Privacy Policy

1 Data Controller

2 Personal Data We Collect

In order to provide our services, we collect the following categories of personal data:

2.1 Identity and Contact Information

• First name, last name
• Email address
• Mobile phone number
• Delivery and billing address
• T.C. identity number (only when the order is completed due to the requirement of e-archive/e-invoice)

2.2 Order and Payment Information

• Order history, order content, basket preferences
• Payment method (through our authorised payment infrastructure provider — card information is not stored by us)
• Invoice and delivery preferences

2.3 Technical and Behavioural Data

• IP address
• Browser type and version
• Device information (mobile/desktop)
• Visited pages, duration of visit, click behaviour
• Cookie data

2.4 Customer Service Correspondence

• Live chat records (including messages passing through the AI supported system)
• Email correspondence
• Messages received via WhatsApp Business
• Messages sent from the contact form

3 Purposes of Data Processing

We process your personal data for the following purposes:

• Order management: Receiving, preparing, shipping and tracking your orders
• Legal obligations: Issuing e-invoice/e-archive, compliance with ETBIS, tax legislation
• Customer service: Answering your queries, processing return and exchange requests
• Marketing (with explicit consent): Notifications about new products, campaigns and discounts
• Service improvement: Measuring site performance, anonymous usage statistics
• Security: Fraud detection, account security, blocking fake orders

4 Legal Grounds for Data Processing

Under Article 5 of KVKK and Article 6 of GDPR, we process your data based on the following legal grounds:

• Establishment or performance of a contract: Data necessary for the ordering and delivery process
• Legal obligation: Tax, e-invoice, trade legislation and KVKK requirements
• Legitimate interest: Fraud prevention, site security, service quality
• Explicit consent: Marketing communications (email newsletters, SMS campaigns)

5 Data Transfer (Third Parties)

Your personal data will be shared only to the extent necessary to provide services with the following business partners:

• Payment: Our authorised payment infrastructure provider (3D Secure and card processing infrastructure)
• Shipping: Our contracted shipping companies (name, phone, address for the delivery process)
• E-Invoice: Our authorised e-invoice integrator (as required by tax legislation)
• Email / SMS: Our contracted SMTP and SMS infrastructure providers
• Analytics (anonymous): Our analysis and measurement tools (aggregate statistics that do not identify individuals)
• Artificial Intelligence Services: Our AI service providers (only message text for live chat)
• Official authorities: In case of legal obligation, courts, prosecutors, supervisory authorities

6 Cookie Usage

Our site uses the following types of cookies:

6.1 Mandatory Cookies

Essential for the basic functions of the site (session, basket, language preference). Used without your consent.

6.2 Performance Cookies

Measures site speed, error rate, and user experience. They are aggregate, anonymous data.

6.3 Functionality Cookies

Remembers your preferences (language, currency, viewing mode). Stored with your consent.

6.4 Marketing Cookies

Used for social media integrations, advertising campaigns, and retargeting. Not activated without explicit consent.

You can change your cookie preferences at any time via the Cookie Settings link at the bottom of the page or through your browser settings. For detailed information, please review our Cookie Policy page.

7 Data Retention Periods

8 Rights of Data Owners

Under Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is being processed
• If processed, to request information related to it
• To learn the purpose of processing your data and whether it is being used appropriately
• To know the third parties to whom your data is transferred, domestically or internationally
• To request correction if your data is processed incompletely or inaccurately
• To request deletion or destruction of your data ("Right to be forgotten")
• To object to decisions made as a result of automated processing
• To request compensation for damages incurred due to unlawful processing

9 Data Security

We implement the following technical and administrative measures for the security of your data:

• SSL/TLS encryption: All site traffic is transmitted over HTTPS
• Database encryption: Sensitive fields (phone, address) are stored encrypted at the DB level
• Access control: Access to data is restricted to authorized personnel only; role-based authorization is applied
• Regular backups: Daily automatic backups, 30-day recovery option
• Audit logs: Every data access is logged
• Firewall: Cloudflare WAF + DDoS protection
• Two-factor authentication: Mandatory for admin accounts
• Periodic security tests: Penetration testing once a year

10 Services for Children

11 Changes

This policy may change due to changes in legislation or updates to our services. You will be notified of significant changes via email, and a warning will be shown when you log into the site. The most current version of the policy is always published on this page.

12 Contact

For any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data, you can reach us through the following channels:

You also have the right to submit your complaints under KVKK to the Personal Data Protection Authority.