Privacy Policy

Privacy Policy

Last Updated: [DAY]/[MONTH]/[YEAR]

Welcome. As [BUSINESS NAME] ("We", "us", "our", "company"), we have prepared this Privacy Policy to protect your privacy. Please read this policy carefully. By using our products and services, you accept the data processing practices described in this policy.

1. Data Controller

The organisation acting as the Data Controller for personal data processed through this website and mobile application ("Platform") is:

• Brand Name: [BUSINESS NAME]
• Legal Name: [BUSINESS NAME]
• Address: [ADDRESS]
• KVKK Contact Officer: [CONTACT PERSON]
• Email: [KVKK_EMAIL]

2. Categories of Personal Data Processed

We may process the following categories of personal data through our Platform:

• Identity Information: First name, surname, email address, telephone number
• Account Information: Username, password, profile photo, preferences
• Contact Information: Postal address, province, district, country
• Transaction Information: Purchase history, order details, payment information
• Technical Data: IP address, device information, browser type, operating system, cookies
• Usage Data: Page views, clicks, time spent, referral page
• Location Data: Your geographical location (with your permission only)
• Content Data: Comments, messages, uploaded files

3. Data Processing Purposes

Your personal data may be processed for the following purposes:

• Account creation and management
• Provision and improvement of services
• Processing and delivery of orders
• Carrying out payment transactions
• Provision of customer support and technical assistance
• Sending relevant advertising and marketing communications (with your explicit consent)
• Ensuring the security of the Platform and preventing misuse
• Fulfilling legal obligations
• Statistical analysis and provision of improved services

4. Legal Basis for Data Processing

The processing of your data is based on the following legal grounds:

• Contract Performance: Account management, order processing, payment
• Legal Obligation: Tax laws, consumer protection, fraud prevention
• Explicit Consent: Email newsletters, marketing communications, analytics cookies
• Legitimate Interest: Platform security, misuse prevention, service improvement

5. Data Transfer and Sharing

Your personal data may be transferred to third parties in the following circumstances:

• Service Providers: Payment processing, email sending, hosting, analytics services
• Courier Companies: Address information for delivery purposes
• Legal Obligation: Government agencies, courts (where required)
• Business Partners: Joint marketing or product development (with your consent)

Your data is shared with service providers who maintain similar standards for protecting personal data. Where international data transfer occurs, necessary legal mechanisms are used.

6. Data Collection Methods

Your personal data is collected through the following methods:

• Direct Collection: Registration forms, payment pages, contact forms
• Automatic Collection: Cookies, web analytics, pixel tracking
• Device Sensors: GPS, camera, microphone (with your permission)
• Third Party Sources: Social networks, advertising networks

7. Information About Cookies

Our Platform uses cookies to improve user experience and collect analytics data.

7.1 Cookie Types

• Essential Cookies: Required for Platform functionality (session, security)
• Functional Cookies: Preferences, language selection, remembered information
• Analytics Cookies: Visit statistics, user behaviour (such as Google Analytics)
• Marketing Cookies: To improve and target your advertisements

7.2 Cookie Control

You can control cookies through your browser settings. Most browsers automatically accept cookies, but you can change this. If you disable cookies, some services may not function properly.

8. Your Rights Regarding Your Personal Data (KVKK Article 11)

Under the Personal Data Protection Law No. 6698 (KVKK), you have the following rights:

• Right to Information: Learning whether your data is being processed
• Right of Access: Accessing your processed data and obtaining a copy
• Right to Rectification: Correcting incorrect or incomplete data
• Right to Erasure: Requesting deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Requesting cessation of processing your data
• Right to Data Portability: Transferring your data to another organisation
• Right to Object: Objecting to specific processing (e.g., marketing)
• Right Not to be Subject to Automated Decision-Making: Right to exemption from fully automated decisions

9. Data Security

To ensure the security of your personal data, we implement technical and organisational security measures in accordance with industry standards:

• SSL/TLS encryption protocol
• Secure server infrastructure
• Access control and authentication
• Regular security audits
• Staff training and privacy policies

However, no security method on the internet is completely secure. We cannot guarantee absolute security of your data.

10. Data Retention Period

Your personal data is retained for as long as the processing purpose is being fulfilled and for periods required by legal obligations. Afterwards, it is securely deleted or anonymised.

11. Third Party Services and Links

Our Platform may contain links to third party services (such as Google Analytics, social network pixels, etc.). These services have their own privacy policies. This policy does not cover third party services.

12. Children's Data

Our Platform is not directed at persons under the age of 18. We do not knowingly collect data from children without permission. If we become aware of such collection, we will promptly delete it.

13. Data Breach Notification

In the event of unauthorised access to your personal data, we will provide notification in accordance with legal obligations.

14. Changes to This Policy

We may modify this Privacy Policy as required. For significant changes, we will notify you in writing.

15. Contact and Application

For requests, questions or complaints regarding your personal data, please contact us at the following address:

• KVKK Contact Officer: [CONTACT PERSON]
• Email: [KVKK_EMAIL]
• Address: [ADDRESS]

You also retain the right to contact the Personal Data Protection Authority.

Last Updated: [DAY]/[MONTH]/[YEAR]