Privacy
How TURLL handles personal data.
This policy describes how TURLL LIMITED processes personal data when you browse turll.com, create an account, request a quotation, place an order, communicate with us, apply for a role or otherwise use our services. It should be read with any collection notice shown on a specific form.
Data we collect
Information needed to operate a B2B commerce service.
Information you provide
- Name, role, company and contact details
- Billing, delivery, tax and importer information
- Account credentials in protected form
- Product, quotation, order and support information
- Messages, attachments and application materials you choose to send
Information generated automatically
- IP address, device, browser and security logs
- Cookie and preference information
- Pages, searches, cart and checkout interactions
- Payment status and fraud-prevention signals from providers
- Carrier, delivery and service records
Purposes
Why we process personal data.
- Respond to enquiries and quotation requests
- Create and manage customer accounts
- Process orders, payments, shipping and returns
- Issue commercial and customs documents
- Prevent fraud and secure our systems
- Meet legal, tax, accounting and compliance duties
- Improve product search, content and site performance
- Send marketing only where permitted and with an opt-out
Where EEA or UK data-protection law applies, processing may rely on contract, legitimate interests, legal obligation or consent, depending on the activity. You may withdraw consent where consent is the basis, without affecting earlier lawful processing.
Sharing & transfers
Limited to operating the service and meeting obligations.
We may share relevant data with payment processors, banks, logistics carriers, customs agents, suppliers involved in an order, IT/hosting/security providers, professional advisers and authorities where required. We do not sell personal data to advertisers. Some recipients may be outside your country; where required, we use contractual or other recognized safeguards and limit the data to the relevant purpose.
Retention & security
Kept only as long as reasonably needed.
Retention depends on the record type, transaction lifecycle, warranty, dispute, tax, accounting, fraud-prevention and legal requirements. Data is then deleted, anonymized or securely archived where continued retention is required.
We use proportionate technical and organizational measures, including access controls, transport encryption where supported, backups, monitoring and provider due diligence. No online system can be guaranteed completely secure, so report suspicious activity promptly.
Your choices and rights
Access, correction and other rights may apply.
Depending on your location and the applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or to complain to a supervisory authority. Hong Kong’s Personal Data (Privacy) Ordinance provides rights of data access and correction, subject to statutory conditions and exceptions. We may need to verify your identity before acting on a request.
To stop direct marketing, use the unsubscribe method in the message or contact us. Operational messages about an active quotation, order, security issue or account are not marketing.
Cookies & external links
Website technologies and third-party services.
See our Cookies Policy for categories and controls. Our website may link to manufacturer, carrier, payment or social services with their own privacy practices. Review their notices before providing data.
Privacy contact
Ask a question or exercise a privacy right.
Contact TURLL and clearly mark the request “Privacy”. Do not send unnecessary identity documents until we explain the verification required.