Privacy Policy

Data controller

[ŞİRKET UNVANI], [AÇIK ADRES]. Tax office and number: [VERGİ DAİRESİ] / [VERGİ NO]. Trade registry (MERSIS): [MERSİS NO]. Email: [DESTEK E-POSTASI]. Phone: [TELEFON].

This notice is provided under the EU General Data Protection Regulation (GDPR) and Türkiye’s Personal Data Protection Law No. 6698 (KVKK).

What data we process

• Identity and contact: name, email, phone.
• Delivery: address, city, postcode, country.
• Order: products bought, amount, currency, order number.
• Technical: IP address, browser information, cart contents and currency preference (see the Cookie Policy).

Your card details are entered on PayTR’s secure payment page; we never see or store them.

Purposes and legal bases

• Taking, producing and shipping your order and keeping you informed: performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• Keeping invoices and accounting records: legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
• Keeping the site secure and preventing abuse: legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

Who we share data with

We share your data only with the service providers needed to complete your order:

• Printify, Inc. (USA): printing, packing and shipping orders. Name, delivery address, phone, email and order contents are shared.
• PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. (Türkiye): payment processing. You enter your card details directly with PayTR; they never reach us and we do not store them.
• Vercel, Inc. (USA): hosting and serving the website; technical connection logs (such as IP addresses) are processed.

Carriers receive your name and address from Printify to deliver the parcel. Data may be shared with public authorities where the law requires it.

International transfers

Because Printify and Vercel are based in the United States, your data is transferred there. Transfers rely on the safeguards provided by Chapter V of the GDPR and Article 9 of the KVKK, including standard contractual clauses.

How long we keep data

We keep order and invoice records for as long as tax and commercial law requires (generally 10 years in Türkiye). Technical logs are kept for shorter periods. Afterwards the data is deleted or anonymised.

Your rights

Under the GDPR and Article 11 of the KVKK you have the right to access your data, to have it corrected or erased, to object to or restrict processing, and to data portability.

Send requests to [DESTEK E-POSTASI]; we reply within 30 days. You may also complain to your local data protection authority or to Türkiye’s Personal Data Protection Board.