Privacy Policy

At Kayalar Jewellery, we respect the privacy of everyone who visits our website, creates a customer account or purchases jewellery from our online store. Protecting personal information, using it responsibly and maintaining transparency about our data handling practices are important aspects of our commitment to customer trust.

This Privacy Policy explains the general principles governing the collection, use, sharing, storage and protection of information associated with the website kayalarkuyumculuk.com. It also provides information about website security, cookies, third-party services and the privacy rights that may be available to individuals under applicable legislation.

Our handling of personal data is subject to applicable legal requirements, including Türkiye's Personal Data Protection Law No. 6698 (KVKK). Where relevant to specific processing activities, additional requirements under international data protection legislation, including the European Union's General Data Protection Regulation (GDPR) or applicable United Kingdom data protection legislation, may also apply.

This Privacy Policy provides general information about our privacy practices. Additional, activity-specific information concerning the collection and processing of personal data is provided through the relevant Personal Data Protection notices and other privacy information published on our website.

1. Our Approach to Privacy

At Kayalar Jewellery, we recognise that customers place their trust in us when sharing personal information. We aim to handle this information responsibly and apply appropriate technical and organisational measures to support its confidentiality, integrity and security.

Our approach is guided by principles of lawful processing, transparency, data minimisation, appropriate access management and the protection of personal information against unauthorised access, loss, misuse or inappropriate disclosure.

Personal information should be accessed only where necessary for legitimate business purposes and by individuals or service providers with appropriate authorisation.

We recognise that privacy protection is an ongoing responsibility requiring consideration of technological developments, evolving security risks and applicable legal obligations.

2. Information We May Collect

Depending on how you interact with our website and services, certain information may be provided directly by you or collected through the technical systems involved in operating our online store.

The categories of information processed may include:

• Identification Information: Your name, surname and other identification details necessary for relevant transactions.
• Contact Information: Email address, telephone number and information provided when contacting customer support.
• Billing & Delivery Information: Billing address, delivery address, recipient details and relevant information required to fulfil an order.
• Account Information: Registration details, account preferences and information associated with your customer account.
• Order & Transaction Information: Products purchased, order history, transaction references, payment status and relevant purchasing records.
• Customer Communications: Enquiries, requests, complaints, messages and other information shared through our communication channels.
• Technical Information: IP address, browser type, device information, session details and technical records associated with website access.
• Website Usage Information: Information concerning interactions with website pages and features, where collected through applicable technical or analytical systems.
• Cookie-Related Information: Information generated through cookies and similar technologies, subject to the relevant settings and legal requirements.

The information collected depends on the relevant activity and the services used. Not every category listed above is necessarily collected from every visitor or customer.

Where additional information is required for a particular activity, including international shipping, customs documentation or identity verification, the relevant requirements should be communicated in connection with that activity.

3. How We Use Information

Personal information may be processed for purposes related to the operation of our website, the provision of jewellery retail services and the fulfilment of relevant legal or contractual obligations.

Depending on the circumstances and the applicable legal basis, these purposes may include:

• Operating, maintaining and supporting the functionality of our website.
• Creating, administering and securing customer accounts.
• Processing orders and managing purchasing transactions.
• Supporting payment processing, transaction verification and related financial procedures.
• Arranging domestic and international order preparation, shipping and delivery.
• Communicating with customers about orders, enquiries and after-sales support.
• Managing cancellation, withdrawal, return, exchange and warranty-related requests.
• Identifying and addressing potential fraud, misuse, unauthorised activity and security concerns.
• Reviewing website performance and improving services where permitted by law.
• Maintaining accounting, taxation and other legally required business records.
• Establishing, exercising or defending legal claims where necessary.
• Sending marketing communications where an appropriate legal basis exists and applicable electronic marketing requirements are satisfied.

Personal data must be processed on an appropriate legal basis. Depending on the activity and the applicable legislation, relevant grounds may include contractual necessity, compliance with legal obligations, legitimate interests where permitted, or valid consent where required.

The specific purposes, collection methods and legal bases applicable to individual processing activities are explained in the relevant privacy and personal data protection notices.

Providing information necessary to complete an order may be required for the performance of the relevant sales contract. Optional marketing consent is treated separately and is not a condition of purchasing jewellery.

4. Personal Data Protection

Personal data processed in connection with the Kayalar Jewellery website is subject to applicable data protection legislation, including Türkiye's Personal Data Protection Law No. 6698 (KVKK).

Where the relevant legal conditions are met, additional obligations under the EU GDPR, UK data protection legislation or other applicable privacy frameworks may also arise.

We recognise the importance of providing individuals with appropriate information about the purposes of processing, relevant legal grounds, categories of recipients, collection methods and rights available under applicable law.

The identification of the relevant data controller and further details concerning specific processing activities must be provided through the applicable personal data protection notices.

5. Sharing Information With Third Parties

Certain business activities may require personal information to be shared with external service providers, professional advisers, financial institutions or public authorities.

Where personal data is shared, the disclosure must have an appropriate legal basis and be limited to information necessary for the relevant purpose, subject to applicable law.

