Privacy policy

Last updated: September 11, 2026

Pijimo is operated by Evegone Mülk Yönetim Limited Şirketi (“Pijimo,” “we,” “us,” or “our”), a company registered in Türkiye.

We operate the Pijimo website, online store, and related services, including the products, content, features, tools, and functionality made available through our website (collectively, the “Services”).

Pijimo is powered by Shopify, which provides the ecommerce infrastructure used to operate our online store.

This Privacy Policy explains how we collect, use, disclose, retain, transfer, and otherwise process personal information when you visit or use the Services, place an order, purchase a Pijimo product, or communicate with us.

By using the Services, you acknowledge that you have read this Privacy Policy. Where applicable law requires your consent to a particular processing activity, we will request that consent separately.

1. Personal Information We Collect

“Personal information” or “personal data” means information that identifies you or can reasonably be associated with you or another individual.

Depending on how you interact with the Services, we may collect or process the following categories of personal information.

Contact and Delivery Information

This may include:

  • name;

  • billing address;

  • shipping address;

  • email address;

  • telephone number; and

  • other contact information you provide.

We use this information primarily to process and fulfill your order, communicate with you, provide customer support, and facilitate delivery.

Order and Transaction Information

This may include:

  • products purchased;

  • product and order details;

  • order history;

  • payment status;

  • transaction information;

  • shipping and delivery information;

  • customs-related information where necessary;

  • returns and refunds;

  • damaged or defective product records; and

  • customer service records.

Because Pijimo products are sold as Blind Boxes, we may maintain information about the product or order purchased, but we do not need to collect personal information about the specific collectible variation contained inside a Blind Box beyond what is reasonably necessary to operate the Services.

Payment Information

Payments may involve payment card and other financial information necessary to complete a transaction.

Payments may be processed through third-party payment providers, including iyzico, Shopify-related payment services, and other payment providers made available through the Services.

Pijimo does not intentionally store complete payment card numbers or full payment card security information on its own servers.

Payment providers may process payment information in accordance with their own privacy policies and applicable legal requirements.

Account Information

If account functionality is available through the Services, we may collect:

  • username;

  • password;

  • saved addresses;

  • account preferences;

  • account settings; and

  • other information associated with your account.

Communications

When you contact us, we may collect information contained in or associated with your communication, including:

  • customer support requests;

  • questions;

  • complaints;

  • product-related communications;

  • refund or return requests; and

  • other correspondence.

Device and Technical Information

When you access the Services, we may automatically collect certain technical information, which may include:

  • IP address;

  • browser type;

  • operating system;

  • device type;

  • network information;

  • approximate location derived from technical information;

  • cookie identifiers;

  • device or advertising identifiers where applicable; and

  • information concerning how your device interacts with the Services.

Usage Information

We may collect information concerning how you browse and interact with the Services, including:

  • pages viewed;

  • products viewed;

  • links clicked;

  • search activity;

  • cart activity;

  • referring pages; and

  • interactions with website features.

Cookies and Similar Technologies

We may use cookies, pixels, tags, scripts, and similar technologies for purposes including:

  • essential website functionality;

  • security;

  • remembering preferences;

  • analytics;

  • website performance;

  • advertising;

  • attribution; and

  • measuring the effectiveness of marketing campaigns.

Where applicable law requires consent, non-essential cookies and similar technologies will be activated only after the required consent has been obtained.

2. Sources of Personal Information

We may collect personal information from:

  • you directly;

  • your browser or device when you use the Services;

  • cookies and similar technologies;

  • Shopify and Shopify-related services;

  • payment providers such as iyzico;

  • shipping, logistics, and fulfillment providers;

  • marketing and advertising partners;

  • customer support or technology providers; and

  • other third parties where permitted by applicable law.

3. How We Use Personal Information

We may use personal information for the following purposes.

Providing and Fulfilling Orders

We use personal information to:

  • process purchases;

  • process or facilitate payments;

  • prepare orders;

  • arrange domestic or international shipping;

  • provide delivery and tracking information;

  • facilitate customs procedures where applicable;

  • process returns and refunds;

  • handle damaged or defective products; and

  • provide customer support.

Pijimo products may be purchased for a single all-inclusive customer price that may include applicable shipping costs and taxes or duties depending on the destination and checkout configuration. Information necessary to calculate, collect, document, or fulfill such charges may therefore be processed by Pijimo and relevant service providers.

Operating and Improving the Services

We may use personal information to:

  • operate the website and online store;

  • maintain customer accounts;

  • remember preferences;

  • troubleshoot technical problems;

  • improve website functionality;

  • analyze website and service performance;

  • understand customer interactions; and

  • develop and improve our products and Services.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to:

  • send promotional communications;

  • communicate information about Pijimo products and releases;

  • measure marketing campaigns;

  • understand advertising performance;

  • personalize advertising; and

  • display Pijimo advertisements on third-party platforms, including platforms such as Meta and TikTok.

