Privacy policy
Who we are
derimarket.net is operated by Pegia UK Ltd, registered in England and Wales under company number 14797805, registered office: 85 Great Portland Street, London W1W 7LT, United Kingdom. We are the controller of personal data processed via https://www.derimarket.net for customers in the EU/EEA and Switzerland. Contact: support@derimarket.net. For all matters relating to your personal data, you can contact Pegia UK Ltd directly at support@derimarket.net.
Our EU representative (Art. 27 GDPR)
As we are not established in the EU, we have appointed Euverify Limited as our representative in the EU/EEA for data protection matters. If you are located in the EU or EEA and have questions or concerns regarding your personal data, you may contact our representative instead of, or in addition to, us: Euverify Limited (Ireland), Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland. Email: gdpr@euverify.com. To submit a data subject access request, a deletion request or any other GDPR-related inquiry, you can use our representative’s secure portal: https://gdpr.euverify.com/verify/16a9e656-7cf3-4c65-b5ba-6a67e470131f. The portal also allows you to verify our appointed representative. Requests submitted through it are logged and tracked to ensure a timely response.
Data we collect
Order and account data (name, address, email, phone, purchase history); payment data (processed by our payment providers; we do not store card numbers); marketing data (email address and preferences when you subscribe); technical data (IP address, device and browsing data via cookies; see our Cookie Policy).
Purposes and legal bases (Art. 6 GDPR)
Fulfilling your order, delivery and customer service (contract); service messages (contract); marketing emails where you subscribed (consent, which you can withdraw at any time); fraud prevention and security (legitimate interests); tax and accounting obligations (legal obligation).
Recipients
Processors and partners acting on our instructions: Shopify (e-commerce platform), payment providers, DHL Express (delivery), our fulfilment centre in Türkiye (order preparation, shipping and returns handling), email marketing and analytics providers, our live chat provider Chatty (customer support chat, including AI-assisted replies) and our product review provider Judge.me. We do not sell your personal data.
Live chat
If you use the chat on our website, your messages and the details you share with us are processed by our chat provider Chatty so that we can answer your questions (contract, or our legitimate interest in providing customer service). Some replies are generated automatically by an AI assistant; you can ask for a member of our team at any time. Please do not share payment card details in the chat.
International transfers
Your data is processed in the United Kingdom (covered by the European Commission adequacy decision) and, for order fulfilment and returns, in Türkiye. Türkiye is not covered by an adequacy decision; transfers are safeguarded by EU standard contractual clauses with our fulfilment partner. Other providers may process data outside the EEA under standard contractual clauses. For customers in Switzerland, the United Kingdom is also recognised as providing an adequate level of protection, and the standard contractual clauses are used with the adaptations required by Swiss law.
Retention
Order records 6 years (tax law); marketing data until you unsubscribe; otherwise no longer than necessary.
Your rights
Access, rectification, erasure, restriction, portability, objection (including to direct marketing) and withdrawal of consent. To exercise these rights, email support@derimarket.net or contact our EU representative, Euverify Limited, at gdpr@euverify.com or through its secure portal (https://gdpr.euverify.com/verify/16a9e656-7cf3-4c65-b5ba-6a67e470131f). You may lodge a complaint with the supervisory authority of your member state. If you are in Switzerland, the Swiss Federal Act on Data Protection (FADP) also applies and you may contact the Federal Data Protection and Information Commissioner (FDPIC).
Children
Our services are not directed at children under 16.
Changes
The current version is always available on this page.