Privacy Policy

1. Information We Collect

When you use our platform, we collect the following information:

• Account and order details: full name, phone number, email address, delivery and billing address.
• Order and transaction history: orders you have placed, cart contents, and your requests.
• Wakalah/proxy information: the full names of individuals on whose behalf a sacrificial animal is to be slaughtered.
• Technical data: IP address, browser and device information, cookie data.

2. How We Use Your Information

• To receive your orders, fulfil the Adak/Qurbani and wakalah service, and arrange delivery,
• To manage your account and communicate with you,
• To meet our legal and financial obligations (invoicing, accounting),
• To resolve your requests and complaints and to improve our service quality,
• To send you promotional and announcement messages — only if you have given your consent.

3. Sharing of Information

We do not sell your personal data. Your data is shared only to the extent required by the service: with payment institutions, shipping/logistics companies, slaughter and event suppliers, IT/hosting providers, and legally authorised public bodies.

The platform's technical infrastructure is operated through cloud-based service providers whose servers are located abroad. Accordingly, your personal data is transferred abroad, limited to the provision of the relevant service, to the following recipient groups:

• Hosting and application infrastructure providers (web and application servers) — European Union (Germany);
• Database service provider — European Union (Germany);
• Content delivery network (CDN) and file/document storage provider — European Union;
• Email delivery service provider (order and invoice notifications) — United States;
• Error monitoring and technical logging service provider (personal data is masked/anonymised before transmission).

SMS delivery and payment services are carried out through providers established in Türkiye (İleti Merkezi and iyzico respectively); therefore no international transfer is made for these services.

These transfers are carried out on the basis of your explicit consent under Article 9 of Law No. 6698; for details, please see the KVKK Notice.

4. Data Security

We apply administrative and technical measures to protect your data against unauthorised access, loss, and misuse: encrypted communication via SSL/TLS, access controls, encrypted password storage, and regular security reviews. Payment transactions are processed through a licensed payment institution's infrastructure without your card details ever being transmitted to us.

5. Retention and Erasure

We retain your personal data only for as long as required by the processing purpose and by applicable law. Once that period expires, data is deleted, destroyed, or anonymised.

6. Your Rights and How to Apply

All of your rights under KVKK (Turkish data protection law) and how to exercise them are set out in detail in the KVKK Notice. To submit a request, you may write to the postal address above or contact us via iletisim@iyikurban.com.

7. Changes

This Privacy Policy may be updated from time to time. The current version is always published on this page; the effective date is shown at the top of the page.