Privacy policy
Effective date: 23.10.2026
## Who we are
Safir Handmade is operated by Erkan Mert Oklubal, a sole proprietor based in Türkiye. This policy describes how we handle personal information when you visit www.safirhandmade.com, contact us or place an order.
Data controller: Erkan Mert Oklubal, trading as Safir Handmade.
Business address: [SELLER BUSINESS ADDRESS]
Privacy contact: erkanmertoklubal@gmail.com
## Information we collect
Depending on how you use our store, we collect your name, email address, telephone number, billing and shipping addresses, order details, selected jewellery specifications, personalisation instructions and correspondence. If you send us a design, image or engraving text, we use it to assess and fulfil your request. Please avoid sending unnecessary sensitive information or information about others without permission.
Our website and enabled tools may also collect technical information such as IP address, browser and device details, page visits, referral information and cookie identifiers. The specific tools, purposes and retention periods are listed in [COOKIE NOTICE LINK — complete before publication].
Payments are processed through iyzico and the enabled checkout systems. We receive information needed to verify payment, fulfil the order, handle refunds and keep transaction records. The payment provider handles payment credentials according to its own privacy notice. [VERIFY AND DESCRIBE THE ACTUAL CARD-DATA ACCESS AND STORAGE CONFIGURATION BEFORE PUBLICATION.]
## How and why we use information
We use information to process payments; prepare personalised products; arrange delivery and customs formalities; provide order updates; respond to enquiries; resolve complaints and refunds; maintain legally required business records; prevent fraud; and secure our store.
Where permitted, we use analytics to understand website use and advertising tools to measure or personalise advertising. Marketing emails are sent only with the consent or other permission required by applicable law. You can unsubscribe using the link in a marketing email or contact us. Essential order communications continue as needed to fulfil your order.
Where applicable, processing relies on steps taken at your request before a contract, performance of a contract, legal obligations, legitimate interests subject to your rights, or consent. [COMPLETE THE PURPOSE-BY-PURPOSE LEGAL-BASIS TABLE FOR ACTUAL STORE PROCESSING, INCLUDING THE APPLICABLE KVKK GROUNDS.]
## Service providers and disclosures
We disclose information as needed to Shopify for store hosting and operation; iyzico for payment services; shipping and delivery providers for fulfilment; customs authorities where required; and professional advisers or public authorities when legally necessary.
Enabled analytics, advertising, email and customer-support providers may receive information according to their function and your applicable choices. [INSERT THE ACTUAL PROVIDERS, DATA CATEGORIES, PURPOSES AND PRIVACY-NOTICE LINKS BEFORE PUBLICATION.]
We do not publish your personalisation instructions or customer photos as promotional material without appropriate permission. [VERIFY WHETHER ADVERTISING DATA DISCLOSURES QUALIFY AS “SALE”, “SHARING” OR TARGETED ADVERTISING UNDER APPLICABLE LOCAL LAW; ADD REQUIRED OPT-OUT RIGHTS AND LINKS.]
## International processing
Our business is based in Türkiye. Using our international service providers and fulfilling overseas deliveries may involve processing information in other countries. [IDENTIFY THE ACTUAL RECIPIENT LOCATIONS AND APPLICABLE INTERNATIONAL-TRANSFER SAFEGUARDS BEFORE PUBLICATION, INCLUDING THE REQUIRED TURKISH TRANSFER ARRANGEMENTS.] Accepting this policy does not by itself authorise every international transfer.
## Retention and security
We retain information for the time needed to fulfil the stated purposes and applicable accounting, tax, legal and dispute obligations. We then delete or anonymise it when no longer required. [INSERT VERIFIED RETENTION PERIODS OR SPECIFIC CRITERIA FOR ORDER RECORDS, ENQUIRIES, MARKETING AND COOKIE DATA.]
We apply appropriate technical and organisational measures to protect information. No online service can guarantee absolute security.
## Cookies and your choices
Essential technologies support functions such as checkout and security. Optional analytics and advertising technologies are subject to the consent and opt-out requirements applicable to you. Where consent is required, optional technologies are disabled until you consent. You can change your choices through [COOKIE PREFERENCES LINK] and your browser settings. Disabling essential technologies may affect store functions. See [COOKIE NOTICE LINK] for the tools and durations used.
## Your privacy rights
Depending on applicable law, you may have rights to access or receive information about your data; correct it; request deletion, restriction or portability; object to certain processing; withdraw consent; or opt out of certain advertising disclosures. Applicable Turkish rights also include learning whether data is processed, its purposes and recipients, requesting correction or deletion where the legal conditions apply, requesting notification of relevant corrections or deletion to recipients, objecting to adverse results arising solely from automated analysis, and seeking compensation for unlawful processing where available.
Contact erkanmertoklubal@gmail.com to make a request. We may reasonably verify your identity and will respond within applicable legal time limits. Some records must be retained despite a deletion request. You may also complain to the competent privacy regulator. [ADD JURISDICTION-SPECIFIC REQUEST AND APPEAL PROCEDURES WHERE REQUIRED.]
## Updates
We may update this policy when our practices or legal requirements change. The effective date shows the latest revision. Where required, we will give additional notice or seek new consent.