Privacy policy
This policy explains personal data processed when you use the Herbaclean online store, place orders and contact us. Details about the data controller and your rights are provided in the Personal Data Notice.
What information may be processed?
Depending on your activity, your name, contact details, delivery and billing address, order, payment transaction result, delivery, return and preference records may be processed. IP address, browser information and cookie data may also be collected when you use the site.
Purposes of use
- Managing orders, payments, invoicing, delivery and returns
- Handling account and support requests
- Providing the site's basic functions and security
- Conducting analytics and marketing within the scope of the relevant explicit consent
- Fulfilling legal obligations and protecting rights
Cookies and preferences
For information about cookie types and your choices, read the Cookie Policy. Explicit consent is the basis for non-essential analytics and marketing cookies. You may withdraw your consent.
Communication preferences
Email and SMS marketing consents are separate. You can shop without giving consent. You can withdraw a preference on the Communication Preferences page. Consent and refusal records are kept in our store systems and synchronized with İYS through Netgsm. Receipt of a request does not mean that its transfer to İYS is complete.
Service providers
Data may be shared with payment, shipping, e-invoicing, communications and infrastructure providers or competent authorities to the extent required for the transaction. The purposes and legal bases for sharing are explained in the Personal Data Notice.
Shopify provides the storefront and customer account infrastructure; NormHub handles store management and consent synchronization. Read the Shopify Consumer Privacy Policy for information about processing within Shopify services and ways to exercise your rights. Data may be processed abroad through service-provider infrastructure; this does not replace marketing consent.
Data security and retention
Appropriate technical and administrative measures are taken to prevent unlawful processing of and access to personal data and to protect it. Records are assessed within the relevant processing purpose and legal retention obligations.
Requests and contact
To exercise your personal data rights or ask a question, write to info@herbaclean.com.tr. KVKK request methods and the response period of no more than 30 days are explained in the Personal Data Notice.