes — including segmentation, personalised recommendations, or campaign targeting — it is carried out only with the user's explicit consent. Users may withdraw this consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

With your explicit consent, obtained during account creation or newsletter subscription, your contact details may be used to inform you of new collections, seasonal releases, editorial content, and invitations.

You may withdraw your consent at any time via the unsubscribe link included in every marketing communication, through your account preferences, or by emailing customercare@leauphant.com.

Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal. Following withdrawal, you may continue to receive transactional communications related to your orders.

Subject to applicable data protection legislation, you have the following rights in respect of your personal data:

• Access — to obtain a copy of personal data we hold about you;
• Rectification — to request correction of inaccurate or incomplete data;
• Erasure — to request deletion where legally permissible;
• Restriction — to limit how your data is processed;
• Objection — to object to certain processing activities, including direct marketing;
• Portability — to receive your data in a structured, commonly used format;
• Withdrawal of consent — at any time, for processing based on consent;
• Lodging a complaint — with your local data protection supervisory authority.

Requests may be submitted to customercare@leauphant.com or in writing to the registered address. Responses are provided within the timeframes mandated by applicable law (typically within one month under GDPR).

Leauphant.com may contain links to third-party websites and platforms. These websites operate under their own privacy policies and terms.

L'EAUPHANT is not responsible for the privacy practices of third-party platforms and recommends that users review the applicable privacy notices of any external website they visit.

Updates

L'EAUPHANT reserves the right to amend this Privacy & Cookie Policy in response to legal, regulatory, or technological developments. Material changes will be communicated by email to registered customers or by prominent notice on the website. The most current version of this policy is always available in the Legal section of leauphant.com.

Contact

For any questions, requests, or concerns regarding this policy or the processing of your personal data, please contact L'EAUPHANT at customercare@leauphant.com or by written notice to the registered address in Data Controller.