Privacy Policy
This page explains which of your personal data we process when you visit this site and open an account, why we do so, and what rights you have. Your personal data is processed in accordance with Turkish Personal Data Protection Law No. 6698 (KVKK).
Data controller
The data controller is the company that owns this site. Its registered trade name, address, tax and registry numbers appear in the footer and on the Contact page.
What personal data we process
You do not have to share any personal information simply to browse the site; no account is needed to look at products.
When you open an account: your name, e-mail address and password. Your password is not stored in plain text — it is hashed irreversibly, and we cannot read it either.
When you save a delivery address: address label, recipient name, telephone number, street address, district, city, postal code and country.
When you add items to your basket: the codes and quantities of the items you selected are held in a cookie in your browser.
In server logs: as on any website, your IP address, browser information and request time are kept as technical records.
You may add a phone number to your account; it is not required. It is used only when we need to reach you about an order or delivery. We also store your preferred language for notification emails.
When you ask to change your email address, the new address is stored separately until it is confirmed; once you click the confirmation link it replaces the old one and the temporary record is deleted.
When you save billing details: your national ID number for an individual invoice; the company title, tax number and tax office for a company invoice. A national ID number is requested ONLY to issue an invoice in your name; it is never used as a means of identity verification and is not processed for any other purpose. When you fill in the contact form: your name, email address, the subject you choose and the message you write. A phone number is optional; provide it only if you would like us to call you back. We collect this so that we can answer your enquiry, and it is stored with your consent given at the moment you submit the form.
Why, and on what legal basis
We process your account and address data to manage your account and deliver your order. The legal basis is the formation and performance of a contract.
We process invoices and commercial records because tax and commercial legislation obliges us to retain them.
We process server logs to keep the site secure and prevent abuse. The legal basis is legitimate interest.
We do not build marketing profiles, we do not track your behaviour, and we collect no data for advertising purposes.
We process national ID numbers, tax numbers, tax offices and company titles only in order to issue invoices. The legal basis is the statutory obligation that tax legislation places on the data controller.
We process your phone number in order to reach you during ordering and delivery. The legal basis is performance of the contract. No marketing messages are sent to this number. We process the details from the contact form solely to assess your enquiry and reply to you. The legal basis is the relationship created by your getting in touch, together with the explicit consent you give for that purpose. The form cannot be submitted without that consent, and nothing is stored if you do not give it.
Who we share it with
We do not sell your personal data and we do not share it with third parties for marketing. We work only with the service providers the service itself requires:
The hosting provider where the site and database run.
The e-mail delivery provider — only for account verification and password reset messages, limited to your name and e-mail address.
The storage provider that holds our images — this contains none of your personal data, only product photographs.
The parcel and freight companies carrying your order — limited to the name, telephone number and address needed for delivery.
Public authorities legally entitled to request it, where legislation requires.
How long we keep it
We keep your account and address data for as long as your account remains open. When you delete your account, this data is deleted.
We are obliged to retain invoices and commercial records for the period set by legislation; once that period expires they are deleted, destroyed or anonymised.
Server logs are kept for a limited period and used only when a security review is required.
Billing details are kept for the retention period required by law where an invoice has been issued in your name. Where no invoice has been issued, they are deleted when you delete your account. We keep enquiries received through the contact form for two years after the correspondence ends, and delete them at the end of that period. If your enquiry becomes an order or a contract, the retention period for that relationship applies instead.
Cookies
Only our own cookies are used on this site. There are NO advertising cookies, tracking pixels or third-party analytics — no Google Analytics, Yandex Metrica or any comparable tracker is installed.
The cookies we use and what they do:
Session cookie — carries your identity once you sign in. Without it you cannot access your account. It is set so that it cannot be read by scripts in the browser.
Basket cookie — remembers the items you added to your basket as you move between pages.
Language cookie — remembers the language you chose.
Currency cookie — remembers which currency you want prices shown in.
Unit cookie — remembers whether you want measurements in centimetres or inches.
All five exist to make the site work and to remember your preferences. You can delete or block cookies in your browser settings; if you do, signing in and using the basket will not be possible.
Maps and external content
The map on the Contact page DOES NOT LOAD BY ITSELF. Until you press the button to display it, no request is sent to Google and your IP address is not shared with Google. Once you press the button, the map loads from Google Maps and Google's own privacy terms apply from that point on.
Security of your data
The site runs over an encrypted connection (HTTPS) throughout. Your password is stored irreversibly hashed. Your session cookie cannot be read by scripts in the browser. If repeated incorrect passwords are tried against your account, the account is temporarily locked. Your account is not usable until your e-mail address has been verified.
Your email address does not change in a single step: you must enter your current password to start the change, the confirmation link is sent to the new address, and a notice is sent to the old one. Someone with unauthorised access to your account therefore cannot silently change your sign-in identity. ## Your rights
Under Article 11 of the KVKK you have the right to: learn whether your personal data is being processed; request information if it has been; learn the purpose of processing and whether it is used in line with that purpose; know the third parties in Türkiye or abroad to whom the data is transferred; request correction if it is incomplete or incorrect; request erasure or destruction once the reasons for processing no longer apply; request that correction and erasure be notified to the third parties the data was transferred to; object to a result reached against you solely through automated analysis; and claim compensation if you suffer loss due to unlawful processing.
You can update your name and addresses yourself from your account, and delete your account entirely from the same account pages.
How to apply
You can send requests concerning your rights in writing to our address, or from the e-mail address registered in our system. Our contact details are on the Contact page. We conclude applications free of charge as soon as possible and within thirty days at the latest. If your request entails an additional cost, the fee set out in the Personal Data Protection Board's tariff may be charged.
Effective date
This policy is dated 20 August 2026. If all or part of it is updated, the effective date will be updated too.