Effective date: 24 September 2026 | Website: www.yigitaluminyumprofil.com
Scope
This policy explains how personal data is handled during visits to and purchases on www.yigitaluminyumprofil.com and in the communications you have with us for order and support purposes. “We” refers to the business owner MUSTAFA YİĞİT, who operates under the Yiğit Alüminyum Profil brand. The detailed data controller disclosures under the Personal Data Protection Law No. 6698 (KVKK) are set out in the KVKK Privacy Notice.
What information is used
During an order, information such as full name, contact details, delivery and invoice address, the products ordered, the transaction amount and the payment result is processed. Invoice identification details may be collected to the extent required for tax purposes. IP and device information, site access and security logs, and the requests and correspondence you send us are processed to the extent required by the service concerned. Mandatory fields are indicated separately; unnecessary personal information is not requested. No customer membership account is created.
Credit card payment is carried out through PayTR. The payment result, the transaction reference and the necessary payment records are used to track and refund the order. Card numbers, security codes, one-time passwords or bank account passwords are not requested by email or WhatsApp. Which party technically processes the card data is shown in the service provider notice on the payment screen.
Purposes of use
The information is used to take the order, complete payment and delivery, issue invoices, resolve cancellation and return requests, respond to requests and fulfil legal obligations. The purposes of ensuring transaction security and protecting our rights may also require necessary and proportionate data processing. Non-essential analytics and advertising technologies are run in line with your separate choice, the scope of which is explained.
In the current service, no campaign messages are sent by SMS, email or WhatsApp. Order, shipping, transaction security, refund and similar transactional notifications may be sent in order to carry out the service concerned; the addition of marketing content to these notifications is assessed separately.
Sharing with service providers
The site infrastructure is provided through Shopify; the payment service through PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. (PayTR); the shipping service through Aras Kargo; the bookkeeping service through BizimHesap Bilgi Sistemleri Sanayi Ticaret Anonim Şirketi (BizimHesap); and the e-document service through Logo Yazılım Sanayi ve Ticaret A.Ş. (eLogo). Only the data required for the task is transferred to these services. Depending on the order, the information needed for delivery may be given to a separately agreed carrier. Sharing with competent public authorities, the certified accountant and legal service providers is limited to the relevant transaction or legal requirement.
For the shop's location, the contact page and the footer contain a link to Google Maps. The map is not embedded in the site; no data is transmitted to Google unless you click the link.
When you use third-party channels such as WhatsApp, the service provider concerned may also process data within the scope of its own service. Alternative contact by email or telephone is possible. This statement does not remove the business's own responsibility for data processing and transfer.
Processing abroad and cookies
The use of the Shopify infrastructure and, if you so choose, of international services such as WhatsApp may require personal data to be processed abroad or accessed from abroad. Transfers of personal data abroad are subject to the conditions in Article 9 of Law No. 6698. This policy does not in itself constitute permission for a transfer abroad.
Only strictly necessary cookies are used on the site; they serve the purposes required for the site and the purchase process to function. No cookies are used for advertising, behavioural tracking or non-essential visitor analytics. Details are set out in the Cookie and Explicit Consent Notice.
Retention and deletion
Data is kept for as long as is necessary for the purpose of processing and under the relevant legislation. Completion of the order or the making of a deletion request does not automatically remove the part of the invoice, contract, payment and dispute records that must be retained by law. Data for which there is no longer a retention purpose or legal basis is deleted, destroyed or, where appropriate, anonymised. The detailed periods are explained in the KVKK Privacy Notice.
Security and user choices
For the security of personal data, the protections offered by the infrastructure used and the business's access permissions are managed together. Access is restricted to persons who need to access the data in the course of their duties; access and service provider settings are reviewed as needed. An absolute guarantee of security cannot be given for any service over the internet; this statement does not reduce our statutory security obligations.
You can view, delete or block cookies through your browser settings; you may apply to have your personal data rectified, to have it deleted where the conditions are met, and to exercise your other rights. The application methods are set out in the KVKK Privacy Notice. Contact address for privacy matters: info@yigitaluminyumprofil.com.
Changes
When the data processing activities change, this policy is updated and the effective date is stated. If a separate notice or explicit consent is required for a new purpose, the relevant process is carried out before the processing begins. An update does not take the place of an explicit consent that has not previously been given.