PRIVACY AND PERSONAL DATA PROTECTION POLICY

1. DATA CONTROLLER AND INTRODUCTION

This Privacy Policy, ytshisha.com ((hereinafter referred to as the “Site”) sets forth the procedures and principles regarding the processing of personal data shared by users/visitors during their use of the services provided through the Site. The data controller is located at Avcılar, Istanbul YT Shisha It is a company.

2. WHAT DATA DO WE PROCESS?

YT Shisha collects the following data based on the user's declaration:

Identification Information: First name, last name, Turkish ID number (if required for the invoice).
Contact Information: Email address, phone number, shipping and billing addresses.
Customer Transaction Information: Order history, shopping cart information, and promotional code usage information.
Transaction Security Information: IP address, website login and logout information, password information (encrypted).
Marketing Information: Interests and shopping habits collected through cookies.

3. PURPOSES OF DATA PROCESSING

Your collected data is processed for the following purposes:

Fulfillment of our contractual obligations and shipment of your orders.
Management of billing and accounting processes.
Measuring customer satisfaction and providing after-sales support services.
Preventing fraud and ensuring cybersecurity.
Responding to requests for information from legal authorities.
If you have given your consent to receive commercial electronic communications, we will notify you of new collections, discounts, and promotions tailored just for you.

4. TRANSFER OF DATA TO THIRD PARTIES

Your personal data is shared only with our business partners as necessary to provide the service:

Logistics Partners: We work with shipping companies (e.g., Yurtiçi, Aras, MNG, etc.) for product delivery.
Payment Services: Third-party payment providers for payment security and collection (e.g., Iyzico, PayTR).
Legal Authorities: Judicial and administrative authorities, in cases where it is required by law.
Digital Infrastructure: Cloud computing companies that provide data storage and server services.

5. PAYMENT SECURITY (SSL)

On our website, your credit card and debit card information is stored directly on YT Shisha's servers is not being held. All financial transactions take place between the bank and your browser using 256-bit SSL (Secure Sockets Layer) encryption. None of our employees or third parties can view your card information.

6. YOUR RIGHTS UNDER THE KVKK

6698 Under the provisions of the [number] Act, as a data subject, you have the following rights:

To find out whether your data is being processed,
If it has been processed, request information regarding this,
Verifying whether the data is being used in accordance with the purpose of its processing,
Knowing the recipients to whom it was transferred, whether domestically or abroad,
Request that it be corrected if it is incomplete or has been processed incorrectly,
Request that the data be deleted or destroyed once the reasons for its processing no longer exist.

7. DATA RETENTION PERIOD

Your personal data is retained for the periods specified by law (such as 10 years under the Tax Procedure Law) or for as long as necessary to fulfill the purpose of processing. Once this period expires, your data will be destroyed or anonymized.

8. CONTACT AND APPLICATION

Please contact us with any questions or claims regarding our policy:

Email: [[Your Email Address]
Address: Avcılar / Istanbul
WhatsApp Support: [[Your WhatsApp Number]

Last Updated: March 9, 2026