Privacy policy

1. Who we are

Data controller: [REGISTERED LEGAL ENTITY NAME], [COMPANY REGISTRATION NUMBER], [REGISTERED ADDRESS].

Contact for data protection matters: contact@reguron.com.

[EU representative / DPO details, if appointed — to be confirmed.]

2. Data we process

• Website visitors

  IP address, browser and device information, pages viewed and referral source, collected through analytics only where you have given consent.

• Waitlist and contact form submissions

  Name, email address and any message content you choose to send.

• Merchant account data

  Account holder name, business email, store connection credentials and configuration.

• Merchant end-customer data

  Where a merchant connects their store, Reguron processes order records, customer names, email addresses, phone numbers, shipping addresses and support conversation content. For this category Reguron acts as a processor on the merchant's instructions; the merchant is the controller.

3. Why we process it

• To provide the service

  Resolving customer conversations to orders and generating responses. Legal basis: performance of a contract.

• To communicate with you

  Responding to enquiries and waitlist confirmations. Legal basis: consent or legitimate interest.

• To improve and secure the service

  Diagnostics, abuse prevention and audit logging. Legal basis: legitimate interest.

• To comply with law

  Where we are legally required to retain or disclose information.

4. Sub-processors

Reguron uses third-party providers for hosting, data storage, email delivery, analytics and language-model inference.

[COMPLETE SUB-PROCESSOR LIST, with processing purpose and region, to be inserted. This list must be published before this policy is finalised.]

5. International transfers

[Confirm whether personal data is transferred outside the EEA and the United Kingdom, and the transfer mechanism relied upon — Standard Contractual Clauses, adequacy decision, or otherwise.]

[Confirm whether personal data of Turkish data subjects is transferred abroad and the KVKK Article 9 basis relied upon.]

6. Retention

[Retention periods per data category to be confirmed: website analytics, contact and waitlist submissions, merchant account data, conversation logs, audit logs.]

Data is deleted or anonymised at the end of the applicable period unless we are required to retain it by law.

7. Your rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time.

• Exercising a right

  Email contact@reguron.com. We will respond within the statutory period applicable to your jurisdiction.

• If you are an end customer of a merchant

  Your request is usually best directed to the merchant, who is the controller of that data. We will assist them in responding.

• Complaints

  You may lodge a complaint with your supervisory authority — in Türkiye, the Kişisel Verileri Koruma Kurumu (KVKK).

8. Security

Security controls, including what is and is not certified, are described on our security page. We do not claim certifications we cannot evidence.

9. Changes

Material changes to this policy will be reflected in the last-updated date shown on this page, and notified to account holders where the change affects them.