Privacy Policy

1. Controller

The controller responsible for your personal data is North Mile. For any privacy question or request, contact us at info@north-mile.com.

2. What we collect and why

• Account data (name, e-mail address, password stored only in hashed form, phone number, saved addresses) to provide your customer account. Legal basis: contract (Art. 6(1)(b) GDPR).
• Order data (products, billing and shipping address, company name and VAT number if given, e-mail, phone, order history) to process, deliver and invoice your order and handle returns and warranty claims. Legal basis: contract and legal obligations (Art. 6(1)(b) and (c) GDPR).
• Payment data: payments are handled by our payment provider. We receive the payment status and limited details such as the card brand and last digits, never the full card number.
• Order e-mails: we send order confirmations and service messages to the e-mail address you give us. Legal basis: contract.
• Technical data (IP address, browser type, requested pages, time of access) in server logs, to deliver the Site and keep it secure. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
• Search queries you enter in the store search, processed only to show matching products.
• Country detection: when you open the Site without choosing a country, we look up the country of your IP address in a local copy of the IP to Country Lite database by DB-IP (https://db-ip.com, licensed under CC BY 4.0) to show you the right prices and shipping options. Your IP address is not sent to DB-IP or anyone else, and the result is not stored. Legal basis: our legitimate interest in showing the correct store for your country (Art. 6(1)(f) GDPR).

3. Cookies

We only use cookies that are necessary for the store to work: a cookie that remembers your cart, a cookie that keeps you signed in and a cookie that remembers the country you chose. We do not use advertising or analytics cookies. Because these cookies are strictly necessary, they do not require consent.

4. Service providers

We share personal data only with service providers that help us run the store, under data processing agreements, and only as far as needed:

• Hosting of the store and database on servers we rent.
• Stripe, for payment processing.
• Resend, for sending order e-mails.
• Cloudflare, for DNS, content delivery and storage of product images.
• Shipping carriers, which receive your name, delivery address and, where needed, phone number to deliver your parcel.
• Tax advisers and authorities where we are legally required to share invoices.

5. Transfers outside the EU/EEA

Some providers (for example Stripe, Resend and Cloudflare) may process data in the United States or other countries outside the EU/EEA. In these cases we rely on an adequacy decision such as the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

6. How long we keep data

• Account data: until you close your account.
• Order and invoice data: as long as required by tax and commercial law, usually up to 10 years.
• Server logs: a short period, normally no longer than 30 days, unless needed to investigate a security incident.

7. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to data portability. Where processing is based on consent, you can withdraw it at any time. To exercise these rights, e-mail info@north-mile.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.

8. Security

The Site is served only over encrypted connections (HTTPS). Passwords are stored in hashed form, and access to our systems is restricted to the people who need it.

9. Additional information for data subjects in Turkey (KVKK)

If you are in Turkey, the Personal Data Protection Law No. 6698 (KVKK) also applies to the processing of your personal data. The data controller under the KVKK is North Mile, reachable at info@north-mile.com. We process your data for the purposes described in section 2, on the grounds set out in Article 5 of the KVKK: the conclusion and performance of a contract, compliance with our legal obligations and our legitimate interests.

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of the processing and whether the data is used accordingly; to know the third parties in Turkey or abroad to whom it is transferred; to request its correction if it is incomplete or inaccurate, and its deletion or destruction under the conditions of Article 7 of the KVKK; to request that such correction, deletion or destruction be notified to the third parties to whom the data was transferred; to object to a result to your detriment arising from the analysis of your data exclusively by automated systems; and to claim compensation for damage caused by unlawful processing.

You can send requests under the KVKK in writing or by e-mail to info@north-mile.com. We answer free of charge as soon as possible and within 30 days at the latest; if answering involves an additional cost, we may charge the fee set by the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). If your request is rejected, our answer is insufficient or we do not answer in time, you can file a complaint with the Board within the periods set out in Article 14 of the KVKK.

The store is hosted on servers outside Turkey, and some of the service providers listed in section 4 (for example Stripe, Resend and Cloudflare) process data outside Turkey. Your personal data is therefore transferred abroad; these transfers take place in accordance with Article 9 of the KVKK.

10. Changes

We may update this policy when our services or the law change. The date at the top of this page shows the latest version.