This policy explains how Gamze Sen, trading as Gamzely ("we," "us"), handles personal information when you browse gamzely.com, create an account, contact us, or buy from us. Privacy questions and requests can be sent to [email protected] or through our contact form.
Effective date: October 15, 2026
Information you give us
Depending on how you use the store, we receive:
- Account information: name, email, optional phone number, saved addresses, sign-in method, password credentials, and security settings. Passwords are stored as hashes, not readable passwords.
- Order information: items and options, quantities, price and discount details, billing and delivery information, optional gift notes, payment status and transaction references, shipping and tracking information, and refund or return records.
- Information you submit: contact messages, custom requests, return reasons, and product reviews. Please do not include card numbers, passwords, identity documents, or sensitive information that we do not need.
- Shopping preferences: items in your bag, saved wishlist items when signed in, and choices needed to complete your purchase.
You can shop as a guest without creating an account. We still need the contact and delivery information necessary to process a guest order.
Information collected through the website
Our website and infrastructure receive technical information such as IP address, browser or device information, request times, requested pages, and security or error records. Session data helps maintain your sign-in and form security.
If you arrive through a tagged Instagram, TikTok, Facebook, or other campaign link, we may record the source and campaign with the session and order to understand where purchases came from. This is first-party order attribution; it is different from installing a social-media advertising pixel.
Cookies and similar storage
We use cookies to make the store work, including:
- Session and form-security cookies: keep your browsing session, sign-in state, and request verification working. The normal session inactivity period is about 2 hours.
- Shopping-bag cookie (
gamzely_cart): connects your browser with its bag, normally for up to 30 days, refreshed when you use the store. Signing in can link or merge that bag with your account. - Sign-in security cookie (
gamzely_oauth): temporarily verifies a Google or Apple sign-in flow, normally for up to 10 minutes. - Language-preference cookie (
gamzely_language): remembers a selected language, where available, for up to 1 year.
Deleting or blocking cookies can sign you out, disconnect a guest bag, or prevent checkout and sign-in from working. Cookie expiration is not a promise that all related order or database records are deleted at the same time.
We do not currently install Google Analytics, Meta Pixel, or TikTok Pixel on the storefront, or use its information for cross-site targeted advertising. We do not sell personal information or share it for cross-context behavioral advertising. We do not currently change the essential operation of the store in response to a browser's Do Not Track signal. There is no advertising sale/sharing activity here for a Global Privacy Control signal to opt you out of; essential operations continue.
Google and Apple sign-in
If you choose one of these options, the provider verifies your identity and supplies an account identifier and the name and email information it makes available. Apple may supply a private relay email when you choose Hide My Email.
We store the provider link and, when supplied, an encrypted provider token needed to maintain that connection. We do not receive your Google or Apple password, and we do not request access to your contacts, photos, or email inbox for store sign-in. You can manage the connection in the provider's account settings; contact us if you need help with the Gamzely account itself.
Payments and service providers
Stripe processes payments on its hosted checkout. We send the information needed to identify and complete the order, including your email, order reference, total, and a description of the purchase. We receive payment and refund confirmations and transaction identifiers. We do not receive or store your full card number or card security code. Stripe may handle additional information for payment processing, fraud prevention, or its own services under its Privacy Policy.
We disclose information to providers only as appropriate to run the store, fulfil orders, or meet our obligations, including hosting and infrastructure, email delivery, delivery carriers, professional advisers, and payment services. Delivery carriers receive the information needed to deliver a parcel, such as the recipient and address.
Cloudflare helps deliver and protect the website and can process IP addresses, traffic, and security information. See Cloudflare's Privacy Policy.
Google Fonts supplies the website's fonts. Loading them makes a request to Google, which receives technical information including the visitor's IP address and browser request headers. See the Google Fonts privacy information. Following external links or using provider-hosted sign-in or checkout also involves that provider's own privacy practices.
Why we use information
We use it to operate accounts and bags; take and fulfil orders; communicate about payment, delivery, returns, and support; verify sign-ins; prevent abuse and fraud; keep business and tax records; and maintain the website. Source and campaign information helps us understand our own sales channels.
Order and service emails are operational messages. Registering, buying, or contacting us does not by itself subscribe you to an advertising newsletter.
If you submit a product review that is approved for publication, the review, rating, and account display name can appear publicly on the product page. Do not put private information in a review.
We may disclose information when required by law, to respond to valid legal requests, or to protect lawful rights and the security of the store. If ownership of the business changes, any transfer of customer records must remain subject to applicable privacy obligations.
Retention, security, and processing locations
We keep information for as long as reasonably needed for its purpose, including active accounts, order fulfilment, returns, accounting and tax obligations, fraud prevention, and resolving disputes. There is not one automatic deletion period covering all account, order, support, and security records. Backups may retain copies until their normal rotation.
We use safeguards including HTTPS, access controls, password hashing, and encryption for selected sensitive account and session information. No website, transmission method, or storage system can be guaranteed completely secure.
Gamzely operates in the United States. Our providers may process information in the United States and other countries where they operate. Their processing is subject to their applicable contractual and legal obligations.
Your choices and requests
You can update profile details and saved addresses through your account. For an email change, access to your information, correction, account deletion, or another privacy request, contact [email protected]. Include enough information to identify the account or order, but do not send a password, complete card details, or identity documents in your initial request.
We may verify that a request is yours before acting. We will respond as required by applicable law and explain if information must be retained for a legal, security, transaction, or other permitted reason. Deleting an account does not necessarily erase transaction records. Privacy rights and available appeal or complaint processes depend on the law that applies to you; you can contact us to ask about a response or exercise those rights without retaliation.
Children and policy changes
The store is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has supplied information, contact us so we can investigate and take appropriate action.
We may update this policy as the store or its services change. The effective date appears above. Where a change requires additional notice or consent, we will provide it as required. Questions are welcome at [email protected].