KVKK Privacy Notice

Categories of Personal Data

• Name, surname and, where required, billing/identity information;
• Telephone, email, billing and delivery addresses;
• Account, basket, order, product, delivery, return, complaint and support records;
• Payment method and transaction/refund status; the Seller does not store full card numbers or CVV;
• IP address, device/browser, session and security logs;
• Legal requests, claims and dispute records;
• Marketing preferences where a valid legal ground or separate consent exists.

Purposes of Processing

Data is processed to manage accounts, accept and perform orders, process payment, issue invoices, prepare and deliver products, manage cancellation/withdrawal/return and customer support, maintain information and transaction security, prevent fraud, comply with accounting and tax obligations and establish, exercise or defend legal claims. Marketing is carried out only where a valid legal ground or separate permission exists.

Collection Methods and Legal Grounds

Data is collected automatically or partly automatically through the website, account and checkout forms, cookies, email/telephone/KEP communications, carrier and payment-provider notifications, and legal or accounting records.

Processing relies on the legal grounds under Article 5 KVKK, including necessity for the formation or performance of a contract, compliance with legal obligations, establishment/exercise/defence of rights and legitimate interests that do not override fundamental rights. Explicit consent is relied upon only where required.

Recipients and Transfers

Data may be shared, on a need-to-know and purpose-limited basis, with Aras Kargo and logistics providers, banks and authorised payment/virtual POS providers, e-invoice and accounting providers, hosting/IT/security suppliers, legal and financial advisers and competent public authorities.

Any international transfer is carried out only where the safeguards and conditions required by the international-transfer provisions of KVKK are satisfied.

Retention

Data is retained for the period required by the processing purpose and applicable tax, commercial, consumer, e-commerce and limitation legislation, after which it is deleted, destroyed or anonymised as appropriate.

Data Subject Rights

Under Article 11 KVKK, data subjects may ask whether their data is processed, request information, learn the purpose and whether data is used accordingly, learn recipients, request correction, request deletion or destruction where the legal conditions exist, request notification of those actions to recipients, object to an adverse result produced exclusively by automated analysis and seek compensation for unlawful processing.

Applications

Applications may be submitted in writing to the registered address, through oguttarim@hs01.kep.tr or by another method accepted under Turkish data-protection legislation. Sufficient identity and request details must be provided.

Language Note

This English notice is provided for convenience. In case of inconsistency, the Turkish notice and mandatory Turkish law prevail.