PRIVACY POLICY

Effective Date: Effective as of the date of publication on this Website.
Last updated: November 1, 2025

Controller:
SETA Creative LLC (trading as SETA Silver)
1209 MOUNTAIN ROAD PL NE STE N, ALBUQUERQUE, BERNALILLO COUNTY, NM 87110 USA
TURGUT OZAL MAH. 2167. SK. NO:3A/15 AKKENT 6 TWINS TRADE ANKARA/YENIMAHALLE 06370 TURKEY
Email: info@setasilver.com
Website: https://setasilver.com

Introduction
SETA Silver respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, your rights, and how you can contact us. This Policy applies to personal data collected through our website, mobile apps, marketplaces where we sell (e.g., Etsy, Amazon, eBay), customer service, and related services.


1. Scope — When this policy applies

This Privacy Policy applies to personal data that SETA Silver collects about:

  • Visitors to https://setasilver.com and associated microsites;
  • Customers who buy products from us (whether directly on our site or via marketplaces like Etsy, Amazon, eBay);
  • People who contact us for support, sign up to newsletters, or otherwise interact with us.

It covers processing of personal data carried out by SETA Creative LLC and any subcontractors/processors we use to operate our business.


2. Personal data we collect (categories)

We may collect the following categories of personal data depending on how you interact with us:

A. Identity & contact data

  • Name, billing & shipping address, email address, phone number.
    B. Account & transactional data
  • Order history, payment details (payment tokens or masked card data), transaction amounts, returns, refunds, invoices.
    C. Authentication & account management
  • Username, password hash (we do not store raw passwords), account preferences.
    D. Device, technical & usage data
  • IP address, device identifiers, browser type and version, operating system, pages visited, referring URL, time stamps, clickstream and analytics data (collected via cookies and similar technologies).
    E. Marketing & communication preferences
  • Newsletter subscription status, marketing consents, marketing engagement (opens, clicks).
    F. Customer service data
  • Emails, chat transcripts, call recordings (if applicable), dispute or warranty claim details.
    G. Sensitive categories (limited)
  • If you supply any age or health-related personalization in product customization, or otherwise volunteer sensitive information, we will only process it when strictly necessary and with explicit consent or another valid legal ground. We will not request or store excessive sensitive data.

3. Sources of personal data

We collect data directly from you when you:

  • Create an account, place an order, or contact us;
  • Provide information for repairs, returns, or warranty claims;
    We also collect data:
  • Automatically via cookies or analytics tools when you visit our website;
  • From third parties such as payment processors, shipping carriers, marketplace platforms (Etsy, Amazon, eBay), marketing platforms, or social login providers where you choose to use them.

4. Purposes of processing & legal bases

We process personal data for the following purposes and rely on these legal bases (as applicable):

  1. To perform the sales contract and fulfill orders — processing necessary for contract performance (e.g., billing, shipping, order updates, returns).
  2. Payment processing & fraud prevention — necessary for contract performance and for compliance with legal obligations (e.g., anti-fraud).
  3. Customer support & warranty handling — necessary for contract performance and our legitimate interest in providing support.
  4. Website functionality & security — legitimate interests: to secure, maintain and improve our website and services (prevent fraud, detect abuse).
  5. Analytics & product improvement — legitimate interests in analyzing site usage to improve the service; anonymized/aggregated data where possible.
  6. Marketing & communications — where you have given consent, or where allowed under applicable law (e.g., soft opt-in in some jurisdictions). You can withdraw consent at any time.
  7. Legal compliance & dispute resolution — necessary to comply with legal obligations (tax, customs, consumer law) and to defend or pursue legal claims.
  8. Personalization & recommendations — based on consent or legitimate interest, depending on jurisdiction and the nature of profiling.

If we need to process data for a purpose not listed above, we will notify you and explain the legal basis.


5. Cookies & tracking technologies

We use cookies and similar technologies (pixels, local storage) to operate the site, provide core functionality, improve UX, analyze performance, and deliver targeted advertising where you consent.

Categories of cookies:

  • Strictly necessary cookies (required for site operation).
  • Functional cookies (preferences and settings).
  • Analytics cookies (traffic and behavior analysis).
  • Advertising/targeting cookies.

You can manage cookie preferences through the cookie banner on our site and via your browser settings. Blocking some cookies may affect site functionality. A cookie settings panel will be available on our site to opt in/out of non-essential cookies.


6. Third parties & data sharing

We share personal data with third parties only as necessary and under appropriate safeguards:

  • Payment processors (e.g., Stripe, PayPal, local gateways) to process payments. We do not store full card numbers in our systems.
  • Shipping carriers for delivery and tracking.
  • Marketplaces (if you purchase via Etsy/Amazon/eBay) — we receive or provide data required to complete the sale per marketplace terms.
  • Service providers: hosting providers, email delivery services, CRM, helpdesk, analytics providers, marketing platforms, returns fulfillment partners.
  • Legal & compliance: law enforcement, taxation or courts when required by law.
  • Business transfers: in the event of a merger, acquisition, or sale of assets, personal data may be transferred under confidentiality and legal protections.

