Privacy & Data Protection
A clear explanation of how we protect your personal data and what rights you have under Turkish data protection law.
Data controller
Personal data on this site is processed by Onurlu Tesbihane (Emek Mah. Yunartaş Sok. No: 49/A, Odunpazarı / Eskişehir) as data controller under Turkish Personal Data Protection Law no. 6698 ("KVKK").
What data do we process, and why?
You may order either as a member or as a guest, and you can also reach us over WhatsApp, by phone or by e-mail. The data we process for this purpose:
- Identity and contact details (name, phone, e-mail): to take the order, create your member account and communicate with you,
- Delivery / invoice address: so the item can be shipped,
- Order and payment details: to carry out the sale, track the order and meet statutory retention duties,
- Membership details (if you register): for your account, order history and saved addresses — your password is stored irreversibly hashed,
- Live support messages: to answer your enquiry.
Card payments are taken through the licensed payment provider PayTR. Your card details are never seen or stored by Onurlu Tesbihane; payment runs directly on PayTR's PCI-DSS compliant infrastructure with 3D Secure and SSL encryption. Only the minimum data needed to complete the payment is shared with PayTR, and only for that purpose.
Your data is not shared with third parties for marketing. It is transferred only to the carrier for delivery, to PayTR for payment, and to competent authorities where legally required.
Newsletter and commercial messages
Your e-mail address is stored for this purpose only if you subscribe yourself. Commercial electronic messages — campaign announcements, the welcome message, the post-purchase care guide, review invitations and personalised product suggestions — are sent only to those who gave that explicit consent. Having placed an order is not, on its own, consent to commercial messages.
Order confirmations, payment and shipping notices are not commercial messages; they are mandatory notifications sent to perform the contract and are independent of the newsletter.
Product suggestions are derived solely from your own order history and real sales data; no third-party profile data or advertising network is used. Every commercial message carries a one-click unsubscribe link at the bottom, and your opt-out is applied immediately. You can also end your subscription at any time by writing to onurlutesbihane@gmail.com.
Cookies and analytics
This site uses no advertising or profiling cookies. Only the following are present:
- Essential session cookie: technically required for site administration login; it does not affect visitors.
- Language and currency preference: stored to remember the language and currency you chose; it does not identify you.
- Visitor statistics (Google Analytics): we use Google Analytics (GA4) to understand which pages are visited and how often. The service may set a cookie to measure visit statistics and processes your IP address in truncated form; it is not used to identify you. The data is processed by Google under its own privacy and cookie policies.
Third-party content embedded in our pages — Google Maps, Google Fonts, YouTube — is also subject to those providers' cookie policies. You can block or delete cookies at any time in your browser settings.
Your rights
Under article 11 of the KVKK you have the right to learn whether your personal data is processed, to request information if it is, to have it corrected, erased or destroyed, and to object to a result reached against you solely through automated analysis of your data.
To exercise these rights you can e-mail us at onurlutesbihane@gmail.com or reach us through the channels on our contact page. Requests are answered within 30 days at the latest.
Security
Every page of this site uses an encrypted connection (HTTPS). Member passwords are stored irreversibly hashed. Card details are never held on our site; the payment step runs on PayTR's secure infrastructure. You will never be asked for a card number or password through any channel other than this site — if you receive such a request, disregard it and let us know.