Gizlilik politikası

1. Parties & Definitions

This Privacy and Personal Data Protection Policy ("Policy") governs the personal data processing principles between BÂROFE Moda Tekstil Ürünleri Sanayi ve Dış Ticaret Limited Şirketi ("BÂROFE") and all users of www.barofe.com. We respect your privacy. The purpose of this policy is to be clear about why we collect your data and exactly what we do with it.

Data Controller

BÂROFE Moda Tekstil Ürünleri Sanayi ve Dış Ticaret Limited Şirketi

AOS 55. Street No: 42, Maslak B Block, No: 4, Unit 542

Sarıyer / Istanbul, Türkiye

info@barofe.com  |  www.barofe.com

Key terms: Personal Data — any information relating to an identified or identifiable natural person. Data Controller — the entity determining the purposes and means of processing. Explicit Consent — freely given, informed, specific consent. KVKK — Turkish Personal Data Protection Law No. 6698. GDPR — EU General Data Protection Regulation (2016/679).

2. What Do We Collect?

Identity and contact data: name, surname, email, telephone.

Order and transaction data: order history, delivery and billing address, product preferences.

Payment data: transaction references; card numbers are not stored in BÂROFE's systems and are processed in PCI-DSS compliant environments.

Technical data: IP address, browser information, session and log data.

Marketing and preference data: communication preferences, behavioural shopping patterns.

3. Why Do We Process It?

We process your personal data for the following purposes and on the following legal bases: for contract formation and performance (KVKK Art. 5/2-c) — to process orders, handle payment, and manage shipping and delivery; to fulfil our legal obligations (KVKK Art. 5/2-ç) — to maintain invoicing and accounting records and respond to competent authority requests; in pursuit of our legitimate interests (KVKK Art. 5/2-f) — to ensure site security, prevent fraud, and improve our service; and on the basis of your explicit consent (KVKK Art. 5/1) — to conduct personalised marketing, profiling, and international data transfers.

4. Who Do We Share It With?

Your personal data may be shared, solely for stated purposes, with: Shopify Inc. (e-commerce infrastructure); Stripe Inc. and İyzico A.Ş. (payment processing); Google LLC and Meta Platforms Inc. (analytics and advertising); cargo and logistics providers; accounting and financial advisory providers; email marketing platforms; competent public authorities and courts, where legally required. All parties receiving data are bound by data processing agreements covering confidentiality and security obligations.

5. International Transfers

Your data may be transferred outside Türkiye due to our use of providers such as Shopify, Google, and Meta. Transfers take place in accordance with KVKK Art. 9 and GDPR Arts. 44–49, with safeguards including standard contractual clauses or adequacy decisions.

6. Cookies

We use essential, analytics, marketing, and functionality cookies. Each category is described in detail in the Cookie Policy. Non-essential cookies are activated only on the basis of your explicit consent.

7. Marketing Communications

Electronic commercial communications are sent solely on the basis of your explicit consent. You may withdraw that consent at any time via the "Unsubscribe" link in any marketing email or by writing to info@barofe.com.

8. How Long Do We Keep It?

We retain your personal data for the following periods: order and invoice data for 10 years (as required by the Tax Procedure Law); payment records for 10 years; account and membership data for the duration of the active period plus 3 years; marketing data until consent is withdrawn; technical log data for 1 year. Data is destroyed through automated deletion or anonymisation upon expiry.

9. How Do We Protect It?

All data transmissions are encrypted via SSL/TLS. Payment data is processed in PCI-DSS compliant environments and not stored in our systems. Access privileges are defined on a least-privilege basis. Our security procedures are reviewed at regular intervals.

10. Age Restriction

BÂROFE's services are for individuals aged 18 and over only. Should data belonging to a person under 18 be identified in our systems, it will be deleted immediately.

11. Your Rights

You have the right to: learn whether your personal data is being processed; request information if it is; learn its purpose and whether it is used accordingly; know third parties to whom it is transferred; request rectification of incomplete or inaccurate data; request deletion or destruction; object to decisions based solely on automated processing; and claim compensation for unlawful processing.

To exercise these rights, submit a written application with identity verification to info@barofe.com. Applications are responded to within 30 days.

12. Right to Complain

For KVKK-related complaints: the Personal Data Protection Authority (kvkk.gov.tr). For GDPR-related complaints: the competent data protection authority in your country of residence.

13. Policy Updates

This policy may be updated in response to legal or technical changes. The current version is always available at www.barofe.com. Material changes will be communicated by email.

14. Contact

BÂROFE Moda Tekstil Ürünleri Sanayi ve Dış Ticaret Limited Şirketi

AOS 55. Street No: 42, Maslak B Block, No: 4, Unit 542

Sarıyer / Istanbul, Türkiye

info@barofe.com  |  www.barofe.com