We require vendors to implement appropriate security and processing safeguards and only process data per our instructions.


7. International transfers

SETA Silver is a New Mexico LLC and operates globally. Personal data may be transferred and processed in countries outside the EU/EEA and Turkey, including the United States and Turkey.

When we transfer personal data from the EEA or UK to countries without an adequacy decision, we will use appropriate safeguards (e.g., Standard Contractual Clauses, Binding Corporate Rules where applicable, or implement consent/other lawful bases). For transfers from Turkey, we will comply with KVKK transfer rules. If you want details about safeguards used for a particular transfer, contact us at the email above.


8. Data retention

We retain personal data only as long as necessary for the purposes set out in this Policy, including to:

  • Fulfill orders and contractual obligations (usually up to 7 years for accounting/tax purposes, or as required by local law);
  • Maintain records to handle returns, warranties, and disputes (timeframe depends on the claim window and statute limitations in the relevant jurisdiction);
  • Retain marketing consents until they are withdrawn.

Specific retention periods will vary by data category and legal requirements. If you want exact retention periods for a particular category, contact us.


9. Your rights (summary)

Depending on your jurisdiction, you may have some or all of the following rights:

For EU/EEA & UK (GDPR):

  • Right to access your personal data;
  • Right to rectification;
  • Right to erasure (right to be forgotten) subject to exceptions;
  • Right to restriction of processing;
  • Right to data portability;
  • Right to object to processing (including profiling/marketing);
  • Right to withdraw consent at any time;
  • Right to lodge a complaint with a supervisory authority.

For Turkey (KVKK): broadly similar rights (access, correction, deletion, object, complain to KVKK) — procedures for requests and identity verification may apply.

For California residents (CCPA/CPRA):

  • Right to know what personal information is collected and shared;
  • Right to request deletion of personal information (with exceptions);
  • Right to opt out of sales of personal information (we do not “sell” personal information as commonly understood, but if practices change we will disclose options);
  • Right to non-discrimination for exercising rights.

How to exercise your rights:
Send a request to info@setasilver.com with a clear subject line such as “Privacy Rights Request — Access” and include enough information for us to locate your records (name, email, order number). We may need to verify your identity (to protect your data). We will respond within applicable legal timeframes (e.g., one month under GDPR; may be extended where permitted). If we cannot comply with a request, we will explain why.

For EU/EEA data subjects you may also lodge a complaint with your local supervisory authority (for example: in the EU country where you live). For Turkish residents you may apply to the Turkish Data Protection Authority (KVKK). For California residents you may contact the California Attorney General.


10. Marketing communications & opt-outs

We will only send marketing emails where you have given consent or where we have another lawful basis. You can opt out of marketing emails at any time by:

  • Clicking the “unsubscribe” link in marketing emails; or
  • Contacting info@setasilver.com and asking to be unsubscribed.

Even if you unsubscribe from marketing, we will still send service-related messages about orders, shipping and support.


11. Security measures

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, or disclosure. Measures include encryption in transit (HTTPS/TLS), access controls, secure hosting, regular security reviews, and contractual controls with processors.

No system is perfectly secure; in the event of a personal data breach affecting your data, we will act in accordance with applicable law, including notifying supervisory authorities and affected data subjects when required.


12. Children’s privacy

Our services are not intended for children under 16 (or the minimum age required by local law where applicable). We do not knowingly collect personal data from children under the applicable age. If you believe we have collected data from a child, contact us at info@setasilver.com and we will take steps to remove the information.


13. Automated decision-making and profiling

We may use automated systems (analytics or recommendation engines) to personalize content, product recommendations, and marketing. These automated decisions do not normally have legal or similarly significant effects on you. If we perform any high-risk automated decision making, we will notify affected users and, where required, obtain consent or provide human review mechanisms.


14. Third-party links

Our site may include links to third-party websites and services. We are not responsible for the privacy practices or content of third parties. We encourage you to read the privacy notices on those sites.


15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in law, our services, or business practices. When we make material changes, we will notify users by posting the new policy on the website with an updated “Last updated” date and, if appropriate, notify registered users by email. Continued use after posting constitutes acceptance of the new policy.


16. Contact & Data Protection Officer (DPO)

If you have questions, concerns, or wish to exercise your rights, contact:

Privacy contact: info@setasilver.com
Postal address: 1209 MOUNTAIN ROAD PL NE STE N, ALBUQUERQUE, BERNALILLO COUNTY, NM 87110 USA


17. How to make a complaint

If you are not satisfied with our response to a privacy request, you may lodge a complaint with a relevant supervisory authority:

  • For EU/EEA residents — the data protection authority of the Member State where you reside.
  • For Turkey — Turkish Data Protection Authority (KVKK).
  • For California residents — California Attorney General’s office.

We recommend contacting us first so we can try to resolve the issue.