SARAALMRGHLANY2 PRIVACY POLICY AND PERSONAL DATA NOTICE

This Privacy Policy and Personal Data Notice explains how SARAALMRGHLANY2 collects, uses, stores, shares, and protects your personal information when you visit, communicate with, or make a purchase through:

Website: https://saraalmrghlany2.com
(the “Site”)

This notice has been prepared with consideration of applicable data protection laws, including Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, the General Data Protection Regulation (“GDPR”).

1. DATA CONTROLLER

The data controller responsible for your personal data is:

Legal Company Name:
SARAALMRGHLANY GİYİM MODA TASARIM İTHALAT İHRACAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ

Brand / Store Name:
SARAALMRGHLANY2

Registered Address:
Başakşehir Mahallesi, Olimpiyat Bulvarı, Medikule F2 Blok, No: 2A, İç Kapı No: 7, Başakşehir / İstanbul, Türkiye

Trade Registry Number:
1146893

Tax Office:
Başakşehir Vergi Dairesi

Tax Identification Number:
7441241100

Telephone:
+90 552 886 22 80

Email:
saraalmrghlany2@gmail.com

2. PERSONAL INFORMATION WE COLLECT

Depending on how you use the Site, we may collect the following categories of personal information:

A. Identity and Contact Information

This may include:

  • Full name
  • Email address
  • Telephone number
  • Billing address
  • Shipping address
  • Country, city, district, and postal code
  • Information you provide when contacting customer service

B. Order and Transaction Information

This may include:

  • Products ordered
  • Size, color, and other product selections
  • Order number
  • Order date and status
  • Payment status
  • Invoice and billing information
  • Shipping and delivery information
  • Returns, complaints, or customer service requests

Payment transactions are processed through authorized banks, payment service providers, or Shopify-supported payment systems. We generally do not directly store your complete credit or debit card number.

C. Device and Usage Information

When you visit the Site, certain technical information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Time zone
  • Approximate location based on IP address
  • Pages and products viewed
  • Referring website or search terms
  • Date and time of visits
  • Interactions with the Site
  • Cookie and similar technology identifiers

D. Marketing and Preference Information

Where you have provided consent or where otherwise permitted by law, we may collect:

  • Email or SMS marketing preferences
  • Cookie preferences
  • Product interests
  • Responses to campaigns or advertisements
  • Information about your interaction with marketing communications

E. Communications

We may process information contained in communications sent through email, telephone, WhatsApp, social media, contact forms, or other customer support channels.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

  • Directly from you when you place an order, create an account, contact us, or subscribe to marketing communications
  • Automatically through cookies, pixels, server logs, and similar technologies
  • Through Shopify and applications connected to our online store
  • Through payment processors, banks, shipping companies, and logistics providers
  • Through advertising, analytics, or social media platforms where legally permitted

4. PURPOSES AND LEGAL BASES FOR PROCESSING

We may process your personal information for the following purposes:

A. Processing and Fulfilling Orders

We use your information to:

  • Process and confirm orders
  • Receive and verify payments
  • Prepare invoices
  • Package and ship products
  • Provide delivery and tracking information
  • Handle customer service, complaints, and legally applicable return or cancellation requests

The legal basis is the establishment or performance of a contract and compliance with legal obligations.

B. Customer Communication

We use your contact information to:

  • Answer questions
  • Provide order updates
  • Resolve delivery issues
  • Respond to complaints and requests
  • Provide size, product, and availability assistance

The legal basis is the performance of a contract, taking steps at your request, and our legitimate interest in providing customer support.

C. Fraud Prevention and Security

We may process personal information to:

  • Detect suspicious transactions
  • Prevent fraud and misuse
  • Protect the Site and customer accounts
  • Maintain information and transaction security

The legal basis is our legitimate interest in protecting our business and customers and, where applicable, compliance with legal obligations.

D. Legal and Accounting Obligations

We may process and retain information to:

  • Issue invoices
  • Maintain commercial and accounting records
  • Respond to lawful requests from courts, regulators, tax authorities, or other public authorities
  • Establish, exercise, or defend legal claims

The legal basis is compliance with applicable legal obligations and the establishment, exercise, or protection of legal rights.

E. Website Improvement and Analytics

Subject to applicable cookie and consent requirements, we may use technical and usage information to:

  • Understand how visitors use the Site
  • Improve website performance
  • Identify technical problems
  • Evaluate products and marketing campaigns
  • Improve the customer experience

Where required by law, analytical cookies will only be activated after you provide consent.

F. Marketing Communications and Targeted Advertising

Where you have provided consent, we may use your information to:

  • Send promotional emails or messages
  • Inform you about new products, campaigns, or offers
  • Display personalized advertisements
  • Measure advertising performance

You may withdraw your marketing consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. COOKIES AND SIMILAR TECHNOLOGIES

The Site may use cookies, pixels, tags, local storage, and similar technologies.

Cookies may be categorized as:

  • Strictly necessary cookies
  • Functional cookies
  • Performance and analytics cookies
  • Advertising and targeting cookies

Strictly necessary cookies are used to operate the Site, maintain the shopping cart, process checkout, provide security, and remember privacy choices.

Where required by applicable law, functional, analytical, advertising, and targeting cookies will not be activated until you provide consent through the cookie banner or privacy settings.

You may accept, reject, or manage non-essential cookies through the cookie settings available on the Site. You may also change your browser settings to block or delete cookies. Blocking certain cookies may affect some Site functions.

For more detailed information, please review our separate Cookie Policy, where available.

