How buying works
This website is an information page, not a shop or a marketplace. Nothing is sold and no payment is taken on it. When you send the form you make a request, not an order: if a piece is available, a person from the atelier contacts you by e-mail and the sale — size, price, payment and delivery — is agreed with you directly.
1. Who is responsible
The data controller is Trama&Warp Atölye, Sırakapılar Mah. 1934 Sok. No 7, Merkezefendi, 20100 Denizli, Türkiye. For anything about your data, write to hello@tramawarp.com.
2. What we collect
- When you request a piece: your name, surname, e-mail address, your social media handle if you choose to give it, the series number of an earlier garment if you enter one, and the time you confirmed you are 16 or older and accepted this notice.
- When you check a series number: only the number itself, to look it up. We do not store it or link it to you.
- To prevent abuse: your IP address is used for a moment to limit repeated requests. We keep only a salted one-way hash of it, never the address itself, and delete it within 24 hours.
We do not use analytics, advertising or tracking cookies. The only cookie on this site is a sign-in cookie for our own staff on the admin pages. We never ask for or store card details — payment is arranged with you directly.
3. Why, and on what legal basis
- To answer your request and arrange your purchase — size, payment and delivery by e-mail. Basis: steps taken at your request before a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- Your confirmation that you are 16 or older — we do not ask for your age. Under 18, a parent or guardian completes the purchase. Same basis.
- Your series number gives owners of an earlier piece priority and lets us detect numbers reported stolen. Same basis, and our legitimate interest in protecting buyers from counterfeits (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- Security and abuse prevention for the site. Basis: legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- Records of completed sales, where Turkish commercial and tax law requires us to keep them. Basis: legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
4. Who handles it for us
Your details are seen only by the people at the atelier who answer orders, and are stored with these service providers, who process them on our instructions:
- Vercel Inc. — hosts this website; our server functions run in Frankfurt, Germany.
- Supabase Inc. — hosts our database in Frankfurt, Germany.
- Google LLC — Google Sheets, where we keep our order book.
These providers store data in the European Union and may process it in other countries, including the United States. Transfers outside Türkiye take place with your explicit consent (KVKK Art. 9), which you give with the checkbox on the order form, and under the providers' standard contractual clauses (GDPR Chapter V). We never sell or share your details with anyone else.
5. How long we keep it
- Requests that do not lead to a purchase: deleted within 12 months.
- Records of completed purchases: kept for as long as Turkish commercial and tax law requires (generally ten years), then deleted.
- Abuse-prevention hashes: 24 hours.
6. Your rights
You can ask us at any time to tell you what we hold about you, correct it, delete it, restrict or object to its use, or send it to you in a portable form, and you can withdraw your consent — none of this affects anything done before. These are your rights under KVKK Article 11 and GDPR Articles 15–22. Write to hello@tramawarp.com; a person will reply within 30 days, free of charge.
If you are not satisfied, you can complain to the Personal Data Protection Authority of Türkiye (kvkk.gov.tr) or, if you live in the EU, to your local data protection authority.
7. Security
The site is served only over encrypted HTTPS. Our database is not reachable from the public internet API, access is limited to the site's own server and to atelier staff, and every stored request is kept in the EU.
8. Changes
If we change how we use your details, we will update this page and the date at the top. If a change affects a request you have made, we will tell you by e-mail.