KVKK Privacy Notice

PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA

In accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by us as data controller within the scope described below.

1. DATA CONTROLLER
BOUDOIR – Aslı Selin Can
Erenköy Mah. Azim Sk. No:7 İç Kapı No:5, 34738 Kadıköy / Istanbul
Email: hello@boudoir.ist

2. PERSONAL DATA PROCESSED

• Identity: first name, last name
• Contact: delivery and billing address, phone number, email address
• Customer transactions: order, return, exchange and request records
• Financial: payment transaction details (your card details are not stored by us; they are processed by the payment provider)
• Marketing: communication preferences, campaign and cookie data
• Transaction security: IP address, device and browser information, site usage logs

3. PURPOSES AND LEGAL GROUNDS

• Taking your orders, collecting payment, and managing delivery, returns and exchanges – establishment and performance of a contract (KVKK Art. 5/2-c)
• Issuing invoices, fulfilling accounting and legal record-keeping obligations, responding to requests from competent authorities – legal obligation (Art. 5/2-ç)
• Responding to customer requests, ensuring site security, preventing fraud and improving service quality – legitimate interest (Art. 5/2-f)
• Sending commercial electronic messages about campaigns, new collections and special offers, and using personalised advertising and analytics cookies – explicit consent (Art. 5/1)

4. TRANSFER OF PERSONAL DATA
Limited to the purposes above, your personal data may be transferred to carriers (Aras Kargo, Sürat Kargo), payment and banking institutions, accounting and financial advisory service providers, our e-commerce platform Shopify, advertising and analytics providers (Meta, Google, Microsoft) where you have given explicit consent, and competent public authorities upon request.

As the servers of our platform, advertising and analytics providers are located abroad, your data may be transferred abroad in accordance with the safeguards set out in Article 9 of KVKK (standard contract or explicit consent).

5. METHOD OF COLLECTION
Your personal data is collected electronically or physically via the boudoir.ist website, order and account forms, return and contact forms, email correspondence, cookies and our store.

6. RETENTION PERIOD
Your personal data is retained for the period required by the relevant legislation or by the purpose of processing, and is deleted, destroyed or anonymised at the end of this period.

7. YOUR RIGHTS UNDER KVKK
Under Article 11 of KVKK, you have the right to:

• learn whether your personal data is processed and request information if so,
• learn the purpose of processing and whether it is used for that purpose,
• know the third parties in Turkey or abroad to whom it is transferred,
• request correction if it is incomplete or inaccurate,
• request deletion or destruction under the conditions of Article 7 of KVKK,
• request that correction, deletion and destruction be notified to third parties to whom the data was transferred,
• object to a result against you arising from analysis exclusively by automated systems,
• claim compensation for damages arising from unlawful processing.

You may withdraw your explicit consent at any time and unsubscribe from commercial electronic messages using the link in each message.

8. APPLICATION
You can submit requests regarding your rights in writing to the address above, or via your registered email address to hello@boudoir.ist, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application will be concluded free of charge within 30 days at the latest.

For more information, please see our Privacy Policy and Cookie Policy.