6. HOW WE SHARE PERSONAL INFORMATION

We may share personal information only where necessary and permitted by law with the following recipient groups:

A. E-Commerce and Hosting Providers

Our online store is hosted and operated using Shopify. Shopify may process personal information to provide hosting, checkout, security, analytics, fraud prevention, and related e-commerce services.

B. Payment Providers and Banks

Payment and transaction information may be shared with authorized payment processors, banks, card networks, and financial service providers for payment processing, verification, refunds, and fraud prevention.

C. Shipping and Logistics Providers

Your name, telephone number, address, order, and delivery information may be shared with shipping and logistics providers, including providers such as FedEx, Almanara Cargo, or another carrier selected according to the destination.

D. Technology and Professional Service Providers

We may share limited information with service providers that assist with:

  • Website operation
  • Cloud storage
  • Cybersecurity
  • Email or customer communications
  • Accounting
  • Legal services
  • Technical support
  • Analytics and advertising, where consent has been provided

These providers may only process information for the relevant service and subject to applicable contractual and legal safeguards.

E. Public Authorities and Legal Parties

We may disclose personal information where required to:

  • Comply with applicable laws or regulations
  • Respond to a court order or lawful government request
  • Protect our legal rights
  • Prevent fraud or unlawful activity
  • Establish, exercise, or defend legal claims

We do not sell customers’ personal information in exchange for money.

7. INTERNATIONAL DATA TRANSFERS

Because we use international service providers such as Shopify, payment processors, cloud service providers, logistics companies, or advertising platforms, personal information may be processed or stored outside Türkiye or outside your country of residence.

Such transfers will be carried out in accordance with applicable data protection legislation and, where required, using appropriate safeguards, contracts, standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

International service providers may operate in countries including Canada, the United States, and European countries.

8. DATA RETENTION

We retain personal information only for as long as necessary for the purposes described in this Policy and for the periods required under applicable commercial, tax, accounting, consumer protection, and other legislation.

Order, invoice, payment, and transaction records may be retained for the legally required record-keeping period, even if you request deletion.

When personal information is no longer required and there is no legal reason to retain it, it will be deleted, destroyed, or anonymized in accordance with applicable law.

9. DATA SECURITY

We take reasonable administrative, technical, and organizational measures designed to protect personal information against:

  • Unauthorized access
  • Unlawful processing
  • Accidental loss
  • Alteration
  • Disclosure
  • Destruction or misuse

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for keeping any account password or access information confidential.

10. YOUR RIGHTS UNDER TÜRKİYE’S KVKK

Under Article 11 of Law No. 6698, you may have the right to:

  • Learn whether your personal data is being processed
  • Request information if your personal data has been processed
  • Learn the purpose of processing and whether the data is used in accordance with that purpose
  • Learn the third parties to whom your data has been transferred in Türkiye or abroad
  • Request correction of incomplete or inaccurate personal data
  • Request deletion or destruction where the applicable legal conditions are met
  • Request that corrections, deletions, or destruction be communicated to third parties to whom the data was transferred
  • Object to an unfavorable result arising exclusively from automated analysis
  • Request compensation if you suffer damage due to unlawful processing

To exercise these rights, you may submit a request using the contact details provided below.

Requests must contain sufficient information to verify your identity and understand your request. We will respond as soon as possible and no later than 30 days, subject to applicable law.

Certain requests may be refused where retaining or processing the information is legally required or where another lawful exception applies.

11. RIGHTS OF EEA, UK, AND SWISS RESIDENTS

Where the GDPR or similar legislation applies, you may have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion
  • Restrict processing
  • Object to certain processing
  • Receive your information in a portable format
  • Withdraw consent at any time
  • Lodge a complaint with the competent data protection authority

The lawful bases we may rely on include:

  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests
  • Your consent

Withdrawal of consent does not affect processing carried out lawfully before the withdrawal.

12. MARKETING COMMUNICATIONS

You may unsubscribe from promotional emails by using the unsubscribe option contained in the communication or by contacting us.

You may also withdraw consent for promotional SMS, WhatsApp, or other electronic communications by contacting us through the details below.

Order confirmations, shipping updates, security notices, and other service-related communications are not promotional and may still be sent when necessary to complete your order or comply with legal requirements.

13. THIRD-PARTY LINKS

The Site may contain links to third-party websites, social media pages, payment services, or other platforms.

We are not responsible for the privacy practices of third parties. We recommend reviewing their privacy policies before providing personal information.

14. CHILDREN’S PRIVACY

The Site and our products are not directed to children under the age at which they can legally enter into online transactions in their country.

We do not knowingly collect personal information from children without authorization from a parent or legal guardian. If you believe a child has provided us with personal information unlawfully, please contact us.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in:

  • Our business practices
  • The services and applications we use
  • Legal or regulatory requirements
  • Website functions

The updated version will be published on the Site with a revised “Last updated” date. Material changes may also be communicated through appropriate channels where required.

16. CONTACT US

For questions, complaints, or requests concerning your personal information, please contact:

SARAALMRGHLANY GİYİM MODA TASARIM İTHALAT İHRACAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ

Address:
Başakşehir Mahallesi, Olimpiyat Bulvarı, Medikule F2 Blok, No: 2A, İç Kapı No: 7, Başakşehir / İstanbul, Türkiye

Email:
saraalmrghlany2@gmail.com

Telephone:
+90 552 886 22 80

Please write “Personal Data Request” or “KVKK Request” in the subject line and include sufficient information for us to verify your identity and process your request.