In short: we collect what you give us when you contact us or place an order, and the small amount our website needs in order to work. We don’t run analytics, advertising pixels or tracking tags on this site, we don’t profile visitors, and we don’t sell personal information. This policy tells you what we hold, why, who else sees it, and how to ask us about it.
1. Who We Are
Oh My PillowCase is operated by Serkan Yıldız, a sole proprietor established in Istanbul, Türkiye. Oh My PillowCase is the brand name under which decorative pillow covers are sold through ohmypillowcase.com.
Serkan Yıldız is the data controller for the processing described in this Privacy Policy, except where a service provider acts as an independent controller in its own right under applicable law.
Postal address:
Aydınlı Mahallesi Mektep Sokak No:17 D:14
34953 Tuzla, Istanbul
Türkiye
How to reach us about privacy: hello@ohmypillowcase.com. This is the address to use for any question or request about your personal information.
This policy tells you how we handle personal information. It is not a contract and you are not asked to agree to it. Using this website is not treated as consent to anything described here.
2. Information We Collect
Personal information reaches us in three ways: you give it to us, it is created when you buy something, and a small amount is recorded automatically so the website runs and stays secure.
Information you give us
- Contact form: your name, email address, an order number if you choose to provide one, the support topic you select, and your message.
- Checkout: your name, email address, billing address, shipping address, and a phone number where the checkout asks for one.
- Product reviews: the name and email address you enter, an optional website address, your rating, and what you write.
Information created when you shop
- The contents of your cart while you are shopping.
- Your order records: the items, the amount paid, and the billing and delivery addresses used.
Information recorded automatically
- Your IP address and browser user agent. These appear in ordinary web server logs, and are stored alongside a review if you submit one.
- A small number of cookies and storage entries needed to keep your cart and session working. Each one is listed under Cookies and Similar Technologies.
How we collect it. All of the above is collected electronically, through this website, either because you typed it into a form or because your browser sent it as part of an ordinary web request.
What we do not collect. We do not use Google Analytics or any other analytics product on this website. We do not use advertising pixels, conversion tags, remarketing tags, or a tag manager. We do not profile visitors, and we do not track you across other websites. The typeface used across this site is served from our own server rather than fetched from a font network.
3. Contact & Customer Support
This section is the detailed explanation behind the short notice shown on our Contact page.
What the form collects. Your name, your email address, the support topic you choose, and your message. There is also an optional order number field, which you may leave empty. Nothing else is requested. The form contains no marketing sign-up and no consent checkbox, because none is needed to answer a question.
Why we process it. To read and answer your message; to respond to pre-purchase questions; to help with an existing order where your message concerns one; and to keep the records of that correspondence we need for support and security purposes. We do not use contact form submissions to send you marketing.
Where it goes. Submissions are delivered to us by email and held in our business mail account. They are not stored as form entries in a database on this website — there is no form archive here to be read, exported or breached.
Spam protection. The form’s spam check runs on our own server. There is no third-party CAPTCHA, so completing the form sends nothing about you to an outside service.
Who receives it. Only the people who run Oh My PillowCase and answer customer messages, together with the email provider that carries and stores the message. See Service Providers.
Technical information collected with it. Your submission reaches us through an ordinary web request, so our server log records the IP address and browser user agent it came from, as it does for any page view.
How long we keep it. See Data Retention.
Your rights. See Your Privacy Rights. Sending us a message is not treated as consent to marketing, and you are not asked to accept this Privacy Policy in order to contact us.
4. Orders and Checkout
When you buy from us we collect what is needed to take, deliver, and account for that order: your name, email address, billing address, delivery address, the items ordered, and the amount paid.
Orders are placed as a guest — there is no account to create. We still keep an order record, because it is needed to fulfill the order, to handle returns and refunds, and to meet record-keeping obligations that apply to us.
While you shop, your cart is held in a temporary session on our server so its contents survive as you move between pages.
5. Payments
Card payments on this website are processed by iyzico, the payment provider shown at checkout.
You enter your card details on payment infrastructure operated by iyzico rather than by us, and iyzico processes them as the party responsible for handling payment data. We do not receive or store complete payment card numbers. What reaches this website is the order itself, the amount, and whether the payment succeeded or failed.
So that the payment can be taken, iyzico receives the order total and currency, the items in the order, and the billing name, address, email address and phone number you enter at checkout. What iyzico does with that information is described in its own privacy information: iyzico Privacy Policy.
The payment screen itself is served by iyzico and loads iyzico’s own scripts, which may set cookies and send information to iyzico and to service providers it uses. That happens only at the payment step, after you choose to pay, and it sits outside the measurements described in our Cookie Policy, which cover the rest of this website.
6. Fulfillment and Shipping
Our covers are made to order, so producing and delivering them involves a print-on-demand fulfillment partner and the carrier that partner uses. That partner is Printify, and it is connected to this website.