You may unsubscribe from promotional email communications at any time by using the unsubscribe mechanism included in the relevant communication.

Where applicable law requires consent for certain forms of electronic marketing or targeted advertising, we will obtain or otherwise honor the required consent or opt-out mechanism.

Security and Fraud Prevention

We may process personal information to:

  • protect the Services;

  • detect and prevent fraud;

  • prevent abuse;

  • authenticate transactions;

  • investigate suspicious activity;

  • protect customers and our business; and

  • maintain the security and integrity of our systems.

Legal, Tax, Customs and Regulatory Compliance

We may process personal information where necessary to:

  • comply with applicable laws and regulations;

  • maintain accounting and tax records;

  • comply with customs and export requirements;

  • respond to lawful requests from authorities;

  • enforce our agreements and policies;

  • establish, exercise, or defend legal claims; and

  • comply with applicable consumer protection requirements.

4. Legal Bases for Processing — European Economic Area and United Kingdom

Where the GDPR, UK GDPR, or substantially equivalent data protection laws apply, we rely on one or more of the following legal bases.

Performance of a Contract

We may process personal information where necessary to:

  • process and fulfill your order;

  • arrange or facilitate payment;

  • arrange delivery;

  • provide customer support; and

  • administer your account where applicable.

Legal Obligation

We may process personal information where necessary to comply with legal obligations, including tax, accounting, customs, consumer protection, fraud prevention, and other regulatory requirements.

Legitimate Interests

We may process personal information where necessary for our legitimate interests, including:

  • operating and improving the Services;

  • maintaining website and transaction security;

  • preventing fraud and abuse;

  • protecting our business;

  • analyzing service performance;

  • maintaining business records; and

  • communicating with existing customers about products and services where permitted by law.

Where we rely on legitimate interests, we consider and balance those interests against your rights and freedoms.

Consent

Where consent is required by applicable law, including for certain marketing communications or non-essential cookies, we will request consent before processing.

You may withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Processing Under Turkish Data Protection Law

Where Turkish data protection law applies, including Law No. 6698 on the Protection of Personal Data (“KVKK”), Pijimo processes personal data in accordance with applicable legal requirements.

Depending on the circumstances, Pijimo may process personal data based on legal grounds including:

  • performance or establishment of a contract;

  • fulfillment of legal obligations;

  • legitimate interests where permitted by law;

  • exercise or protection of legal rights; and

  • explicit consent where required.

As the data controller where applicable, Pijimo may process personal data for the purposes described in this Privacy Policy and may disclose or transfer such data to service providers and other recipients where permitted by applicable law.

6. How We Share Personal Information

We may disclose personal information to the following categories of recipients where reasonably necessary and permitted by applicable law.

Ecommerce and Technology Providers

These may include:

  • Shopify;

  • website and hosting providers;

  • cloud service providers;

  • analytics providers;

  • customer support providers; and

  • technology providers.

Payment Providers

These may include:

  • iyzico;

  • payment processors;

  • banks or financial institutions; and

  • other payment providers made available through the Services.

Shipping, Logistics and Fulfillment Providers

These may include:

  • Navlungo;

  • shipping carriers;

  • customs brokers;

  • logistics providers;

  • fulfillment providers; and

  • other service providers necessary to deliver your order.

These providers may receive information such as your name, shipping address, telephone number, email address, order information, and other information reasonably necessary to fulfill delivery and customs requirements.

Advertising and Marketing Partners

Where permitted by law, we may disclose certain information to advertising and marketing partners, including platforms such as Meta and TikTok, for purposes such as:

  • advertising;

  • measurement;

  • attribution;

  • campaign optimization; and

  • audience or advertising delivery.

Depending on your jurisdiction and the nature of the processing, such disclosure may constitute “sharing,” “sale,” or targeted advertising under applicable privacy laws.

Legal and Government Authorities

We may disclose personal information where reasonably necessary or required by:

  • law;

  • court order;

  • legal process;

  • customs authorities;

  • tax authorities;

  • regulatory authorities;

  • law enforcement; or

  • other governmental authorities.

We may also disclose information where reasonably necessary to protect our rights, customers, property, Services, or business.

Business Transfers

Personal information may be transferred or disclosed in connection with a merger, acquisition, restructuring, financing, sale of assets, sale of the business, or similar corporate transaction.

7. Shopify

Pijimo uses Shopify to operate its ecommerce website and online store.

Shopify may process personal information in connection with providing its ecommerce platform, payment-related services, security, fraud prevention, analytics, and other services.

Shopify may also process information independently for purposes described in Shopify's own privacy documentation.

For information about Shopify's processing practices, please review Shopify's Privacy Policy and, where applicable, Shopify's Data Processing Addendum.

