Privacy Policy

Draft — to be reviewed by a legal advisor before launch.

This policy explains how we process the personal data of customers who order from okscraft.store, in line with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).

1. Controller

[ŞİRKET UNVANI], [AÇIK ADRES]. Contact: hello@okscraft.store

2. Data we process

• Contact details: name, e-mail, phone.
• Delivery: address, city, postal code, country, order note.
• Order: products, amounts, payment reference. Your card details never reach us; payments are processed by iyzico.
• Personalization content: the photo, handwriting or text you upload for engraving. Photos may show other people (e.g. children); we use them only to make your order.

3. How your photos are handled

• While you design, your photo is processed only on your own device and is not sent to our servers. Designs in your cart stay in your browser’s local storage.
• When you place your order, the original photo, the engraving file and a preview are uploaded for production.
• If payment isn’t completed, uploaded files are deleted automatically within 24 hours.
• 14 days after delivery the original photo and engraving file are deleted automatically. A small preview of the design you approved is kept for 120 days as evidence in case of a complaint or card dispute, then deleted.
• On request, we delete your files sooner.

4. Purposes and legal bases

• Making, shipping and supporting your order — performance of a contract (Art. 6(1)(b) GDPR).
• Invoices and accounting records — legal obligation (Art. 6(1)(c) GDPR; Turkish tax law requires 10 years’ retention).
• Fraud prevention and legal claims — legitimate interests (Art. 6(1)(f) GDPR).

5. Recipients and transfers

We share data only as needed with: our payment provider iyzico (Turkey), shipping carriers, our hosting provider Cloudflare and our e-mail delivery provider. We are based in Turkey; transfers from the EU rely on Standard Contractual Clauses where required.

6. Cookies and local storage

We only store preferences needed for the site to work (language, currency). Your cart and design photos are kept in your browser’s local storage. We use no advertising or tracking cookies.

7. Your rights

You have the right to access, rectify, erase, restrict and object to processing of your data, and to data portability. Write to hello@okscraft.store; we reply within 30 days. You may also complain to your local data protection authority.