Privacy Notice (KVKK)

This notice is provided by the business shown above as data controller under Turkish Personal Data Protection Law No. 6698 (“KVKK”).

Personal data we process

• Identity and contact: name, phone, email, delivery and billing address.
• Customer transactions: orders, appointment requests, cart and return details.
• Finance: payment amount and status (card details are processed by PayTR and never seen or stored by us).
• Security: IP address, consent timestamps, system logs.
• Marketing: your commercial message preference, only with your permission.
• Special category data: health information you share in an appointment note, only with your explicit consent.

Purposes and legal grounds

• Taking orders, collecting payment, delivery and returns — performance of a contract (KVKK Art. 5/2-c).
• Invoices, contract records and official requests — legal obligation (Art. 5/2-ç).
• Handling appointment requests and contacting you — contract and legitimate interest (Art. 5/2-c, f).
• Information security and fraud prevention — legitimate interest (Art. 5/2-f).
• Health data in appointment notes — explicit consent (Art. 6/2).
• Sending offers and news — explicit consent and approval under Law No. 6563.

Transfers

Your data may be shared, limited to the purposes above, with PayTR for payments, our courier for delivery, our hosting and email providers, and competent public authorities on request. Instagram, TikTok and Google Maps content on the site only loads with your cookie consent, in which case those providers may process data abroad.

How we collect data

Data is collected electronically or verbally through the forms on our website, the checkout page, WhatsApp and phone.

Retention

Order and invoice records are kept for the periods required by law (e.g. 10 years under the Tax Procedure Law) and appointment records for 2 years after the request is closed; they are then deleted, destroyed or anonymised.

Your rights under Article 11 of the KVKK

• Learn whether your data is processed and request information,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties in Türkiye or abroad to whom data is transferred,
• Request correction of incomplete or inaccurate data, and deletion or destruction where the conditions are met, and that third parties are notified,
• Object to a result against you arising solely from automated analysis,
• Claim compensation for damage caused by unlawful processing.

Send requests in writing to the email, KEP or postal address above. Requests are answered free of charge within 30 days.

The Turkish version of this notice is binding.