This notice explains how your personal data is processed when you use the rego website and mobile app. The data controller is IRAZ TECHNOLOGY COMPANY ("rego", "we"), located at Atasehir, Istanbul, Turkey.
Your data is processed in accordance with the Turkish Republic of Northern Cyprus Personal Data Protection Law No. 89/2007 and other applicable legislation. For users from Turkey and the European Union we also follow the principles of Turkish Law No. 6698 and the EU General Data Protection Regulation (GDPR).
Data we process
- Identity and contact: full name, mobile phone number, e-mail address if provided.
- Delivery: address, directions, door code, the location you mark on the map.
- Orders: basket and order contents, amount, payment method, delivery notes, refund and support messages, photos you send to support.
- Device and usage: language, notification token, IP address, session data; analytics data only with your consent.
- Preferences: your SMS, e-mail and push marketing permissions and their history.
We do not collect or store card details; card payment at the door is taken on the courier's POS terminal.
Why we process it
- To create your account and verify your phone number with a one-time code,
- To receive, prepare and deliver your order and keep you informed about it,
- To handle payments, refunds, invoicing and accounting,
- To answer your reports and requests,
- To determine delivery areas and times, keep the service secure and prevent abuse,
- To comply with legal obligations,
- With your explicit consent, to tell you about offers and campaigns.
Legal grounds
We rely on performance of a contract (orders and delivery), legal obligations (invoices and tax records), our legitimate interests (security, fraud prevention, service quality) and your explicit consent for marketing messages and analytics cookies.
Who we share it with
Only as needed for the purposes above:
- Our store staff and couriers who prepare and deliver your order,
- Providers of hosting and infrastructure, SMS verification, push notifications and maps,
- Analytics providers, only with your consent,
- Our accountants and legal advisers, and competent public authorities.
Some providers operate servers abroad; such transfers are protected by contractual safeguards and appropriate technical measures.
How long we keep it
Account data is kept while your account is open. When you delete your account your personal data is erased; order and invoice records that must be kept by law are retained without being linked to you for the statutory period. Consent records are kept for a reasonable period after withdrawal as proof.
Your rights
- To learn whether your data is processed and request information,
- To learn the purpose and whether it is used accordingly,
- To know the third parties it is shared with,
- To have it corrected if incomplete or wrong, and erased where the conditions are met,
- To object to an adverse outcome resulting solely from automated processing,
- To claim compensation for unlawful processing.
You can delete your account at any time from My account. For other requests, e-mail [email protected] or write to Atasehir, Istanbul, Turkey. We reply free of charge within 30 days.
Explicit consent for marketing
By switching on SMS, e-mail or push notifications in My account, you consent to receiving offers, discounts and new product announcements based on your name, contact details and purchase history. Each channel is chosen separately, is off by default and is not required to order. You can withdraw consent at any time on the same page or via the instructions in the message. Service notifications such as order status are independent of this consent.