Privacy Policy & Data Protection Notice
This English text is provided for convenience; the Turkish version is legally binding. Prepared under Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Data controller
Name / Legal name: İrem Yüksekbilgili Address: Ankara, Türkiye E-mail: info@iremyuksekbilgili.com Website: https://iremyuksekbilgili.com
2. Data we process
Identity and contact details (name, e-mail, phone, delivery/billing address); order and payment data (order contents, amount, iyzico transaction ID — card data is never processed or stored by us); newsletter e-mail; technical data (IP address, browser, cookies); messages you send us.
3. Purposes and legal bases
Concluding and performing the sales contract, delivery and returns (KVKK art. 5/2-c); invoicing, accounting and legal retention (art. 5/2-ç, 5/2-a); answering requests and ensuring security (art. 5/2-f, legitimate interest); newsletter and marketing (art. 5/1, explicit consent — withdrawable at any time).
4. Transfers
Only as necessary: to iyzico Ödeme Hizmetleri A.Ş. for payments, to the courier for delivery, to our accountant and authorities for legal obligations, and to our hosting provider. International transfers only under KVKK art. 9.
5. Retention
Order and invoice records at least 10 years by law; distance-contract documents 3 years; newsletter data until consent is withdrawn; technical logs for reasonable periods.
6. Your rights (art. 11)
You may request information about, correction or deletion of your data, object to automated processing and claim damages, by writing to info@iremyuksekbilgili.com or the postal address above. Requests are answered within 30 days.
7. Security
The site is served over SSL/TLS. The payment page is hosted by iyzico and PCI-DSS compliant.