Depending on the nature of the transaction and the services involved, relevant recipients may include:

• Shipping & Logistics Providers: Courier companies, delivery services and logistics providers involved in order fulfilment.
• Banks & Payment Providers: Financial institutions and payment service providers involved in payment authorisation, transaction processing and refunds.
• Technology Service Providers: Website hosting, e-commerce infrastructure, technical support and other relevant information technology providers.
• Accounting & Financial Service Providers: Professional advisers and service providers supporting accounting, financial administration and legally required records.
• Professional & Legal Advisers: Relevant advisers where necessary for legitimate business activities or legal claims.
• Public Authorities: Courts, customs authorities, tax authorities and other competent bodies where disclosure is required or permitted by law.
• Other Authorised Service Providers: Relevant business partners or service providers where a valid legal basis and appropriate safeguards exist.

Where service providers process personal information on our behalf, applicable contractual, organisational and technical safeguards must be considered in accordance with the relevant legal requirements.

We also recognise that international transactions and digital services may involve personal data being accessed or processed outside Türkiye.

Where a transfer of personal data to another country takes place, the transfer must comply with applicable legal requirements, including any relevant international transfer conditions under Türkiye's Personal Data Protection Law and, where applicable, the EU GDPR or UK data protection legislation.

Depending on the relevant jurisdiction and circumstances, lawful transfer mechanisms may include recognised adequacy arrangements, approved contractual safeguards or another legally permitted transfer mechanism.

Details of actual international data transfers, relevant destinations, recipients and applicable safeguards should be provided through the appropriate privacy notices where legally required.

6. Payment Information Security

Protecting information associated with online payments is an important consideration in our e-commerce operations.

Where card payments are available, transactions are handled through the relevant payment infrastructure and are subject to the security procedures of the applicable banks, card issuers and payment service providers.

The collection, processing and storage arrangements for payment information depend on the technical configuration of the payment system and the responsibilities of the relevant financial service providers.

Customers should never disclose their banking passwords, card PINs, one-time verification codes or other sensitive authentication information to unauthorised individuals.

If you receive an unexpected payment request claiming to represent Kayalar Jewellery, please verify its authenticity through our official website or contact information before proceeding.

Payment-related personal information is subject to the applicable data protection and financial security requirements.

7. Website and Information Security

Kayalar Jewellery recognises the importance of protecting its website, supporting systems and information processed through its digital services.

Appropriate technical and organisational measures are considered to help reduce risks associated with unauthorised access, data loss, malware, fraudulent activity, system vulnerabilities and other information security threats.

These measures may involve access management, account security procedures, software maintenance, operational controls and other safeguards appropriate to the systems and information involved.

However, no internet-based transmission or electronic storage system can be guaranteed to be completely free from risk.

We encourage visitors and customers to use current software, protect their account credentials and remain cautious when sharing personal information online.

Information security concerns are considered in accordance with the circumstances of the incident and the applicable legal obligations.

8. Customer Account Security

Customers who create an account should take reasonable precautions to protect the information used to access their membership.

We recommend selecting a strong, unique password and avoiding the disclosure of usernames, passwords or authentication information to unauthorised third parties.

If you notice suspicious activity, unexpected account changes or a transaction that you do not recognise, please contact Kayalar Jewellery as soon as reasonably possible.

Account-related security responsibilities will be assessed in accordance with the circumstances and the relevant legal requirements.

Nothing in this policy removes any data protection or security responsibility that Kayalar Jewellery may have under applicable law.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential functionality, remember certain preferences, understand website performance and improve the browsing experience.

Depending on the website configuration, such technologies may support activities including session management, shopping basket functionality, security measures, analytics and other relevant services.

Where non-essential cookies or similar technologies require consent under applicable legislation, they must be managed through an appropriate consent mechanism before the relevant processing occurs.

Users should be able to make informed choices about optional cookies where such choices are required by law. Withdrawing applicable consent should be possible through an appropriate mechanism.

Further information about the categories of cookies used, their purposes, relevant providers, retention periods and available preference controls should be provided in the Cookie Notice published on our website.

You may also manage certain cookies through your browser settings. Disabling essential cookies may affect the functionality of some website features.

10. Marketing Communications

Registering for an account or making a purchase does not automatically constitute consent to receive promotional emails, SMS messages, telephone marketing or other commercial electronic communications.

Where required by applicable legislation, marketing communications will be sent only where an appropriate permission or other lawful basis exists and the relevant electronic marketing requirements have been satisfied.

Promotional communications may concern new jewellery collections, product announcements, discounts, seasonal campaigns, special occasions and other brand-related information.

Customers may update their marketing preferences or withdraw previously granted consent in accordance with applicable law and the communication methods made available.

Withdrawing consent for promotional communications does not necessarily prevent the sending of legitimate transactional messages, including order confirmations, payment information and delivery updates, where permitted or required by law.

Further details are available in our Marketing Communications Consent information.

11. Third-Party Websites

The Kayalar Jewellery website may contain links directing visitors to independently operated websites or external services.

These websites may have their own privacy policies, terms of use and information security practices.

We encourage visitors to review the privacy information provided by third-party websites before submitting personal information or using their services.

