Privacy
Privacy Policy
This policy explains how information submitted through the Gencer Textiles website is handled.
Last updated: 26 July 2026
Data controller and contact
The website operates under the Gencer Textiles brand. The verified privacy contact currently available is [email protected].
Configuration required before launch: insert the verified legal entity name, business or registered address, country of establishment, and any dedicated privacy contact if different from the email above.
Information we collect
The Inquire and Product Catalogue forms may collect your full name, business email, country or project location, area of interest, selected category, potential order quantity, custom-product interest, project details, optional message, source page, website language, and submission time.
For security and service operation, we may also process limited technical information such as an IP-derived security hash, browser user-agent information, Turnstile verification data, and duplicate-submission fingerprints. We do not ask the browser to provide a catalogue presentation URL.
Why we process information
We use inquiry information to receive, review and respond to your request, understand the relevant hospitality textile category, communicate about the project, and deliver a requested catalogue or category presentation when available.
We also use limited technical information to verify form submissions, prevent abuse, apply rate limits, protect the website, and maintain reliable delivery records. Inquiry data is not used to subscribe you to newsletter marketing.
Privacy consent and timestamp
The Inquire and Product Catalogue forms require you to actively select an unchecked privacy-consent box before submission. When you agree, the inquiry record stores the affirmative consent and the server-recorded time of that consent.
If consent is not provided, the inquiry is not submitted. You may later withdraw consent by contacting us; withdrawal does not affect processing already carried out before the request.
Separate newsletter consent
A newsletter request is separate from product and project inquiries. Submitting an inquiry, requesting a catalogue, or selecting the inquiry privacy box does not subscribe you to newsletter marketing.
Newsletter preferences and any consent required for marketing must be collected and managed separately. You may request to stop newsletter communications using the method provided in the message or by contacting us.
Service providers
Supabase is used to receive and securely store form records and associated delivery status information. Resend is used to send internal notifications and visitor confirmation emails.
Cloudflare Turnstile is used to distinguish legitimate submissions from automated abuse. These services may process limited information on our behalf according to their service configuration and contractual terms. Configuration required before launch: confirm applicable processing locations, international-transfer safeguards, and processor agreements.
Security and retention
We use server-side validation, access controls, Row Level Security, abuse protection, restricted credentials, and delivery-status records to reduce unauthorized access, alteration, disclosure, or loss. No internet service can guarantee absolute security.
Information should be kept only as long as needed to respond to requests, maintain project and correspondence records, meet legal obligations, and resolve disputes. Configuration required before launch: insert the approved retention periods for inquiries, catalogue requests, security records, and newsletter data.
Your rights and how to contact us
Depending on the law that applies to you, you may request access to your information, correction of inaccurate information, deletion, restriction, portability, or objection to certain processing. You may also withdraw consent and lodge a complaint with the competent privacy authority.
To make a privacy request, email [email protected] and describe the request. We may need to verify your identity before acting. Configuration required before launch: insert the competent supervisory authority and verified company postal contact.