Privacy

Who we are

TUTA is a European lifestyle boutique operated by Sabina Malikova, based in Ankara, Türkiye. This privacy notice covers personal data we process through tuta.dripfy.app. Full contact and business registration details are on the Imprint page.

What we collect

• Order data: name, shipping address, email, phone, and order contents — collected at checkout to fulfil your purchase.
• Newsletter data: email and preferred locale, if you subscribe to our updates.
• Site usage: anonymised analytics (pages visited, device type) only if you accept analytics cookies.
• WhatsApp messages: when you message our concierge, the conversation is stored so we can respond and improve the experience.

Why we use it

Strictly to fulfil your orders, send the updates you've asked for, and improve TUTA. We don't sell or share personal data with third parties for marketing.

Your rights

Under GDPR and Turkish KVKK, you have the right to access, correct, export, or delete your personal data. Write to info@dripfy.app and we'll respond within 30 days.

Data partners

• PayPal (Luxembourg) — payment processing
• IONOS (Germany) — mailbox hosting and SMTP for transactional and marketing email
• Meta — WhatsApp Business (Ireland) — concierge messaging, only when you start the conversation
• Vercel (USA; EU regions for compute and Blob storage) — site hosting and static file storage
• Google (Ireland) — Analytics 4 with IP anonymisation (cookie-gated) and Search Console

All partners are bound by GDPR-compliant data processing agreements. International transfers (e.g., Vercel's US infrastructure) rely on the EU's standard contractual clauses or applicable adequacy decisions.

Retention

Order records are kept for seven years to meet tax requirements. Newsletter data is kept until you unsubscribe. WhatsApp conversations are pruned to the last 40 messages.