Kayalar Jewellery does not necessarily control the content or practices of independently operated external websites.

However, nothing in this policy excludes responsibilities that Kayalar Jewellery may have under applicable law in relation to third-party services used for its own business activities or the processing of personal information.

12. Social Media and External Platforms

Our website may include links to social media platforms, external communication channels or other third-party services.

Interactions with these platforms may be subject to their respective privacy policies, terms of use and data processing practices.

When a visitor follows an external link or interacts directly with a social media platform, the relevant provider may process information according to its own applicable privacy arrangements.

Where social media tools or external services are integrated directly into our website and involve personal data processing, the relevant legal requirements, information obligations and consent conditions must be considered.

Visitors are encouraged to review the privacy settings and notices of the platforms they choose to use.

13. Retention of Information

Personal information is retained for periods determined by the relevant processing purposes, operational requirements and applicable legal obligations.

Different categories of information may be subject to different retention periods. Relevant considerations may include account administration, order fulfilment, accounting and tax requirements, transaction records, customer support and the establishment or defence of legal claims.

Information should not be retained for longer than necessary for the purposes for which it is lawfully processed, subject to applicable statutory retention obligations.

When the applicable retention period expires and no lawful basis for continued retention remains, personal data must be handled in accordance with the relevant legal requirements concerning deletion, destruction or anonymisation.

More specific information about applicable retention periods or the criteria used to determine them should be provided in the relevant personal data protection notices where required by law.

14. Children's Privacy

The Kayalar Jewellery website is intended for a general consumer audience and is not designed specifically for children.

Although our jewellery collections may include products suitable for children, this does not mean that the website is intended to collect personal information directly from children without appropriate legal safeguards.

The ability of individuals to register for an account, enter into a purchase contract or provide legally valid consent is subject to applicable legislation, including requirements concerning age and legal capacity.

Where personal information relating to a child is processed, the relevant legal requirements and any necessary parental or guardian authorisation must be considered according to the circumstances.

If a parent or legal guardian has concerns regarding the processing of a child's personal information, they may contact Kayalar Jewellery using the information provided below.

15. User Responsibilities

Visitors and customers are encouraged to provide accurate and up-to-date information when using the website, registering for an account or placing an order.

We recommend following these basic security practices:

• Use strong passwords that are difficult to guess and are not reused across multiple websites.
• Keep passwords, banking credentials and one-time authentication codes confidential.
• Sign out of your account after using a shared or public device.
• Exercise caution when opening unfamiliar links, emails or messages.
• Verify unexpected communications or payment requests claiming to represent Kayalar Jewellery.
• Keep your browser and device software reasonably up to date.
• Contact us if you believe your account information has been compromised.

These recommendations are intended to support safer website use and do not replace the information security and data protection responsibilities imposed on Kayalar Jewellery by applicable law.

16. Changes to This Privacy Policy

Kayalar Jewellery may review and update this Privacy Policy to reflect changes in applicable legislation, technological developments, website functionality, business operations or relevant privacy practices.

Updated versions may be published on our official website.

Where material changes affect the processing of personal information, appropriate additional information will be provided in accordance with applicable legal requirements.

If a new processing activity requires consent or another specific legal condition, the publication of an updated Privacy Policy does not by itself establish that condition.

Visitors and customers are encouraged to review the current Privacy Policy periodically to remain informed about the general privacy practices associated with our website.

17. Your Privacy and Data Protection Rights

Individuals whose personal data is processed by Kayalar Jewellery may have rights under applicable data protection legislation.

Under Article 11 of Türkiye's Personal Data Protection Law No. 6698, individuals may exercise rights concerning their personal data, including requesting information about processing, seeking correction of inaccurate or incomplete information, and requesting deletion or destruction where the relevant legal conditions are satisfied.

Other rights under Turkish legislation may include obtaining information about third parties to whom personal data has been transferred, objecting to certain outcomes resulting from exclusively automated analysis and seeking compensation where the legal conditions are met.

Where the EU GDPR or applicable UK data protection legislation governs a particular processing activity, additional rights may be available, depending on the circumstances and legal basis. These may include:

• The right to be informed about the processing of personal data.
• The right to request access to personal information.
• The right to request correction of inaccurate or incomplete data.
• The right to request erasure where legally applicable.
• The right to request restriction of processing in relevant circumstances.
• The right to object to certain processing activities, including direct marketing where applicable.
• The right to data portability where the statutory conditions are satisfied.
• Rights concerning certain decisions based solely on automated processing, where applicable.
• The right to withdraw consent where processing is based on consent.
• The right to lodge a complaint with a competent data protection supervisory authority where provided by applicable law.

The availability and scope of these rights depend on the legislation applicable to the processing activity and the specific legal conditions involved.

If you wish to submit a personal data request, please review the relevant Personal Data Protection notices and our Data Subject Request Form page for information concerning available application methods.

You may also contact Kayalar Jewellery using the official details provided below to request further information about the appropriate procedure.

18. Contact Information

If you have any questions concerning this Privacy Policy, our general privacy practices, website security or personal data protection, please contact Kayalar Jewellery through the official communication channels listed below.