Privacy Policy and Personal Data Notice

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller for personal data collected through karyxa.com is set out below.

Data Controller

Uzm. Dr. Şerafettin Saraçoğlu

Address

Harbiye Mahallesi, Teşvikiye Caddesi No: 37/2, Şişli / İstanbul

Email

info@karyxa.com

Phone

0212 234 34 74

Depending on how you use our site, the following data is processed:

• Identity and contact: name, surname, email address, phone number
• Delivery: address, province, district, postal code
• Order: order number, product and amount details, order history
• Transaction security: IP address, browser information, session records

Your card details are never seen, processed or stored by us. Payments are handled through the secure infrastructure of a licensed payment institution and card data is sent directly to that institution.

Your personal data is processed for the following purposes:

• Receiving, preparing and delivering your order
• Carrying out payment transactions and invoicing
• Creating and managing your member account
• Handling returns, cancellations and customer support requests
• Meeting legal obligations (tax, commercial and consumer legislation)

These activities rely on the legal grounds of formation and performance of a contract, compliance with a legal obligation and legitimate interest under Article 5/2 of the KVKK. Marketing emails are sent only with your explicit consent and you may opt out at any time.

Your data is transferred only as required by the service and limited to that purpose, to the following parties:

• Payment institution: to take and verify payment
• Courier company: name, address and phone, so delivery can be made
• Infrastructure providers: site and database hosting services
• Competent public authorities: upon lawful request and to the extent required by legislation

Your personal data is never sold or rented to third parties for marketing purposes.

Your personal data is kept for as long as the purpose of processing requires and for the limitation periods set out in the relevant legislation. Order and invoice records are retained for 10 years as required by tax legislation. Once the period expires, the data is deleted, destroyed or anonymised.

The cookies used on our site fall into three groups:

Strictly necessary cookies. They keep your session, language preference and cart. Signing in and placing an order do not work without them. As they are necessary for the service to be provided, they are not subject to explicit consent under Article 5/2-c of Law No. 6698.

Analytics cookies. Used to measure which pages are visited, in aggregate and without identifying you. They run only if you give explicit consent.

Marketing cookies. Used to show more relevant advertising and to measure advertising performance. They run only if you give explicit consent.

From the cookie banner shown on your first visit you can accept each category separately or reject them all. You may withdraw your consent at any time: the “Your cookie preferences” link at the bottom of the page reopens your choices. You can also delete or block cookies from your browser settings; in that case some functions of the site may stop working.

Your cart contents and cookie preference are kept in your browser's local storage and are not sent to our servers.

Communication across the site is encrypted with SSL/TLS. Database access is restricted by row-level security rules; users can only reach their own data. Passwords are stored as irreversible hashes.

Under Article 11 of the KVKK, by applying to the data controller you may:

• Learn whether your personal data is being processed
• Request information if it has been processed
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom it is transferred, in Türkiye or abroad
• Request correction if it has been processed incompletely or incorrectly
• Request deletion or destruction where the conditions are met
• Object to a result against you arising from analysis carried out solely by automated systems
• Claim compensation if you suffer loss due to unlawful processing

To exercise your rights you may send your requests to info@karyxa.com. Applications are concluded free of charge within 30 days at the latest.

Any changes to this notice take effect on the date they are published and are updated on this page.