Privacy policy
Privacy policy and personal data protection
8.1. Data controller and contact
Derin Kılıç, operating under the TABBIATH brand, is the data controller for the processing activities described in this notice.
Address: İncek Mah. 4257 Sk. No: 6 İç Kapı No: 13, Gölbaşı / Ankara, Türkiye
Email: info@tabbiath.com
Telephone: +90 533 961 07 19
This notice covers personal data relating to visits to tabbiath.com, email subscriptions, orders and customer communications.
8.2. Information collected, methods and purposes
Information is obtained electronically or, where relevant, in writing through website forms, Shopify, ordering and payment processes, email/telephone communications and technical tools.
| Data category | Purpose and legal basis |
|---|---|
| Name, contact, delivery and billing details provided with an order; product and order records | Entering into and performing the contract; fulfilling invoicing and other legal obligations |
| Return, exchange and support requests and correspondence | Handling the request and performing the contract; legal obligations; establishing, exercising or protecting a right |
| Email subscription details and consent/opt-out records | Collection, launch and promotional messages in accordance with your permission; compliance with permission and opt-out obligations. Explicit consent is obtained where required for marketing |
| Connection, device, session and security records generated when using the site | Operating and securing the website; depending on the activity, performing the contract or legitimate interests that do not prejudice your fundamental rights |
Cookies and similar technologies: Shopify processes website, session, preference and security records. Wishlist selections are stored locally in your browser. Depending on the features used, Shopify email services may process opens, clicks and unsubscribe activity. You can manage cookies and local data in your browser settings; some functions may be affected. Non-essential cookies and processing requiring permission are subject to applicable consent rules. Merely visiting the website does not constitute explicit consent. See the Shopify Cookie Policy for information on Shopify cookies.
8.3. Shopify and email subscriptions
Shopify is used for the store infrastructure and email subscription/delivery services. Your email address and subscription preferences are managed through this service. You can unsubscribe from marketing by using the unsubscribe link in an email or contacting info@tabbiath.com.
For processing that Shopify carries out in its own role, see the Shopify Consumer Privacy Policy. That link does not replace TABBIATH's own transparency obligations.
8.4. Sharing and international transfers
Information needed for the relevant activity is shared, for that purpose, with Shopify for store and email services, a carrier for delivery, a payment service provider for payment processing, relevant service providers for legally required accounting/invoicing, and legally authorised public bodies.
When an order is placed, delivery requires sharing name, contact and address details; payment and accounting require sharing relevant transaction and invoicing information with the service providers involved.
Shopify's global services may involve processing or storing store and email service data outside Türkiye by Shopify and its service providers. Recipient categories include providers of store hosting, data storage, security and email infrastructure. These activities are subject to the international transfer provisions of Turkish Law No. 6698. Information requests about transfers can be sent to info@tabbiath.com.
8.5. Retention and security
Data is retained according to the period needed for its purpose and applicable statutory retention obligations. When the grounds for processing cease, applicable deletion, destruction or anonymisation obligations apply. If permission is withdrawn, records that must be retained on a separate legal basis may be kept only to the extent required by that basis.
Technical and organisational measures proportionate to the risks are required to prevent unlawful processing or access and to safeguard personal data.
8.6. Your rights and requests
Under Article 11 of Turkish Law No. 6698, you may ask whether your data is processed, request information about that processing, learn its purpose and whether it is used accordingly, and identify recipients in Türkiye or abroad. You may request correction of incomplete or inaccurate data, deletion or destruction where the legal conditions are met, and notification of those actions to recipients. You may object to an adverse result arising solely from automated analysis and seek compensation for damage caused by unlawful processing.
You may submit a request in accordance with the statutory procedures in writing to the address above, or to info@tabbiath.com from an email address previously provided to us and recorded in our systems. Other legally valid request methods remain available. Requests are resolved as soon as possible and within 30 days at the latest; statutory rules apply to any charges.