LEGAL PRIVACY DISCLOSURE

Privacy Policy & GDPR/KVKK Disclosure Text

Last Updated: July 2026

As Tarzı Hayal Mobilya ve Dekorasyon Sanayi ve Ticaret Anonim Şirketi ("Tarzı Hayal"), we attach the highest level of importance to the protection, privacy, and security of the personal data of our valued customers and users visiting www.tarzi-hayal.com and related digital platforms. In accordance with the Personal Data Protection Law No. 6698 ("KVKK") and GDPR standards, in our capacity as the "Data Controller", we process your personal data for the purposes and legal grounds described below.

1. Categories of Processed Personal Data

• Identity Information: Name, surname, identification number (in case of legal obligation for invoicing).
• Contact Information: Email address, phone number, delivery address, billing address.
• Customer Transaction Details: Order history, products added to cart, request/complaint records, furniture customization choices.
• Financial Information: Payment method preference, invoice details (Credit card details are fully encrypted by our secure payment gateway providers and are not stored by us).
• Transaction Security & Analytics: IP address, device type, browser information, site traffic logs, and cookie data.

2. Purposes and Legal Grounds of Personal Data Processing

Your personal data is processed based on the legal grounds specified in Articles 5 and 6 of the KVKK:

Processing Purpose	Legal Ground (KVKK Article 5)
Receiving orders, manufacturing custom furniture, and conducting White Glove Delivery and assembly	Directly related to the establishment and execution of a contract (Art.5/2-c)
Issuing e-invoices, taxation, and legal regulatory compliance	Fulfillment of the data controller's legal obligations (Art.5/2-ç)
Organizing interior architecture and personalized design appointments	Establishment of a contract (Art.5/2-c) & Legitimate interest (Art.5/2-f)
Sending newsletters, promotions, and special campaign offers (Marketing)	Explicit consent of the data subject (Art.5/1)

3. Data Sharing with Third Parties & Sharing Purposes

Your personal data may be shared with authorized third parties, within legal limits and solely for the purposes listed above:

• Logistics & Shipping Partners: Courier, transport, and delivery companies carrying out White Glove Delivery and installation (delivery address and phone number),
• Payment Gateway Providers: Licenced virtual POS and payment gateway providers (Iyzico, PayTR, etc.),
• Financial & Legal Consultants: Authorized accounting, independent audit, and legal advisors,
• Government Authorities: Ministry of Trade, Revenue Administration, and official judicial/administrative bodies.

4. Data Retention Periods

Your personal data is retained for 10 years in accordance with the Turkish Commercial Code, 5 years under the Tax Procedure Law, and 3 years under the Electronic Commerce Regulation Law. Upon expiry of the legal retention period or deletion/annulment of the processing purpose, your data is securely destroyed in line with legislation.

5. Your Rights as Data Subject

Under Article 11 of the KVKK (and GDPR standards), you may apply to our Company to exercise the following rights:

1. Learn whether your personal data is processed,
2. Request information if your personal data has been processed,
3. Learn the purpose of processing and whether it is used appropriately,
4. Know the third parties to whom data is shared domestically or abroad,
5. Request correction of incomplete or incorrect data, and request erasure/destruction of data.