Privacy Policy / Personal Data Protection Notice
1. Data Controller
[SKYKREST LOJİSTİK GIDA İTHALAT VE İHRACAT LİMİTED ŞİRKETİ], operating as YeşilGüzellik, with registered address at [MASLAK MAH. MASLAK MEYDAN SK. BEYBI GIZ PLAZA A BLOK NO: 1 İÇ KAPI NO: 55 SARIYER / İSTANBUL] and MERSIS number [0772137255000001], is the Data Controller under KVKK (Law No. 6698).
Email: ygbathritual@gmail.com | Phone: +90 539 447 79 48
2. What Personal Data We Collect
Identity data: Name, surname
Contact data: Email address, phone number, delivery address
Transaction data: Order history, purchased products, payment information (processed securely via iyzico — we never store card numbers)
Usage data: Pages visited, browser type, IP address, cookies (see Cookie Policy)
Communication data: Messages sent via the contact form or email
3. Why We Process Your Data & Legal Basis
Purpose Legal Basis (KVKK Art. 5)
Processing and fulfilling your order Performance of a contract
Sending order confirmation and shipping updates Performance of a contract
Processing payments via iyzico Performance of a contract / legal obligation
Handling returns, refunds, and complaints Legal obligation & legitimate interest
Sending marketing emails (newsletter) Explicit consent
Improving our website (analytics) Legitimate interest / consent (cookies)
Complying with tax and legal obligations Legal obligation
4. Who We Share Your Data With
Payment processors: iyzico — for secure payment processing only
Shipping partners: [e.g., PTT Kargo, Yurtiçi Kargo, Aras Kargo] — to deliver your order
Website platform: Wix.com — for website hosting and e-commerce functionality
Email service: Google (Gmail) — for customer communications
Legal authorities: When required by Turkish law
We do not sell, rent, or trade your personal data with third parties for marketing purposes.
5. Data Retention
We retain your personal data only for as long as necessary: order and invoice data is kept for 10 years as required by Turkish tax law; marketing consent data is kept until you withdraw consent; website usage data is kept for up to 2 years.
6. Your Rights Under KVKK (Article 11)
You have the right to:
Learn whether your personal data is being processed
Request information about the purpose of processing
Know to whom your data has been transferred
Request correction of incomplete or incorrect data
Request deletion or destruction of your data
Object to processing that results in an unfavorable outcome
Request compensation for damages caused by unlawful processing
To exercise these rights, contact us at: yg.bath.ritual@gmail.com or [KEP address if applicable]. We will respond within 30 days.
7. Security
We implement appropriate technical and organizational measures to protect your personal data. All payment transactions are processed through PCI-DSS compliant payment providers (PayTR / iyzico).
Our website uses SSL encryption (HTTPS).
8. Changes to This Policy
We may update this policy. The latest version will always be available on this page.
Last updated: [11.06.2026].