Privacy & Security Policy
Information on personal data handling in accordance with Law No. 6698 (KVKK) and global data protection standards (GDPR).
Gizlilik Sözleşmesi & KVKK Aydınlatma Metni (Last updated: July 2026)
256-Bit SSL & Zero Card Data Storage Pledge
Your credit card numbers are NEVER stored on our servers; processed securely via licensed gateway iyzico & 3D Secure.
1. Data Controller (Veri Sorumlusu)
In accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and international privacy regulations, Ömür Çapacı (Cinilicraft) acts as the Data Controller.
2. Payment Security & Credit Card Information Handling
Cinilicraft does NOT store, retain, or process full credit card numbers, CVV security codes, or card expiration dates on our servers.
All online payment transactions are transmitted through an encrypted 256-Bit SSL (Secure Sockets Layer) channel directly to iyzico (Iyzipay), an authorized payment institution licensed by the Central Bank of the Republic of Turkey (TCMB) and PCI-DSS Level 1 certified.
Payments utilize mandatory 3D Secure protocols, sending a one-time verification code directly from your card-issuing bank. Neither Cinilicraft nor any unauthorized third parties have access to your raw payment card credentials.
(Kredi kartı ve banka kartı bilgileriniz hiçbir koşulda sistemlerimizde saklanmaz. Ödemeler 256-Bit SSL ve lisanslı ödeme kuruluşu iyzico altyapısı üzerinden 3D Secure güvencesiyle doğrudan bankanız ile gerçekleştirilir.)
3. Collected Personal Data & Purpose of Processing
To fulfill purchases and provide high-quality artisan support, we collect:
- Identity & Contact: Name, email address, phone number (used solely for order updates, delivery notices, and customer care).
- Shipping & Billing Address: Necessary to route physical ceramic shipments through integrated express carriers and generate legal invoices.
- Order Records: Purchase history, purchased artwork lines, and digital download tokens.
- Technical Security Data: IP address and session headers used strictly to prevent fraudulent activities.
4. Authorized Third-Party Data Transfer
Personal data is shared only to the extent necessary to deliver your orders:
- Express Couriers: DHL Express, FedEx, UPS, and Yurtiçi Kargo for physical package delivery and tracking.
- Licensed Payment Gateway: iyzico for secure payment tokenization and fraud prevention.
- Legal Authorities: Only when strictly required by enforceable statutory obligations or court orders.
5. Cookies & Tracking Technologies
Our site uses strictly essential first-party cookies to manage shopping cart contents and preserve session state. You can manage or block cookies in your browser preferences at any time.
6. Your Data Subject Rights (KVKK Article 11 & GDPR)
You hold the right to learn whether your personal data is processed, request information, request correction or deletion, and object to processing. To exercise these statutory rights, please contact our privacy representative at info@cinilicraft.shop. Requests are resolved within 30 days.