Privacy policy

Data controller

Vera Danışmanlık Limited Şirketi is the data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK).

Data we process and why

When you order, your name, shipping address, phone number and e-mail address are processed to prepare, ship and invoice your order.

Your payment details are not sent to us; they are processed on the payment provider's own system.

Cookies: essential cookies are used to run the site. Statistics and marketing cookies only run with your explicit consent, which you can change at any time from the cookie banner or the "Cookie preferences" link at the bottom of the page.

Measurement and advertising tools

If you allow statistics cookies, your visit and purchases (products viewed, products added to the cart, order amount) are sent to the site's analytics tool (e.g. Google Analytics). If you allow marketing cookies, the same information is sent to advertising platforms (e.g. Google Ads, Meta, TikTok) for ad measurement. The servers of these tools may be outside Türkiye.

If you allowed marketing cookies, your order may also be reported to Meta from our server for ad measurement. In that report your e-mail, phone, name and city are sent as an irreversible one-way hash (SHA-256), and your IP address and browser information as they are.

Legal basis: your explicit consent (KVKK art. 5/1 and art. 9 for transfers abroad). If you do not consent, none of these tools is loaded and nothing is reported from the server; your shopping is not affected.

Measurement data attached to the order (consent status, IP, browser, ad cookies) is stored encrypted and deleted together with your recipient details.

Offer and news e-mails are only sent with your explicit consent (Turkish Law No. 6563). The consent box is unticked by default; consent given at the bottom of the page is only valid after you confirm it with the link sent to your e-mail.

The consent text, time and source are kept as proof; your e-mail address is stored encrypted. Consents are reported to the Turkish Message Management System (IYS) as required by law.

You can withdraw your consent at any time with the unsubscribe link in every e-mail, from your account or by writing to us. After you withdraw, no messages are sent to you; the consent and withdrawal records are kept for the period required by law.

Legal basis: your explicit consent (KVKK art. 5/1, Law No. 6563 art. 6).

Product reviews

When you write a review, your name, rating, headline and text are published on the product page after the seller approves it. Your e-mail address is not published; it is stored encrypted and used only to verify your purchase and to contact you if needed.

A review is kept while it is published; a rejected review is deleted after 30 days. You can ask for your review to be removed at any time. Legal basis: your explicit consent (KVKK art. 5/1).

Back-in-stock notices

When you leave your e-mail for a sold-out product, your address is stored encrypted and used only to notify you once when that product is back in stock.

A notified request is deleted after 30 days, an unnotified one after 180 days. Legal basis: pre-contractual information at your request (KVKK art. 5/2-c).

Offers and coupons

When you use an offer or coupon, we record which offer and coupon code was used in which order and the discount it gave. The purpose is to apply the offer conditions (per-person limit, first-order-only discount, single-use codes) and to prevent misuse.

When you shop without an account, these conditions are checked with your e-mail address. For this we store an irreversible one-way hash of your e-mail address, not the address itself. If you have an account, the same check is done through your account.

Legal basis: the offer conditions are part of the sales contract, so the formation and performance of the contract (KVKK art. 5/2-c) and our legitimate interest in preventing misuse (KVKK art. 5/2-f).

Offer usage records and the e-mail hash are kept with the order's accounting record for the legal retention period and deleted afterwards. Recipient details such as your name, address and phone are deleted shortly after the order regardless of this.

If you enter a wrong coupon code several times in a row, an irreversible hash of your IP address is kept for at most 1 day to prevent code guessing, and then deleted.

This data is not shared with third parties; transfers required by the order, such as payment and shipping, are limited to those described above.

Your rights

To use your rights under article 11 of KVKK, you can write to info@leatherproducts.store.

Your request is answered within 30 days at the latest.