Privacy Policy
At karincalisans.com we care about the privacy of our visitors and customers. This policy summarises what personal data we collect, how we use it, who we share it with and how we protect it.
For the detailed explanation of how your personal data is processed, please see our Privacy Notice (KVKK Disclosure); for retention periods, see our Data Retention and Destruction Policy.
1. Data Controller
Your data is processed by Karinca Digital Ltd (Company No: 17132515, Office 18167, 182–184 High Street North, East Ham, London, United Kingdom, E6 2JA) acting as data controller. Contact: info@karincalisans.com
2. Information We Collect
- Contact details such as first name, surname, email address and phone number,
- If you create an account, your account details and an irreversible hash of your password — the password itself is never stored,
- Order history, delivered product details, coupon and points activity, favourites, product reviews,
- Company name, tax number and tax office when you request a business invoice,
- For security purposes, the IP address recorded at sign-up and login attempt records,
- Browsing data collected through cookies (only within the scope of your consent).
Your card details are never stored on our systems. Payment data is sent directly to a PCI-DSS compliant payment provider.
3. Purposes and Legal Grounds
We process your data to take and deliver your order, manage your membership, issue invoices and comply with statutory obligations, ensure account security, improve our services and — only if you consent — send campaign and reminder messages. The legal ground for each purpose is set out in a table in our Privacy Notice.
4. Cookies
Strictly necessary cookies are required for the site to function. Analytics and advertising cookies run only with your explicit consent; if you do not consent, they are not loaded. You may withdraw your consent at any time — see our Cookie Policy.
5. Sharing and Transfers Abroad
Your personal data is shared with payment providers, our email delivery infrastructure, our hosting provider and (with your consent) analytics/advertising services, strictly to the extent required to deliver the service. Some of these providers are established outside Türkiye; the data transferred, the recipients and the countries are listed in the transfer table in our Privacy Notice. Apart from lawful requests by competent public authorities, your data is not shared with third parties and is never sold.
6. Data Security
All traffic is encrypted with HTTPS; passwords are stored using irreversible algorithms; direct external access to the database is closed; a firewall, a content security policy (CSP) and regular backups are in place. Even so, no transmission over the internet can be guaranteed to be 100% secure.
7. Retention and Destruction
Your data is kept only for as long as necessary; expired data is erased by an automated periodic destruction process. Detailed table: Data Retention and Destruction Policy.
8. Your Rights
All of your rights under Article 11 of the KVKK (including requesting information, rectification, erasure, learning the third parties data is transferred to, objecting to automated analysis and claiming compensation) are listed in our Privacy Notice. You can submit your application following the procedure on our Data Subject Request Form page; your request will be concluded free of charge within 30 days.
If you are a member, you can also delete your account and the associated personal data yourself from the Account Details page.
9. Children's Privacy
Our services are not directed at persons under 18 and we do not knowingly collect personal data from them.
10. Changes
This policy may be updated when necessary; the current version is always published on this page.
Last updated: 3 August 2026