Privacy Notice (KVKK)

This English translation is provided for convenience. In case of any discrepancy, the Turkish version of this text prevails.

At Yıldız Beyer Couture, we care about the security of your personal data. This notice has been prepared under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you about the personal data we process through the yildizbeyer.com website, our showroom and our communication channels.

1. Data Controller

• Name / trade name: Yıldız Beyer Couture
• Address: Akşemsettin, Fevzipaşa Cd. No:139 Kat 1, 34083 Fatih/İstanbul
• Phone / WhatsApp: +905514384542
• Email: [email protected]

2. Personal Data We Process

• Identity and contact details: Full name, phone number, email address.
• Order and delivery details: Delivery address, country, city, district, postcode, order contents, order note, shipping details.
• Payment details: Payment amount, currency, payment status and transaction reference number. Card details such as the card number, expiry date and security code are not processed or stored on our website; they are collected directly by the payment institution.
• Appointment details: Appointment type, date and time, wedding date, the model you are interested in and your note.
• Measurement details: The body measurements, country, wedding date and note you share in the measurement form.
• Contact form details: The content of your message.
• Correspondence: Messages, photos and preferences you share with us via WhatsApp, phone or email.
• Transaction security and usage data: IP address, browser and device information, website usage data and, if you consent, data collected through analytics cookies.

We do not request special categories of personal data such as health information; please do not share such information in forms or note fields.

3. Purposes of Processing

• Receiving your orders, collecting payment, and producing, shipping and delivering products,
• Fulfilling obligations under the distance sales agreement and handling withdrawal, return and defective product requests,
• Creating, confirming and reminding you of showroom, fitting and online consultation appointments,
• Taking your measurements for bespoke and made-to-measure services and preparing your dress accordingly,
• Responding to your questions, requests and complaints,
• Issuing invoices and fulfilling obligations under accounting and tax legislation,
• Ensuring information security and preventing fraud and unauthorised transactions,
• Responding to information requests from authorised bodies and protecting our rights in legal disputes,
• If you consent, analysing the use of our website and measuring the effectiveness of our advertising.

4. Legal Grounds and Collection Methods

Your personal data is collected, partly or fully by automated means, through the order, appointment, measurement and contact forms on our website, the payment page, cookies, phone, WhatsApp, email and your showroom visits, and is processed on the following legal grounds set out in Article 5 of the KVKK:

• It is directly related to the conclusion or performance of a contract (orders, payment, delivery, appointments and measurements),
• It is necessary for the data controller to comply with a legal obligation (invoicing, tax and consumer law obligations),
• It is necessary to establish, exercise or protect a right,
• It is necessary for the data controller's legitimate interests, provided this does not harm your fundamental rights and freedoms (responding to requests and complaints, information security),
• Your explicit consent (analytics and advertising cookies, and the transfer of data abroad through these cookies).

5. Transfer of Personal Data

For the purposes above and to the extent necessary, your personal data may be transferred to the following recipients:

• Payment institution: iyzico Ödeme Hizmetleri A.Ş., to collect payment and carry out fraud checks,
• Shipping and logistics companies: your name, address and phone number, to deliver the product,
• Service providers: companies providing hosting, infrastructure and IT services for our website, and our accountant,
• Authorised public bodies: legally authorised institutions, judicial and administrative authorities and Consumer Arbitration Committees, upon request.

Transfers abroad: If you give consent in the cookie notice, your usage data is transferred to servers abroad through services provided by Google LLC (Google Analytics) and Meta Platforms, Inc. (Meta Pixel) for analytics and advertising measurement. This transfer is based on your explicit consent under Article 9 of the KVKK, and these cookies do not run unless you consent. If you message us on WhatsApp, your messages are transmitted through the infrastructure of Meta, which provides the WhatsApp service.

6. Retention Periods

• Order, invoice and payment records: 10 (ten) years under the applicable tax and commercial legislation,
• Appointment, measurement and contact form records: 2 (two) years from the conclusion of your request,
• Analytics cookies: for the period set by the cookie provider or until you withdraw your consent.

Personal data whose retention period has expired is deleted, destroyed or anonymised.

7. Your Rights

Under Article 11 of the KVKK, you have the right to apply to the data controller to:

• learn whether your personal data is processed,
• request information if your personal data has been processed,
• learn the purpose of processing and whether the data is used in line with that purpose,
• know the third parties in Türkiye or abroad to whom your personal data is transferred,
• request correction if your personal data is incomplete or inaccurate,
• request deletion or destruction of your personal data under the conditions of Article 7 of the KVKK,
• request that third parties to whom your data was transferred be notified of any correction, deletion or destruction,
• object to a result against you arising from analysis exclusively by automated systems,
• claim compensation if you suffer damage due to unlawful processing of your personal data.

8. How to Apply

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send requests about your rights in a written, wet-signed petition containing information that identifies you and your request, in person or by post to Akşemsettin, Fevzipaşa Cd. No:139 Kat 1, 34083 Fatih/İstanbul, or by email to [email protected] from an email address you have previously provided to us and that is registered in our system. Your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request; if the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged. If your application is rejected, you find the response insufficient, or no response is given in time, you may file a complaint with the Personal Data Protection Board.

9. Payment Security

Your card details are not processed or stored on our website; payments are taken through the secure payment page of the licensed payment institution iyzico. Data transmitted between you and our website is encrypted with an SSL certificate.

10. Cookies

Information required for the website to work (your cart, favourites, language and cookie preference) is stored only on your own device and does not depend on your consent. If you consent, Google Analytics and Meta (Facebook/Instagram) analytics cookies are used to improve the website and measure the effectiveness of our advertising. If you do not consent, these cookies do not run. You can reset your preference by clearing the site data in your browser or block cookies in your browser settings.

11. Updates

This notice may be updated in line with changes in legislation or in our data processing activities. The current version is always published on this page.