Privacy Policy

Privacy Policy

Last updated: 05.10.2026

This is an English translation provided for information; in case of any discrepancy, the Turkish version prevails.

As [COMPANY TITLE — to be completed] ("The Gloria Atelier", "the Company", "we"), we attach great importance to the privacy and security of your personal data. This Privacy Policy explains how the personal data of users who visit our website (reachable via thegloriaatelier[at]gmail.com) and use our services is processed under the Turkish Personal Data Protection Law No. 6698 (KVKK) and related legislation.

1. Data Controller

Title: [COMPANY TITLE — to be completed]
Address: Yenişehir Mah. Gazze Cad. No:42/B Meram / Konya, Türkiye
Phone: +90 533 332 03 60
E-mail: thegloriaatelier[at]gmail.com
MERSIS: [MERSIS NO — to be completed]

2. Personal Data Processed

The following personal data is processed as provided by you:

• Identity: Name, surname, date of birth, gender (optional, during membership)
• Contact: E-mail address, mobile phone, delivery and billing addresses
• Customer transactions: Order history, invoice details, payment method (card details are not stored; they are processed by the payment institution)
• Transaction security: Password (hashed), IP address, session information, cookie data
• Marketing: Shopping preferences and interests, if you give explicit consent

3. Purposes of Processing

Your personal data is processed for the following purposes:

• Creating and managing membership
• Carrying out order, payment, invoicing and delivery processes
• Customer service, support and complaint management
• Processing return and exchange requests
• Fulfilling legal obligations (tax, commercial and consumer law)
• Preventing fraud and ensuring website security
• With your explicit consent: Notifications about campaigns, discounts and new products

4. Legal Grounds for Processing

Your personal data is processed on the following legal grounds under Articles 5 and 6 of the KVKK:

• Establishment and performance of a contract (membership, sales contract)
• Fulfilment of a legal obligation (tax, distance contracts regulation, KVKK)
• Legitimate interests of the data controller (security, fraud prevention)
• Explicit consent (marketing communications, cookies)

5. Transfer of Data

Your personal data may be shared with the following parties only to the extent necessary to carry out the service:

• Cargo and logistics companies: Name, phone and address for delivery
• Payment institutions (POS and virtual POS providers): For payment processing
• E-invoice/e-archive providers: For issuing legal invoices
• Authorised public institutions: Upon legal request
• Software service providers: Hosting, e-mail and analytics (on servers in Türkiye)

Your data is not transferred abroad. If a transfer becomes necessary, your explicit consent will be obtained in accordance with Article 9 of the KVKK.

6. Retention Periods

• Membership data: While the membership is active + 10 years after deletion (Turkish Commercial Code)
• Order and invoice data: 10 years (Tax Procedure Law)
• Marketing permissions: Until consent is withdrawn
• Cookie data: Depending on the cookie type (up to 12 months)

7. Your Rights under Article 11 of the KVKK

As a data subject, you have the right to:

• Learn whether your personal data is processed
• Request information about the processed data
• Learn the purpose of processing and whether the data is used in line with that purpose
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of the data under the conditions set out in Article 7 of the KVKK
• Request that corrections/deletions be notified to third parties to whom the data was transferred
• Object to a result against you arising from analysis of the data exclusively by automated systems
• Claim compensation for damages arising from unlawful processing

8. Applications

To exercise the rights above, you may send your application together with documents proving your identity to:

• E-mail: thegloriaatelier[at]gmail.com
• Post: Yenişehir Mah. Gazze Cad. No:42/B Meram / Konya, Türkiye
• KEP (registered e-mail): [KEP ADDRESS — to be completed]

Applications are concluded within 30 days in accordance with Article 13 of the KVKK.

9. Data Security

Industry-standard measures are taken to keep your data secure:

• Data transmission with SSL/TLS encryption
• Storing passwords with one-way hashing algorithms
• Authorisation and access controls
• Regular security and penetration tests
• KVKK awareness training for staff

10. Changes

This Privacy Policy may be revised in line with legislative changes or updates to our services. The current version is always published on this page.