Who is responsible
Yildiz Kapak Ltd is responsible for your personal information (the “controller”). We are registered in England and Wales, with our registered office at Flat 15 Aneurin Bevan Court, 55 Coles Green Road, London NW2 6EE, United Kingdom. Our factory and showrooms are in Iraq.
For anything about your information, write to info@yildizkapak.com.
The website
You can use the website without giving us any personal information. It has no forms, no accounts, no advertising and no tracking or analytics tools, and it sets no cookies.
Like every website, our servers record technical details of each visit: the IP address, the time, the page asked for and the browser type. We use them only to keep the website secure and running, and normally delete them within 90 days.
Your browser remembers your theme choice (light or dark). It stays on your device and is never sent to us.
When you call us, send a WhatsApp message, email us or open a map from the website, you leave it. What you send us is handled as described under “When you contact us”; the policies of those services apply to them.
When you contact us
If you call, message or email us, we receive your name, your number or address and what you tell us. We use it to answer you and, if you order, to handle your order.
The customer app
The app is for customers we have invited. To provide it, we use:
- Your account: your name, your phone number and the customer account we hold for you, set up from the invitation our sales team gives you.
- Your orders, invoices, payments and account statement, from our accounting and production records.
- Messages, photos and requests you send to our staff in the app, and the answers you give in our feedback forms.
- Your device: its type, system and app version, its language, and a notification token so that we can send you notifications.
- Sign-in records and technical logs that keep your account secure.
The app uses the camera only when you scan an invitation code or take a photo to send, and your photos only when you pick them. It does not use your location, your microphone or your contacts.
Why we use it
- To run the app and handle your orders, deliveries, invoices and account (to carry out our contract with you).
- To answer your questions and look after you as a customer (our legitimate interest in serving our customers well).
- To send you notifications about your orders and account. You can turn them off in your phone’s settings.
- To keep our systems secure and prevent misuse (our legitimate interest).
- To keep accounting and tax records and meet our other legal duties (legal obligation).
We do not sell your information, use it for advertising, or make automated decisions about you that have legal effects.
Who we share it with
Only the staff who need your information can see it. We also use service providers who handle it for us, on our instructions:
- server and network hosting: our own servers in Iraq, and a relay server in Germany (Amazon Web Services) that carries traffic to them;
- email delivery (SMTP2GO);
- delivering the app’s notifications (Expo, Apple and Google);
- an AI assistant service that our staff may use to summarise customer records and answer questions (Anthropic).
We may also disclose information when the law requires it, or to protect our rights, for example to a court or a public authority.
International transfers
Your information is kept on our servers in Iraq, and some of our service providers work in other countries, including the United States and the European Union. When information about people in the United Kingdom goes outside the UK, we rely on the safeguards UK data protection law provides, such as approved contract terms.
How long we keep it
- Server logs: normally up to 90 days.
- Your account, messages and photos: while you are our customer, and for a reasonable time afterwards to answer questions about past orders.
- Orders, invoices and payments: as long as accounting and tax law requires, even after your account is closed.
Your rights
Depending on the law that applies to you, you can ask us to show you the information we hold about you and give you a copy, correct it, delete it, limit or object to how we use it, and give it to you in a portable format. Where we rely on your consent, you can withdraw it at any time.
Send your request to info@yildizkapak.com. We may ask you to confirm who you are, and we answer within one month.
If you are in the United Kingdom and are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office (ico.org.uk). Please contact us first so that we can try to help.
Deleting your app account
To delete your customer app account, email info@yildizkapak.com or call customer service on +964 773 188 8876 from the number on your account, or ask your sales representative. We close the account within 30 days and delete the personal information we no longer need. Orders, invoices and payment records are kept for as long as the law requires.
Children
The website and the app are meant for adults and businesses. We do not knowingly collect information about children under 16.
Security
We protect your information with encrypted connections (HTTPS), by limiting access to the staff who need it, and with regular backups. No system is perfectly secure: if a breach puts you at risk, we will tell you and the authorities as the law requires.
Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change is significant, we will also tell you in the app.