Privacy Policy

Original Sadrazam Power ("we", "our", "us") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and the rights you have in relation to that data.

This Policy applies to data collected through our website, mobile-friendly pages and customer service channels. It complies with the EU General Data Protection Regulation (GDPR) and Turkey's KVKK where applicable.

The data controller is Original Sadrazam Power, with European operations based in Barcelona, Spain, and Asia/MENA operations based in Dubai, UAE. For any data-related request you may contact us at [email protected].

We collect the following categories of personal data:

• Identification & contact data: name, email, phone, delivery and billing address. • Order data: purchase history, products ordered, payment method used (we do NOT store full card details). • Account data: username, hashed password, preferences. • Technical data: IP address, device type, browser, operating system, referral URL. • Behavioral data: pages visited, time on page, products viewed, cart activity. • Communication data: emails and messages you exchange with our support.

We process your personal data to:

• Fulfil and deliver your orders, including shipping and customer support. • Process payments securely through third-party PCI-DSS compliant providers. • Manage your account and authenticate your logins. • Send transactional communications (order confirmations, shipping notifications). • Send marketing communications (only with your consent, with an opt-out in every email). • Verify product authenticity via unique codes. • Improve our website, products and services through analytics. • Prevent fraud and enforce our Terms of Service. • Comply with legal obligations.

We rely on the following legal bases under Article 6(1) of the GDPR:

• Contract performance — to process your order and provide customer support. • Legitimate interest — for website analytics, fraud prevention and direct marketing to existing customers. • Consent — for optional marketing emails, non-essential cookies and any special categories of data. • Legal obligation — for tax records, accounting and responding to lawful requests.

We only share personal data with trusted third parties when necessary, including:

• Payment processors (to process transactions securely). • Shipping carriers (for delivery only). • Email and customer support tools. • Analytics and performance providers (anonymized where possible). • Legal authorities (where required by law).

We never sell your personal data.

Our website uses cookies and similar technologies to ensure functionality, measure performance and personalize your experience. For details on the cookies we use and how to manage them, see our Cookies Policy.

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by law (for example, accounting obligations).

Order records are typically kept for 10 years after the transaction for tax and warranty purposes. Account data is retained until you request deletion. Marketing data is retained until you withdraw consent.

Because we operate from multiple hubs (Spain, Türkiye, UAE), your data may be transferred outside your country of residence. Whenever such transfers occur, we ensure appropriate safeguards are in place (for example, Standard Contractual Clauses approved by the European Commission).

Under GDPR and similar regulations, you have the right to:

• Access the personal data we hold about you. • Correct inaccurate or incomplete data. • Request deletion ("right to be forgotten") subject to legal obligations. • Restrict or object to processing. • Data portability — receive a copy of your data in a structured, machine-readable format. • Withdraw consent at any time, where processing is based on consent. • Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We implement industry-standard technical and organizational measures to protect your data, including TLS/HTTPS encryption in transit, hashed passwords, access controls, and regular security reviews.

However, no transmission over the internet is 100% secure. You use the website at your own risk, and we recommend keeping your login credentials confidential.

Our website and products are not intended for individuals under 18 years old. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes to our practices or legal requirements. The revised version will be posted on this page with an updated "Last updated" date. For material changes, we will notify registered users by email.

For privacy-related questions or to exercise your rights, contact us at [email protected].