Personal Data Protection Notice

Data Controller

Your personal data is processed by OHAY LTD (Muhit's) as the data controller within the scope and conditions explained in this notice.

Personal Data We Process

In order to provide our services, we may process the following personal data:

• Identity data: first name and last name.
• Contact data: e-mail address, phone number, delivery address and billing address.
• Customer transaction data: order history, requests and complaint records.
• Payment data: payment transaction information. Card details are processed through secure payment providers.
• Technical and security data: IP address, cookies, browser information and website usage data.

Purposes of Processing Personal Data

• Receiving, preparing and delivering your orders.
• Processing payments and issuing invoices.
• Providing customer support and responding to your enquiries.
• Managing cancellations, returns and refunds.
• Complying with legal obligations.
• Sending promotional or informational communications where you have given consent.

Legal Bases for Processing

Your personal data may be processed on the basis of contract performance, pre-contractual steps, compliance with legal obligations, legitimate interests and, where required, your explicit consent.

Sharing Personal Data

Your personal data may be shared, only where necessary, with shipping and logistics partners for delivery, payment service providers for payment processing, IT and hosting providers, professional advisers and competent public authorities where required by law.

Data Retention

Your personal data is retained only for as long as necessary for the purposes for which it was collected and for the applicable statutory retention periods. Once these periods expire, your data is deleted, anonymised or securely archived.

Your Rights

Under applicable data protection laws, you may have the following rights:

• Right to access your personal data.
• Right to request correction of inaccurate or incomplete data.
• Right to request deletion of your personal data.
• Right to restrict processing.
• Right to object to processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with a competent data protection authority.

How to Contact Us

You can submit any requests regarding your rights by contacting us at [email protected]. Your request will be reviewed and answered within the applicable legal time limits.