Privacy and Personal Data Protection Policy

At eskoza.com (hereinafter referred to as the “Site”), we place great importance on the privacy of our visitors and customers and the protection of their personal data. In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), as the data controller, we process your personal data within the framework described below and in compliance with the relevant legislation.

This Privacy Policy explains what information about you is collected, for what purposes, how it is used, and how its security is ensured when you visit our website, sign up, or make a purchase.

1. Personal Data Collected and Methods of Collection

In order for you to use the services we offer through our website (product sales via the WooCommerce platform, membership, contact, etc.), the following data is collected from you through automated or non-automated methods:

  • Personal Information: First name, last name.

  • Contact Information: Your email address, phone number, and shipping and billing addresses.

  • Shopping and Order Information: Purchased items, order date, order total, shipping information.

  • Payment Information: Your payments are processed through the iyzico payment platform. Your credit card/debit card information is processed directly on iyzico’s secure co-branded payment page; your card information is not stored or retained on eskoza.com’s servers under any circumstances.

  • Technical and Cookie Data: Your IP address, browser type, and on-site navigation data (via cookies).

2. Purposes of Processing Personal Data

Your personal data is processed in accordance with the following legal grounds and purposes:

  • The formation and performance of the contract (receiving your orders, shipping products, and providing after-sales support services),

  • Secure processing of payment transactions (via the iyzico integration),

  • Management of billing and accounting processes,

  • Customer relations, tracking your questions, suggestions, and requests,

  • Compliance with our legal obligations (distance selling agreement, tax laws, etc.).

3. Transfer of Personal Data

Your personal data is shared with third parties solely to the extent necessary to achieve the purposes specified above:

  • Payment Services: Your payment information is securely shared with iyzico (iyzi Payment and Electronic Money Services Inc.) to enable the completion of payment transactions.

  • Shipping and Logistics: To ensure your orders can be delivered, your first name, last name, address, and phone number are shared with our partner shipping companies.

  • Legal Requirements: Information may be shared in order to fulfill our legal obligations in response to requests from authorized public agencies and judicial authorities.

 

4. Data Security and Retention Period

  • Security: eskoza.com takes all necessary technical and administrative measures (SSL certificate, secure servers, WooCommerce security updates, etc.) to protect your personal data against unauthorized access, loss, or theft.

  • Retention Period: Your personal data will be retained for the period specified in applicable laws or as long as necessary for the purpose for which it was processed (generally 10 years in accordance with commercial and tax laws). Once this period expires, your data will be deleted, destroyed, or anonymized.

  • Google Sign-In
    Our customers can securely sign in to our site using their Google accounts to shop faster and track their orders.

5. Cookies

Our website uses cookies to improve your user experience, analyze website traffic, and remember your shopping cart. You can refuse or restrict cookies by changing your browser settings; however, in that case, some features of the website may not work properly.

6. Your Rights Under the KVKK (Data Subject Rights)

  • Pursuant to Article 11 of the KVKK, you have the following rights regarding your personal data , which you may exercise by contacting eskoza.com :

     

    1. To find out whether your personal data is being processed,

       

    2. If it has been processed, request information regarding this,

       

    3. The right to know the purpose of the processing and whether the data is being used in accordance with that purpose,

       

    4. Knowing the third parties to whom the data is transferred, whether domestically orabroad,

       

    5. Request that it be corrected if it is incomplete or has been processed incorrectly,

    6. The right to request the erasure or destruction of personal data, even if it has been processed in accordance with the provisions of the Personal Data Protection Law (KVKK) and other relevant laws, should the grounds justifying its processing no longer exist,

    7. The right to request that these processing activities be disclosed to the third parties to whom the data has been transferred,

    8. To object to a decision made against you as a result of the analysis,

    9. If you suffer damage as a result of an action that violates the law, you may request compensation for the damage.