8. International Data Transfers

Pijimo is operated from Türkiye and serves customers internationally.

Personal information may therefore be transferred to, stored in, or processed in countries outside Türkiye, including countries in the European Economic Area, the United Kingdom, the United States, and other countries where our service providers operate.

Where Turkish law applies to an international transfer, Pijimo will use a transfer mechanism permitted under applicable Turkish data protection law.

Where GDPR, UK GDPR, or another applicable law requires appropriate safeguards for international transfers, we will use legally recognized transfer mechanisms and safeguards where applicable, which may include Standard Contractual Clauses or other recognized mechanisms.

Türkiye's current KVKK framework specifically provides mechanisms for international transfers, including standard contractual arrangements.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • fulfill orders;

  • provide customer support;

  • maintain transaction and business records;

  • comply with tax, accounting, customs, and legal obligations;

  • resolve disputes;

  • enforce agreements; and

  • protect our legitimate business interests.

Retention periods depend on the type of information, the purpose for which it was collected, and the legal requirements applicable to that information.

When personal information is no longer required, we may delete, anonymize, or otherwise securely dispose of it, subject to applicable legal and operational requirements.

10. Your Privacy Rights

Depending on your jurisdiction, you may have rights including:

  • access to personal information;

  • correction of inaccurate personal information;

  • deletion of personal information;

  • data portability;

  • restriction of processing;

  • objection to certain processing;

  • withdrawal of consent;

  • objection to direct marketing; and

  • rights relating to certain automated decision-making where applicable.

You may contact us using the information provided below to exercise applicable rights.

We may need to verify your identity to protect against unauthorized requests.

Certain rights may be limited by applicable law, including where Pijimo is required to retain information for legal, tax, accounting, customs, security, or other lawful purposes.

11. Turkish Data Protection Rights

If you are subject to Turkish data protection law, including KVKK, you may have rights provided under applicable law, including rights relating to:

  • learning whether your personal data is processed;

  • requesting information about processing;

  • learning the purpose of processing and whether it is used consistently with that purpose;

  • knowing the third parties to whom personal data is transferred in Türkiye or abroad;

  • requesting correction of incomplete or inaccurate personal data;

  • requesting deletion or destruction where the applicable legal conditions are satisfied;

  • requesting notification of relevant correction, deletion, or destruction to third parties where required by law;

  • objecting to certain results arising against you through analysis of processed data exclusively by automated systems, where applicable; and

  • requesting compensation for damages arising from unlawful processing where applicable.

Requests may be submitted using the contact information provided in Section 15.

Pijimo will evaluate and respond to requests in accordance with applicable Turkish law and the applicable procedural requirements.

12. California Privacy Rights

If you are a California resident and the CCPA, as amended by the CPRA, applies to our processing of your personal information, you may have rights including:

  • the right to know or access personal information;

  • the right to delete personal information, subject to applicable exceptions;

  • the right to correct inaccurate personal information;

  • the right to opt out of the sale or sharing of personal information;

  • the right to limit certain uses or disclosures of sensitive personal information where applicable;

  • the right to non-discrimination for exercising applicable privacy rights; and

  • the right to use an authorized agent where permitted.

Where applicable, Pijimo will honor valid opt-out preference signals, including Global Privacy Control signals, as required by applicable law.

California residents may submit a privacy request by contacting:

hello@pijimo.com

We will not discriminate against you for exercising rights provided by applicable law.

The CCPA applies only when its statutory applicability requirements are met; inclusion of this section does not mean that Pijimo necessarily falls within the CCPA's scope in every circumstance.

13. Children's Privacy

Pijimo products are collectible art objects intended for collectors aged 14 and older.

The Services are not directed toward young children.

We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us in circumstances where such collection was not permitted, please contact us so that we can review the situation and, where appropriate, delete the information.

14. Cookies and Privacy Choices

Where applicable law requires consent for non-essential cookies or similar technologies, we will provide appropriate consent mechanisms.

You may also be able to control certain cookies through your browser settings.

Disabling certain cookies may affect the functionality of the Services.

Depending on your jurisdiction, you may also have rights to opt out of targeted advertising, the sale or sharing of personal information, or other forms of regulated data processing.

Where applicable, Pijimo may provide additional privacy controls through the Services or through Shopify's privacy and consent functionality.

15. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You should avoid sending highly sensitive information through unsecured communications.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, or applicable legal requirements.

When we make changes, we will update the “Last updated” date and publish the revised Privacy Policy on this page.

Where applicable law requires additional notice regarding material changes, we will provide such notice.

17. Contact

For questions, privacy requests, or other communications regarding this Privacy Policy or your personal information:

Pijimo / Evegone Mülk Yönetim Limited Şirketi

Email: hello@pijimo.com

Registered Business Address:

Saraybosna Mah. Avukat Nevzat Türkten Cad. No: 6/14
38000 Kayseri, Türkiye