Privacy Policy

01 Data controller and scope

This policy explains our general approach to privacy and information security when you use degerlikuyumculuk.com or interact with us in connection with account registration, purchases, orders, deliveries, and after-sales support.

The data controller responsible for the processing of personal data is Değerli Kuyumculuk Mücevherat Sanayi Ticaret Limited Şirketi.

This general policy does not replace processing-specific privacy notices that must be provided when personal data is collected under Turkish Personal Data Protection Law No. 6698 (the KVKK), or separate explicit consent where required.

02 What information may we process?

Depending on the services you use and how you interact with us, we may process the following categories of personal data:

• Identity and contact information: First and last name, phone number, email address, billing information, and delivery details.
• Account and customer transactions: Account details, order history, wish lists, enquiries and support records, and return or exchange requests.
• Sales and payment transactions: Purchased products, order amounts, payment methods, payment transaction references, invoices, and accounting records.
• Transaction security: Website access and session logs, IP addresses, and technical information relating to devices and browsers.
• Communications and preferences: Customer service correspondence, marketing communication preferences, and related consent records.
• Cookie information: Session, preference, analytics, and advertising interaction data, depending on the cookies and similar technologies in use.

We do not collect every category of information from every visitor. Processing is limited by the nature of the services used and the relevant legal conditions for processing.

03 Why do we process personal data?

Personal data is processed on the applicable legal grounds set out in Article 5 of Law No. 6698. Principal examples include:

Providing the information needed to complete an order does not automatically mean that a customer agrees to receive advertising or promotional messages.

04 How do we collect data?

Personal information may be collected through registration, checkout, payment, contact and support forms on our website; correspondence by email, phone or WhatsApp; transactions at our physical store; and technical records generated through website use.

Depending on the activity, this information may be processed by fully or partly automated means, or by non-automated means where the information forms part of a data filing system.

05 With whom may information be shared?

Where necessary to provide our services or meet legal obligations, personal data may be shared with the following categories of recipients, limited to the relevant purpose and what is necessary:

• Shipping and logistics providers: Recipient and address details needed to prepare, dispatch and deliver orders.
• Banks and payment service providers: Transaction details needed to process and verify payments, arrange refunds and maintain payment security.
• Technology service providers: Information needed for hosting, website infrastructure, technical support, security and customer service operations.
• Financial and professional advisers: Information required for accounting, legal and related advisory services.
• Authorized public authorities: Records required in response to a valid legal request or statutory obligation.
• Marketing service providers: Information required to deliver communications where the applicable consent, communication and data-processing requirements have been met.

International transfers of personal data

Where personal data is transferred to technology, analytics, communications or other service providers located outside Türkiye, the requirements of Article 9 of Law No. 6698 must be observed. The relevant privacy notice must also provide the necessary information about the purposes and recipients of that transfer.

06 Payment and transaction security

Değerli applies appropriate technical and organizational measures designed to protect the confidentiality, integrity and security of personal data in its website and payment processes.

Online payments may be processed using the infrastructure of the bank or payment service provider identified at checkout. The processing of card details and payment verification depends on the payment method and the terms of the relevant provider.

Accessing the website over a secure connection is an important component of transaction security. However, no digital system can be guaranteed to be entirely risk-free.

07 Account and sign-in security

It is important to protect the credentials you use to access your account. We recommend choosing a strong password that you do not use elsewhere and signing out after accessing your account on a shared or public device.

If you notice an unauthorized transaction or unusual activity on your account, please contact our customer service team promptly. Reports of security incidents are reviewed according to the circumstances and applicable legal obligations.

08 Cookies and similar technologies

Our website may use cookies and similar technologies to maintain sessions, operate the shopping cart, remember preferences, analyze website use and measure advertising performance.

• Strictly necessary cookies: Technologies required for the shopping cart, sessions, security and essential website functionality.
• Functional cookies: Technologies used to remember language, currency or other user preferences.
• Analytics cookies: Technologies used to measure website use and improve the user experience.
• Advertising and marketing cookies: Technologies used to measure or personalize advertising.

Where cookies that are not strictly necessary involve the processing of personal data and there is no other applicable legal ground, explicit consent must be obtained before those cookies are placed. Visitors should be offered suitable options to accept, reject and manage their preferences.

Information such as cookie providers, purposes, retention periods and whether cookies are first- or third-party cookies, as well as instructions for changing preferences, should be set out in a separate Cookie Policy and cookie preference tool.

Cookies can also be deleted or restricted through browser settings. However, browser settings alone do not fulfill any obligation to obtain and manage explicit consent where required.

09 Promotional messages and communication preferences

Transactional notices, including order confirmations, delivery updates, invoices, security messages and customer service communications, may be sent as part of providing the relevant service.

Commercial electronic messages promoting campaigns, discounts, new collections or similar offerings are sent subject to any permissions required under applicable law. Purchasing a product or reading this policy does not, by itself, constitute consent to marketing.

You can manage relevant permissions using the opt-out option provided in a message, through Türkiye's Commercial Electronic Message Management System (İYS), or by contacting customer service. Choices concerning commercial communications and rights relating to the processing of personal data are handled separately.

10 Data retention and deletion

Personal data is retained for as long as necessary for the purposes for which it is processed, taking into account retention obligations arising from tax, commercial, consumer protection and other applicable legislation.

When the reason for processing no longer applies and there is no other legal obligation to retain the data, it is deleted, destroyed or anonymized in accordance with applicable law.

11 Your rights regarding personal data

Subject to the conditions in Article 11 of Law No. 6698, you may submit a request to us to:

• Find out whether your personal data is being processed and request information if it has been processed.
• Learn why your data is processed and whether it is used for those purposes.
• Learn which third parties in Türkiye or abroad have received your data.
• Request correction of incomplete or inaccurate personal data.
• Request deletion or destruction of personal data where the legal conditions are met.
• Request that correction, deletion or destruction be communicated to third parties to whom the data was transferred.
• Object to a result that is detrimental to you and arises exclusively from automated analysis of your data.
• Claim compensation for damage suffered as a result of unlawful processing of personal data.

12 Requests and contact information

If you have questions about privacy, information security or your personal data, please contact us:

Formal requests under the KVKK may be submitted in writing or through other methods permitted by the applicable rules (for example, from an email address already registered in our system). Information required by law to identify you and understand your request may be requested; unnecessary personal information will not be sought.

Requests will be handled as soon as possible, and no later than 30 days, depending on their nature. They are free of charge except where the law permits a fee. If your request is rejected, you receive an inadequate response, or no response is provided within the statutory period, you retain the right to lodge a complaint with the Turkish Personal Data Protection Board within the applicable legal time limits.

13 Third-party websites

Our website may contain links to pages operated by payment institutions, social media platforms and other service providers. Please review their separate privacy notices and policies for details of data processing activities carried out on their own websites.

Working with third parties does not remove Değerli's legal responsibilities for its own data processing activities.

14 Updates to this policy

We may update this policy when our services, personal data processing activities or applicable laws change. The latest version will be published on this page.

Such updates do not justify unlawfully using previously collected data for new purposes or processing it without obtaining explicit consent where required.

Last updated: 16 October 2026