Privacy Policy

1. Introduction

At Yak Gelsin ("Özel Ada Ticaret Ltd. Şti.") we respect your privacy and put the security of your personal data first. This Privacy Policy explains which data we collect, how we use it and how we protect it when you visit the yakgelsin.com website or use our services.

2. Information We Collect

Information You Provide Directly

• First and last name
• Phone number
• E-mail address
• Delivery address
• Order and payment preferences, the time you confirmed the Preliminary Information Form / Distance Sales Agreement

Loyalty Card

• When your order is delivered, a loyalty card record is kept with your phone number and name; the record holds the numbers of stamps and rewards.

Notifications (Web Push)

• If you allow notifications, your browser's subscription address (endpoint) and encryption keys are stored; information such as your name or phone number is not added to this record.
• If you choose a province / district in the notification box, or choose one when ordering after subscribing to notifications, the province and district you chose and the corresponding delivery area are added to your subscription record. This information is used only to send campaign notifications specific to your area; choosing a province / district is optional and your full address is not written to this record.
• If you choose "Notify me with a notification" on the page of a sold-out product, the same mechanism is used: your browser's subscription address and encryption keys, the product you are waiting for and the page language are stored; when the product is back in stock a single notification is sent and the record is deleted. This record is not used for general campaign notifications.
• You can turn the permission off at any time in your browser settings.

Product Reviews

• If you leave a review, the name, rating and comment you write are stored and may be published on the site.

Dealership Application

• If you fill in the dealership application form, your full name, company name, phone number, e-mail address (if you entered one), province / district, business type, the products you are interested in, your estimated monthly purchase and the note you wrote are forwarded to the business by e-mail and stored as an application record. This information is used only to assess your application and to contact you.

Institutional Supply Request

• If you fill in the institutional supply quote form, the type of organisation, organisation name, contact person's full name, phone number, e-mail address (if you entered one), province / district, the products you need, the estimated quantity, the delivery frequency and the note you wrote are forwarded to the business by e-mail and stored as a request record. This information is used only to assess your request and to contact you.

Information Collected Automatically

• IP address and geographic location (at city level)
• Browser type and version
• Pages visited and time spent
• Cookie and local storage data

3. How We Use the Data

• Receiving, processing and delivering your orders
• Sending order status and shipment tracking notifications
• Meeting customer service requests
• Site security and the prevention of fraud
• Improving service quality and the user experience
• Sending campaign and product notifications, with your permission

4. Cookies

Our website uses the following types of cookie:

• Essential cookies: Needed for the cart and session management; they cannot be disabled.
• Analytics cookies: Help us understand visitor behaviour through Google Analytics. They are loaded only if you accept in the cookie consent window; if you decline, Google Analytics is not loaded at all.
• Ad measurement cookies: Let us measure, through Google Ads, whether visits that come from a click on a Google ad turn into an enquiry or order. Used only if you choose "Accept" in the cookie consent window; not used if you choose "Statistics only" or "Decline". Never used for personalised ads or remarketing.
• Preference cookies: Remember preferences such as your language choice.

You can manage your cookie preferences in your browser settings or in the cookie consent window on our site.

5. Data Security

Your personal data is transmitted with HTTPS encryption. No online payment is taken on our site and no card details are requested; payment is made on delivery (cash or credit card) or by bank transfer (havale/EFT). Access to the data is limited to authorised persons only.

6. Data Retention

Order data is kept for 10 years as required by legal obligations. Data for marketing purposes and notification subscriptions are kept until you withdraw your consent. Analytics data is kept according to the retention setting in our Google Analytics account.

7. Sharing with Third Parties and Transfer Abroad

Your personal data is not sold. It may be shared with haulage partners for delivery and, where required by law, with authorised institutions. We use the following service providers (data recipients) to run the site:

• Supabase (database): order, loyalty card, product review, notification subscription and dealership application records.
• Vercel (hosting): the infrastructure the site is served from; with every request the IP address and browser information go into technical logs.
• Resend (e-mail): forwarding order, quote and dealership application notifications to the business by e-mail and, if you entered an e-mail address when ordering, sending you the order confirmation; the e-mail contains your order, application and contact details.
• Google Analytics (Google): only if you gave cookie consent; visit and order statistics.
• Google Ads (Google): only if you also consented to ad measurement; whether a visit from a Google ad turned into an enquiry or order.
• Web push services (Google Firebase Cloud Messaging, Apple Push Notification service, Mozilla Push Service): only if you allowed notifications; your browser's subscription address is used through these services.
• WhatsApp (Meta): when your order is sent as a WhatsApp message and when we correspond with you on WhatsApp.
• ipapi.co (estimating the province from the IP address): when the payment page opens (if you have not chosen a province before) and when you press the location button in the delivery check on a product page, your IP address is sent to this service in order to suggest your province; the province returned is shown only as a suggestion and can be changed by you.
• Upstash (rate limiting, when enabled): to prevent abuse, your IP address is kept as a short-lived counter key for order, quote, dealership application, loyalty card and coupon requests and is deleted when the period ends.

Because the servers of these service providers are located outside Turkey (mainly in the USA and European Union countries), the data above is transferred abroad. The transfer is made within the conditions laid down in Article 9 of KVKK (Law No. 6698); for Google Analytics, Google Ads and web push the transfer takes place only with your consent, and you can withdraw your consent at any time.

8. Your Rights

Under KVKK and the GDPR you have the rights of access to your data, rectification, erasure, restriction of processing, objection and portability. For applications: info@yakgelsin.com
Postal address: Mimar Sinan Mah. Beydağ Cad. No:10, 35750 Ödemiş, İzmir, Türkiye

9. Changes to This Policy

Significant changes to this policy will be announced on the site. You can always find the current text on this page.