Privacy Policy

popstrapx ("we", "us", "our") is an e-commerce brand selling watch strap extensions for the Royal Pop watch. We operate this website at popstrapx.com. For data protection enquiries, contact us at privacy@popstrapx.com.

We collect the following personal data when you interact with our website or place an order:

• Identity & contact: name, email address, phone number.
• Delivery: shipping address, country.
• Payment: we do not store card data — payments are processed securely by our payment provider. We only receive confirmation of payment status.
• Communications: messages you send us via the contact form or email.
• Marketing: email address if you subscribe to our newsletter or waitlist.
• Technical: IP address, browser type, device type, and pages visited — collected automatically via cookies and server logs.

• To fulfil orders: process pre-orders, send shipping confirmation and tracking information.
• To communicate: respond to enquiries, provide customer support, and send transactional emails.
• Marketing (with consent): send newsletters, new product announcements, and exclusive offers. You may unsubscribe at any time via the link in any email.
• To improve our website: analyse traffic patterns and user behaviour in aggregate, anonymised form.
• Legal obligations: retain records as required by applicable law (e.g. tax, consumer protection).

We rely on the following legal bases under the GDPR (and Turkish KVKK):

• Contract performance — processing orders and managing customer accounts.
• Legitimate interests — fraud prevention, security, and improving our services.
• Consent — newsletter subscription and non-essential cookies.
• Legal obligation — tax and financial record-keeping.

We share your data with trusted third parties only where necessary:

• Payment processors (e.g. Stripe, iyzico) to handle transactions securely.
• Shipping carriers to deliver your order.
• Email service providers to send transactional and marketing emails.
• Analytics providers (e.g. Google Analytics) under data processing agreements.

We never sell your personal data to third parties.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order records are retained for 10 years for tax purposes. Marketing data is retained until you unsubscribe or request deletion.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten") where it is no longer needed.
• Object to processing based on legitimate interests.
• Withdraw consent at any time for consent-based processing.
• Data portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, email privacy@popstrapx.com. We will respond within 30 days.

We use cookies and similar tracking technologies. See our Cookie Policy for full details.

We use industry-standard measures including HTTPS encryption, access controls, and regular security reviews to protect your data. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take all reasonable precautions.

We may update this Privacy Policy from time to time. The effective date at the top of the page will reflect the latest revision. Continued use of the website after changes are posted constitutes acceptance of the revised policy.

For privacy-related questions or to exercise your rights, contact us at privacy@popstrapx.com.