When you place an order, the following is passed to the fulfillment partner so your cover can be made and dispatched, and on to the carrier that delivers your parcel:
- the delivery name;
- the delivery address;
- the details of the item ordered — the design, the size, and how many.
Your payment details are not passed to them. Payment information is handled separately by the payment provider and never reaches the fulfillment partner or the carrier.
Customer information is transferred only when an order is placed and processed. Browsing the website, or leaving items in a cart without ordering, transfers nothing to the fulfillment partner or the carrier.
The carrier is chosen by the fulfillment partner rather than by us, and varies with the destination. We do not currently receive tracking information back into this website; if that changes, this section will say what we receive before it is switched on.
How shipping itself works is described on our Shipping & Delivery page.
7. Accounts
Customer accounts are not currently offered on this website. Registration is switched off, and checkout does not create an account for you. You order as a guest, and your order confirmation goes to the email address you enter at checkout.
This means we hold no customer usernames and no customer passwords. If we introduce accounts later, this section will be updated to say what an account stores before the feature is switched on.
8. Product Reviews
Our product pages accept customer reviews. Comments on blog articles are switched off, so the review form is the only place on this site where you can publish something.
If you leave a review, we store the name and email address you enter, an optional website address, your rating, what you wrote, and the IP address and browser user agent it was sent from. Your name, rating and text are published; your email address and IP address are not.
A review is held for approval before it appears.
Beneath the form is an optional box offering to remember your name, email address, and website in your browser so you need not retype them. That box is never ticked for you, and what it stores is listed under Cookies and Similar Technologies.
Any review count or rating shown for our shop as a whole reflects our sales history on other marketplaces and is an aggregate figure only. No reviewer’s personal information from another marketplace is imported into or stored on this website.
9. Technical and Security Information
Our web server keeps ordinary request logs containing IP addresses, the pages requested, timestamps, and browser user agent strings. They exist so the site can be operated, so faults can be investigated, and so abuse such as automated attacks can be detected and stopped.
We do not use these logs to build a picture of you as an individual, and we do not combine them with your order or contact information for any marketing purpose.
10. Cookies and Similar Technologies
This website sets no cookies at all until you do something that needs one — adding an item to your cart, or asking us to remember your details on a review. There are no analytics cookies and no advertising cookies on this site, because we use neither.
Because nothing is placed on your device beyond what a feature you asked for genuinely requires, we do not show a cookie consent banner. A banner asking you to accept things we do not do would be misleading.
| Name | Purpose | When it is set |
|---|---|---|
woocommerce_items_in_cart, woocommerce_cart_hash |
Records that your cart is not empty, and what is in it, so totals stay correct. | When you add an item to your cart. |
wp_woocommerce_session_* |
Links your browser to your cart and checkout session on our server. | When you add an item to your cart. |
wc_cart_hash_*, wc_fragments_* |
Browser storage, not cookies. Keeps the cart display correct without reloading the page. | When any page loads; it stays empty until you add an item. |
comment_author_*, comment_author_email_*, comment_author_url_* |
Remembers the details you entered on a review so you need not retype them. | Only if you tick the optional box on the review form. |
wordpress_logged_in_*, wordpress_sec_*, wp-settings-* |
Keeps a signed-in user signed in and remembers their screen preferences. | Only for people who administer the website, never for customers. |
Our Cookie Policy lists every cookie and storage item individually, with what sets it, why, and how long it lasts.
These are all set by this website itself; none of them reports anything to another company. You can delete cookies at any time in your browser settings, though doing so while shopping will empty your cart.
Services we add in future may set cookies of their own — a payment provider is the likeliest example. Where such a technology is not strictly necessary for something you asked for, we will put a genuine consent choice in place before it is switched on, and update this policy at the same time. We will not introduce analytics or advertising quietly.
11. How We Use Information
- To answer your questions and provide customer support.
- To take, process, deliver, and account for your orders.
- To handle returns, refunds, and problems with an order.
- To operate, maintain, and secure the website.
- To publish reviews you have chosen to submit.
- To meet legal, tax, and accounting obligations that apply to us.
We do not use your personal information for advertising or profiling, and we do not make automated decisions about you that produce legal or similarly significant effects.
12. Legal Bases Where Applicable
Where the law that applies to you requires a legal basis for processing, ours are as follows. None of it relies on your consent to this policy — using the website is not treated as agreement to it.
- Taking, delivering, and supporting an order is necessary in order to perform the contract between you and us, and to take steps at your request before entering into one.
- Answering a support message is necessary either for that contract or for our legitimate interest in running a shop that responds to the people who write to it.
- Keeping order and accounting records is necessary to comply with legal obligations that apply to us.
- Operating and securing the website rests on our legitimate interest in keeping it available, correct, and defended against abuse.
- Publishing a review rests on your choosing to submit it for publication.
- Remembering your details on the review form rests on your consent, given by ticking that box, and you can withdraw it by clearing the cookies in your browser.
13. How We Share Information
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not disclose personal information to data brokers or to advertising networks.
