Privacy Policy

The purpose of this Privacy Policy is to transparently set forth the principles regarding the processing of personal data of all natural persons ("you" or "visitor/customer") who visit our website, create a membership, place an order, subscribe to our newsletter and campaign communications, or contact us through any channel.

Our Policy covers personal data obtained within the scope of online store, digital marketing, and customer relations activities carried out by Hoito. Your personal data is processed in accordance with the Personal Data Protection Law No. 6698 ("KVKK") and relevant secondary legislation.

For detailed explanations regarding the legal grounds and methods by which we process your personal data as data controller, you can review the KVKK Clarification Text. This Privacy Policy supplements the Clarification Text.

We collect personal data in two main ways to provide our services:

a) Data you directly provide to us

• Membership information: first name, last name, email address, phone number, password.
• Order and delivery information: delivery and billing address, order contents, recipient information.
• Payment information: payment amount and transaction details. Your card information is not stored by us; payments are processed through a secure virtual POS infrastructure.
• Communication and support information: messages, requests, complaints, and evaluations you send to us.
• Marketing preferences: newsletter/SMS subscription and communication permissions.

b) Automatically collected data

• Technical data: IP address, device and browser information, operating system.
• Navigation data: pages visited, click movements, session duration, referring links.
• Cookie data: data collected via cookies and similar tracking technologies (see Article 4).

We process the personal data we collect for the following purposes:

• Order, delivery, and payment: receiving, preparing, shipping your orders, and processing payments.
• Account management: creating memberships, identity verification, and managing account operations.
• Customer support: responding to and resolving your requests, questions, and complaints.
• Personalization: offering you suitable products, content, and experiences.
• Marketing and communication: sending campaign, newsletter, and promotional messages, provided you give your explicit consent.
• Security: preventing fraud and ensuring system and transaction security.
• Legal obligations: fulfilling obligations regarding storage, documentation, and information as required by law.
• Analysis and improvement: measuring website performance and developing our services.

On our website, we use cookies and similar tracking technologies to improve your experience, analyze site traffic, and carry out marketing activities. Cookies are grouped as essential, performance/analytical, functional, and marketing/advertising cookies.

You can change your cookie preferences at any time through your browser settings or our site's cookie management tool. For detailed information on which cookies we use, their purposes, and durations, please review our Cookie Policy.

We share your personal data, limited only to the purposes and parties mentioned below, in accordance with the relevant legislation:

• Shipping and logistics companies: for the purpose of delivering your orders.
• Payment institutions and banks: for the purpose of securely processing payment transactions.
• Marketplaces: for the purpose of fulfilling orders placed through platforms such as Trendyol, Hepsiburada, and Amazon.
• Email and SMS service providers: for the purpose of sending notifications and permission-based marketing messages.
• Analytics and advertising partners: for the purpose of conducting measurement and advertising activities through tools such as Google (Google Analytics 4, Google Tag Manager, Google Ads), Meta Pixel, and TikTok Pixel.
• Authorized public institutions and legal authorities: for the purpose of fulfilling legal obligations and responding to legal requests.

Hoito does not sell your personal data to third parties for advertising purposes. Your data is shared only for the legitimate purposes mentioned above and with necessary security measures in place.

We implement appropriate administrative and technical measures to protect your personal data against unauthorized access, loss, alteration, or misuse. In this regard:

• Our website and data transfers are protected with SSL/TLS encryption.
• Access to personal data is restricted to authorized personnel only (access control).
• Sensitive data is stored encrypted, and regular security audits are conducted.
• Our employees are informed about confidentiality and data protection.

We would like to point out that no data transfer over the internet or electronic storage can be 100% secure; however, we continuously implement reasonable and up-to-date measures to protect your data.

We store your personal data for the period required by the purpose for which they are processed and for the statutory limitation and retention periods. For example, order and invoice records are stored for the periods stipulated by tax and commercial legislation.

If the processing purpose ceases to exist and the statutory retention periods expire, your personal data will be deleted, destroyed or anonymized in accordance with the relevant legislation.

As a data subject, you have the following rights under Article 11 of the KVKK:

• To learn whether your personal data is being processed,
• To request information if it has been processed,
• To learn the purpose of processing and whether it is used in line with its purpose,
• To know the third parties to whom data is transferred, whether domestically or abroad,
• To request correction if it has been processed incompletely or incorrectly,
• To request its deletion or destruction within the framework of the conditions stipulated in the KVKK,
• To request that correction, deletion, and destruction operations be notified to third parties to whom data has been transferred,
• To object to the emergence of a result against you through the analysis of processed data exclusively by automatic systems,
• To demand compensation for damages if you suffer damage due to unlawful processing.

You can submit your requests regarding these rights via email to info@hoito.com.tr or through [KEP address]. Your applications will be answered within the periods stipulated in the KVKK and relevant legislation.

Our website and services are intended for individuals 18 years of age or older. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that a user under 18 has provided us with data, we will delete the relevant data as soon as possible.

If you believe that a child for whom you are a parent or legal guardian has provided us with personal data, please contact us at info@hoito.com.tr.

Our website may contain links to third-party websites, marketplaces, or our social media accounts (e.g., Instagram @hoitokozmetik). Hoito is not responsible for the privacy practices of the sites you are directed to when you click on these links.

Therefore, we recommend that you review the privacy policies of the third-party sites you visit. This Privacy Policy applies only to platforms operated by Hoito.

This Privacy Policy may be updated from time to time in line with changes in legislation, updates to our services, or developments in our business processes. The current version will be published on this page along with its effective date.

In the event of significant changes, we will notify you through appropriate channels. We recommend that you regularly review the current version of the Policy. Changes take effect on the date they are published.