Privacy Notice

Data controller

The data controller under Law No. 6698 (KVKK) is Tunga Öke, Yeni Mahalle Mah. 3. Ülkü Sk. No: 10/1, 34290 Küçükçekmece / İstanbul, info@okecajon.com.

Data we process

• Identity and contact: name, email, phone.
• Delivery and billing: address, and for company invoices the company name, tax office and number.
• Orders: items, amounts, order and shipping status, notes, copies of the agreements you accepted, and for members saved addresses and favorites.
• Account: a one-way hash of your password (never the password itself); if you sign in with Google, your Google name, email and profile photo.
• Security: IP address, browser and session records.
• Site usage: pages you view and for how long, products added to your bag, where you came from (e.g. a search engine), device and browser type, and city-level location. No cookies are used and IP addresses are not stored; if you are signed in this is linked to your account, otherwise you cannot be identified. Sign-in and sign-up records (date, method, city) are kept too.
• Reviews: the rating, text and photos you submit for a product you bought. They are published with your name partly hidden (e.g. “C** D**”); your email, phone and order details are never shown, and file details such as location are removed from photos.
• We never process your card details; payments are taken directly by PayTR.

Purposes and legal grounds

We process your data to take, deliver and support your orders (performance of a contract), to meet invoicing and record-keeping duties (legal obligation), and to keep the site secure (legitimate interest).

We keep visit statistics to improve the site, its content and our product range (legitimate interest). Records are kept for up to 25 months; closing your account removes the link between your browsing records and you.

Reviews are published based on the consent you give when submitting them; you can ask us to remove your review at any time. The review invitation we send after delivery is based on our legitimate interest.

Recipients

Data may be shared, only as needed, with PayTR (payments), our carriers (delivery), our accountant (invoicing), our hosting and email providers (whose servers may be abroad, in line with Article 9 of the KVKK), and authorities when legally required.

Signing in with Google involves Google LLC (USA), which processes your name, email and profile photo for authentication. This transfer abroad is based on the explicit consent you give by pressing “Continue with Google”; you can always sign up with email and password instead.

On the order confirmation page a Google Customer Reviews window may appear. Only if you accept it there are your order number, email and estimated delivery date shared with Google LLC (USA) so it can send you a short survey; nothing is shared if you decline.

Retention and your rights

Order and invoice records are kept for 10 years as required by tax law; account data (including saved addresses and favorites) is kept while your account is open, and you can close your account at any time on the My account page. Under Article 11 of the KVKK you may request access, correction, deletion, and object to processing by writing to info@okecajon.com. We reply within 30 days.

Language

This English text is provided for information. The Turkish version is legally binding; in case of any discrepancy, the Turkish text prevails.