Privacy Policy

This privacy policy explains how Melamine Tablewares handles personal data when you visit melaminetablewares.com, send us a quote request or a message, or contact us by email or WhatsApp. We collect only what we need to answer business inquiries and handle orders.

Who is responsible for your data?

The controller responsible for your personal data is Melamine Tablewares (operated from Türkiye). For any privacy question or request, email us at [email protected].

What personal data do we collect?

Quote requests

When you send a quote request, we collect your name, company, email address, phone or WhatsApp number (optional), country, business type, preferred Incoterm and destination (optional), whether you are interested in private label, your message, and the products and quantities in your quote list.

Contact form

When you use the contact form, we collect your name, email address, company and country (optional), the subject (optional) and your message.

Email and WhatsApp

If you write to us by email or WhatsApp, we receive your contact details and the content of your messages. WhatsApp is a Meta service, and its own privacy policy applies to your use of it.

Technical and security data

When you visit the website, our hosting server and Cloudflare, our content delivery and security provider, process technical data such as your IP address, browser type, the pages you request and the time of each request. We use this data to deliver the website, keep it secure and prevent abuse.

To block spam, our forms use a signed time check and limit how many messages can be sent from one connection. For this limit we store a salted hash of your IP address, not the address itself. With each request or message, we also record the country that Cloudflare derives from your IP address.

Why do we use your data, and on what legal basis?

• To answer your quote request or message and prepare an offer: necessary to take steps at your request before entering into a contract (GDPR Art. 6(1)(b)).
• To process and deliver orders, including invoices, shipping and export documents: necessary to perform a contract (Art. 6(1)(b)) and to meet legal obligations such as tax and accounting rules (Art. 6(1)(c)).
• To keep the website secure, prevent spam and fraud, and keep records of our business correspondence: our legitimate interests (Art. 6(1)(f)).

When you submit a form, we ask you to confirm that you have read this policy. We do not sell your personal data, we do not use it for advertising, and we do not add you to marketing lists without your consent.

Because we operate from Türkiye, we also process personal data in line with Turkish Law No. 6698 on the Protection of Personal Data (KVKK).

Who receives your data?

We share personal data only as far as needed, with:

• our web hosting provider, which runs the website and stores form submissions;
• Cloudflare, which delivers the website and protects it against attacks;
• our email service provider, which delivers form notifications and our replies;
• freight forwarders, logistics providers and customs authorities, when you place an order;
• our production partners, for private-label orders, limited to the order and artwork details they need.

We may also disclose data when the law requires it.

Is your data transferred to other countries?

We operate from Türkiye, so the information you send us is processed in Türkiye. Some service providers, such as Cloudflare, process data in other countries through their global networks. Where the GDPR applies and requires it, these transfers are protected by appropriate safeguards, such as the European Commission’s standard contractual clauses.

How long do we keep your data?

• Quote requests and messages that do not lead to an order: up to 2 years after our last contact, so we can refer to earlier discussions; then we delete them.
• Order records, invoices and related correspondence: as long as commercial and tax law requires, which in Türkiye is generally up to 10 years.
• Technical and security logs: only as long as needed for security and troubleshooting, then deleted.

What are your rights?

Depending on the law that applies to you, such as the GDPR in the EU/EEA, the UK GDPR or KVKK in Türkiye, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to certain processing, including processing based on our legitimate interests;
• receive the data you gave us in a portable format;
• withdraw your consent at any time, where processing is based on consent;
• lodge a complaint with a data protection authority, for example in the EU/EEA country where you live or work, or with Türkiye’s Personal Data Protection Authority.

To exercise your rights, email [email protected]. We reply within one month, and we may ask you to confirm your identity before we act on a request.

How do we protect your data?

The website is served over HTTPS only. Form submissions are kept in protected storage on our server and in our business email, and access is limited to the people who handle inquiries and orders.

Cookies and local storage

We do not use advertising or tracking cookies. Your quote list is saved in your browser’s local storage, and Cloudflare may set strictly necessary security cookies. Details are in our Cookie Policy.

Children

This website is intended for businesses. It is not directed at children, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy when our services or legal requirements change. The date at the top of this page shows when it was last updated.

Contact

Questions about privacy? Email [email protected].