Privacy policy
What personal data we collect, why, and the rights you have over it.
Last updated: 30 April 2026
1. Who we are
ShopTurkiye operates the marketplace at shopturkiye.co. This policy explains how we handle personal data of buyers, sellers, and visitors. It is written to comply with Türkiye's Personal Data Protection Law (KVKK) and the EU General Data Protection Regulation (GDPR) where applicable.
2. Data we collect
Account data — email, hashed password, role (buyer / seller / admin), and the timestamp of your account creation. Profile data — for sellers: store name, description, country. Order data — products you list or buy, prices, currencies, shipping addresses, and order status. Payment data — handled by our payment provider (PayPal); we receive a transaction ID and amount, never your card or PayPal credentials. Usage data — pages viewed, basic device and locale information, and cookies described in our Cookie Policy. Support data — anything you send us through the contact form or support email.
3. How we use your data
To provide the marketplace — account access, order processing, communication between buyer and seller, dispute resolution, fraud prevention. To improve the service — anonymous analytics on which features are used, which categories sell, and which pages are slow. To communicate with you — transactional emails about orders, account changes, and disputes; and marketing emails only if you have opted in. To comply with law — tax records, anti-fraud cooperation with payment providers, and lawful requests from authorities.
4. Our legal basis
We process most data under contract — we need it to fulfil our agreement with you. Some processing relies on legitimate interest (fraud prevention, service improvement) or your consent (marketing emails, non-essential cookies). Where consent is the basis you can withdraw it at any time.
5. Who we share data with
Sellers see the buyer's name, shipping address, and order details when you place an order with them. Buyers see the seller's store name and country. Beyond that we share data only with: our payment provider (PayPal); our infrastructure providers (Supabase for hosting and database, BunnyCDN for image storage, Vercel for application hosting); our email provider when applicable; and authorities where required by law. We do not sell personal data.
6. International transfers
Our infrastructure providers operate servers in the EU, the United States, and elsewhere. When data leaves Türkiye we rely on the safeguards required by KVKK and the standard contractual clauses required by GDPR. You can request the list of providers and their hosting locations from the support email.
7. How long we keep data
Account data — for as long as your account is open, and for 6 years after closure to comply with Turkish tax and consumer protection record-keeping rules. Order data — same retention as account data. Support messages — 2 years from the date received, then deleted. Marketing-consent records — until you withdraw consent, then archived for 1 year for audit purposes.
8. Your rights
You have the right to access your data, correct inaccurate data, request deletion (subject to retention obligations), restrict or object to processing, port your data to another service, and lodge a complaint with the Turkish KVKK authority or — if you are in the EU — your local data-protection authority. To exercise any right, email support@shopturkiye.co. We respond within 30 days.
9. Cookies
We use a small number of cookies for login, currency and language preferences, and basic analytics. Full details — including how to refuse non-essential cookies — are in our Cookie Policy.
10. Security
We use encrypted connections (HTTPS) for all traffic, hash passwords with industry-standard algorithms, gate database access with row-level security, and store payment credentials only with our payment provider. No system is perfectly secure — please use a strong unique password and notify us immediately if you suspect your account has been compromised.
11. Children
The Platform is not directed at people under 18. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.
12. Contacting us
For any privacy question, including a request to exercise your rights, email support@shopturkiye.co. Our data-protection contact details, including those for any local representative we appoint under GDPR, will be added to this page once the legal review noted on our Terms page is complete.
13. Changes to this policy
We may update this policy. Material changes will be notified by email at least 14 days before they take effect. The "Last updated" date tracks the most recent version.