Privacy & KVKK Notice

1. Data Controller

Data Controller: Estensivo, Halide Edip Adıvar Mah. Balcı Sk. No:4 Şişli/İstanbul. Contact: info@estensivo.com, +90 (212) 221 97 12.

2. Personal Data We Collect

• Identity data (name, surname, national ID when required)
• Contact data (phone, e-mail, billing and delivery addresses)
• Payment data (masked card details, transaction ID, iyzico reference)
• Transaction security data (IP address, session logs, device info)
• Customer transaction data (order details, returns, support tickets)

3. Purposes of Processing

Your information is processed for:

• Receiving orders, collecting payments and delivering products
• Handling customer service, return and exchange requests
• Meeting legal obligations and providing information to authorities
• Preventing fraud and unauthorized transactions
• Sending marketing communications only where consent is provided

4. Data Transfers

Data may be shared within the limits of applicable law with the following parties:

• iyzico Payment Services Inc. for payment processing
• Courier and logistics partners to deliver your order
• Authorized public bodies and auditors upon lawful request
• Technology, marketing or consultancy partners bound by confidentiality agreements

5. Collection Methods & Legal Grounds

Data is collected via our e-commerce platform, customer support channels and physical documents when needed.

• KVKK art.5/2-c: Necessity for concluding or performing a contract
• KVKK art.5/2-ç: Compliance with our legal obligations
• KVKK art.5/2-f: Legitimate interest grounds provided it does not harm fundamental rights
• Express consent for marketing activities requiring approval

6. Your Rights

Under article 11 of KVKK you may exercise these rights:

• Learn whether your data is processed
• Request information on processing purposes and their compliance
• Know the domestic/foreign third parties to whom data is transferred
• Request correction if data is incomplete or inaccurate
• Request deletion or destruction within the legal limits
• Object to outcomes arising from automated processing
• Claim compensation if you incur damages

7. Data Security & Retention

• Identity, contact and payment records are retained for 10 years pursuant to commercial legislation.
• Electronic commerce traffic logs are stored for 3 years.
• After statutory periods, data is anonymized or securely destroyed.
• We implement TLS encryption, strict access control and intrusion detection to protect data.

8. How to Contact Us

Send your KVKK requests to info@estensivo.com with the subject “KVKK Request” or mail a signed petition to Halide Edip Adıvar Mah. Balcı Sk. No:4 Şişli/İstanbul. We respond within 30 days at the latest.