We share personal information only where it is necessary:
- with the service providers listed below, who handle it on our instructions in order to run the shop;
- where the law requires it, or in order to establish, exercise, or defend legal claims;
- if the business is ever sold or reorganized, with the party taking it on, who would remain bound by this policy until they tell you otherwise.
14. Service Providers
Currently in use
- Web hosting — our hosting provider, Hosting.com.tr, hosts this website and its database, and its servers produce the request logs described above. It therefore holds everything the site stores.
- Business email — the mail service that carries and stores the messages you send us, including contact form submissions and any email you send to
hello@ohmypillowcase.com. - Production and fulfillment — Printify, the print-on-demand platform through which your order is produced and dispatched. It receives the delivery name and address and the details of the item ordered, and arranges production and carrier delivery through the facility that makes your cover.
- Payment processing — iyzico, the payment provider that takes card payments made on this website. It receives the billing details you enter at checkout, the items in the order and the amount, and it handles your card details on its own infrastructure. See section 5.
We do not use analytics, advertising, tag management or session recording services on this website, and none is configured on it. The payment screen is the one exception: it is served by our payment provider and loads that provider’s own scripts, as described in section 5.
Oh My PillowCase also sells through Etsy, which is a separate sales channel with its own terms and its own privacy practices. Etsy is not connected to this website: no customer or order information passes between Etsy and ohmypillowcase.com. If you buy from us on Etsy, Etsy’s own privacy information governs that purchase.
15. International Data Transfers
We are established in Türkiye, and this website and our business email are hosted with a Turkish provider. Personal information you give us is processed in Türkiye, wherever in the world you are ordering from.
Browsing this website does not itself send anything abroad through your browser: no third-party service receives your IP address or anything else merely because you visited a page here.
Because our covers are made to order and we ship worldwide, the delivery name and address and the item details are also processed outside Türkiye, in the country where your order is produced and from which it is dispatched.
Our payment provider, iyzico, is established in Türkiye. Where iyzico or the service providers it uses process information outside Türkiye, iyzico’s own privacy information describes what happens.
When personal information is processed by service providers located in different countries, we take reasonable steps to ensure appropriate safeguards are applied where required. We will update this section to describe a specific transfer mechanism if and when one applies to a named provider.
16. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including fulfilling orders, providing support, maintaining business and tax records, resolving disputes, enforcing agreements and meeting applicable legal obligations. In practice that means:
- Support messages — for as long as needed to resolve your inquiry and to keep a reasonable record of the exchange afterwards.
- Order records — for as long as needed to fulfil the order, and then for the period that tax and accounting law requires us to retain commercial records, and for as long as a dispute or a legal claim about the order could still be brought. That is longer than we would otherwise keep them.
- Reviews — for as long as they remain published, or until you ask us to remove them.
- Server and security logs — for the short period needed to investigate faults and abuse.
When information is no longer needed for any of these purposes, we delete it or put it beyond use.
17. Your Privacy Rights
Depending on the law that applies to you, you may have the right to:
- ask whether we hold personal information about you, and to obtain a copy of it;
- have inaccurate or incomplete information corrected;
- ask us to delete information where the grounds for holding it no longer apply;
- ask us to restrict how we use it, or object to a particular use;
- receive certain information in a portable form, where that right applies;
- withdraw consent, where a specific processing activity actually relies on your consent — as the review form’s optional box does;
- be told who your information has been shared with, in Türkiye or abroad, and ask that a correction or deletion be passed on to them;
- object to a decision produced solely by automated analysis that works against you, and to seek compensation for damage caused by unlawful processing;
- complain to the data protection authority that supervises us, or to the one where you live, if one has jurisdiction.
Not every right above applies to every person or every situation — which ones you have depends on the law that covers you and on why we are holding the information. Where a right applies, we will honor it.
To exercise any of these, email hello@ohmypillowcase.com. We may need to verify who you are before acting, so that we do not disclose someone’s information to the wrong person. We will respond within the time the applicable law allows, and tell you if we need longer.
Making a request costs nothing. We do not charge a fee for handling one, and we will not treat you differently for having made one.
18. Children’s Privacy
This website sells home furnishings and is intended for adults. It is not directed at children, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
19. Changes to This Policy
If we change how we handle personal information, we will update this policy and change the date shown at the top. Where a change is significant — for example, if we begin using analytics or advertising technologies, or connect a payment or fulfillment provider — we will make that clear rather than leaving you to notice it.
20. Contact Us
Oh My PillowCase, operated by Serkan Yıldız, sole proprietor, Istanbul, Türkiye.
Postal address:
Aydınlı Mahallesi Mektep Sokak No:17 D:14
34953 Tuzla, Istanbul
Türkiye
For anything to do with privacy, or to make a request about your personal information, email hello@ohmypillowcase.com. You can also write to us through our contact form, though email is better for a request about your own data, because it gives us a reply address we can verify.
A question about your information?
Ask us directly.
Email hello@ohmypillowcase.com and a person will read it.