Privacy policy

This privacy policy explains how your personal data is processed when you visit shopiuzman.com, use the forms on the site, book a call or contact us. Your personal data is processed by Shopiuzman (Halk Caddesi No:21/11, Üsküdar, Istanbul, Türkiye · info@shopiuzman.com) as the data controller under Turkish Personal Data Protection Law No. 6698 (KVKK).

For visitors from the European Economic Area, Switzerland or the United Kingdom, this policy is also written to meet the information requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR and related national laws. Details about cookies are in our cookie policy.

Information you share in our forms. In the store audit, contact, callback, support request and similar forms: your name, email address, phone number, store URL (domain), your current e-commerce platform, your message and your answers to the other fields in the form. This also covers screenshots and files you choose to upload with a support request. Please don't enter sensitive personal data (such as health, beliefs or biometric data) in our forms.

Information generated automatically for security. The time a form was submitted, the page it was sent from and your IP address. Your IP address is stored only as a one-way hash, to prevent abuse and excessive submissions. Our hosting provider may briefly process requests to the site as technical logs (such as IP address, browser and device information, and request time) for security and service continuity.

Booking information. When you book an online call, the name, email address and time slot you enter in the booking calendar are passed to us through Google Calendar's appointment scheduling service.

Communication channels. When you contact us by email, phone or WhatsApp, your contact details and the content of your messages.

Analytics and marketing data. Only if you give consent in the cookie notice: usage data such as the pages you visit, where you came to the site from, and device and browser information. See our cookie policy for details.

• To reply to your request, prepare your free store audit and send you the results,
• To contact you through the channel you prefer (email, phone or WhatsApp) and arrange calls and meetings,
• To prepare quotes, hold pre-contract discussions and provide services to our clients,
• To review support requests and the files you send, and resolve issues,
• To send you an email confirming that your form was received,
• To keep the site and its forms secure and prevent automated (bot) submissions and abuse,
• If you consent, to measure how the site is used and evaluate the effectiveness of our ad campaigns,
• To meet our legal obligations and respond to requests from authorised bodies.

We don't use your form details to send bulk marketing emails or text messages without your explicit consent.

We process your personal data on the following legal bases:

• Entering into or performing a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)): replying to your request, audits, quotes, bookings and service delivery,
• Legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)): security of the site and forms, preventing abuse, and essential technical operations,
• Legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)): retention and reporting obligations under applicable law,
• Establishing, exercising or defending legal claims (KVKK Art. 5/2-e): using records in the event of a dispute,
• Consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)): analytics and marketing cookies and the international transfers linked to them. You can withdraw your consent at any time.

We don't sell or rent your personal data or share it with third parties for advertising. To run the site, we use the following service providers, acting on our behalf as data processors and only to the extent technically necessary:

• Cloudflare, Inc.: hosting and content delivery for the site, the database and storage where form submissions and uploaded files are kept, attack and abuse protection, and Cloudflare Turnstile bot verification on our forms,
• Resend: delivery of form notifications and the confirmation emails sent to you,
• Google LLC / Google Ireland Ltd.: Google Calendar appointment scheduling; and, only if you consent, Google Analytics and Google Tag Manager,
• Meta Platforms Ireland Ltd.: only if you consent, Meta Pixel; and the WhatsApp service if you choose to message us on WhatsApp.

Beyond these, your data may be shared with our legal and accounting advisers where necessary and under a duty of confidentiality, and with public authorities only where there is a legal request or obligation.

The servers of the service providers listed above may be located outside Türkiye, in particular in the European Union and the United States, so your personal data may be transferred abroad. Transfers are made in line with the conditions and safeguards set out in Article 9 of the KVKK (such as standard contracts) and, for visitors covered by the GDPR, on the basis of European Commission adequacy decisions or standard contractual clauses. Transfers made through analytics and marketing tools are based on your consent.

We keep your personal data only for as long as needed for the purposes it was collected for. Request and form records are kept after your request is resolved for the periods required by law and the limitation periods that apply to possible disputes. If a client relationship is established, records relating to the contract and services are kept for the periods required by commercial and tax law. When the period ends or there's no longer a valid reason to keep it, your data is deleted, destroyed or anonymised. Retention periods for analytics and marketing cookies are set out in our cookie policy.

We apply appropriate technical and organisational measures to protect your data. All connections between the site and your browser are encrypted with HTTPS; forms are protected by bot verification and rate limiting; and IP addresses are stored in hashed form. Only authorised Shopiuzman staff can access form submissions and uploaded files, and access to the admin panel is protected by personal accounts, secure session cookies and an option for two-step verification. No transmission over the internet is completely risk-free, so please don't share passwords or payment details in our forms.

Under Article 11 of the KVKK, you have the right to:

• Find out whether your personal data is processed,
• Request information about the processing if it is,
• Find out the purpose of processing and whether your data is used for that purpose,
• Know the third parties in Türkiye or abroad to whom your data is transferred,
• Ask for incomplete or inaccurate data to be corrected,
• Ask for your data to be deleted or destroyed under the conditions in Article 7 of the KVKK,
• Ask for corrections, deletions and destruction to be notified to the third parties your data was transferred to,
• Object to an outcome against you that results solely from automated analysis of your data,
• Claim compensation if you suffer damage because of unlawful processing.

Visitors covered by the GDPR can also exercise the rights of access, rectification, erasure, restriction of processing, data portability and objection, withdraw consent at any time for processing based on consent, and lodge a complaint with the data protection supervisory authority in their country.

You can send requests by email to info@shopiuzman.com or in writing to Halk Caddesi No:21/11, Üsküdar, Istanbul, Türkiye. Please include enough information for us to verify your identity and a clear description of your request. Requests are handled free of charge within thirty days at the latest, depending on their nature; if the request involves an additional cost, the fee set by the Turkish Personal Data Protection Board may apply. If your request is rejected, you find our response insufficient or we don't respond in time, you can complain to the Turkish Personal Data Protection Board.

Our services are aimed at businesses and online store owners. We don't knowingly collect personal data from anyone under 18. If we find out that we hold such data, we delete it.

We may update this policy to reflect changes in the law, in the service providers we use or in how we process data. The current version is always published on this page, and the "Last updated" date at the top is changed. We also announce significant changes on the site.

For any questions about this policy or your personal data, contact us at info@shopiuzman.com or at Halk Caddesi No:21/11, Üsküdar, Istanbul, Türkiye.