Privacy Policy

1. Data Controller

Your personal data is processed by Bevella Yarn Tekstil under Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU and UK GDPR.

2. What Data We Collect

When you contact us or use this website, we may collect the following categories of personal data:

2.1 Identity Information

• Name and surname
• Company name

2.2 Contact Information

• Email address
• Phone number

2.3 Digital Data

• IP address
• Browser type and version
• Operating system
• Pages visited
• Date and time of visit
• Cookie data

3. How We Use Your Data

We process your personal data for the following purposes:

1. Responding to your enquiries and quote requests
2. Managing B2B customer communication and orders
3. Providing information about our products and services
4. Analysing and improving the website
5. Meeting legal and tax obligations
6. Aggregated statistical reporting
7. Information security and fraud prevention

4. Legal Basis for Processing

We process your personal data on one or more of the following legal grounds, under KVKK and where applicable GDPR:

• Your explicit consent
• Performance of a contract or steps before entering into a contract
• Compliance with a legal obligation
• Our legitimate interests, provided they do not override your fundamental rights and freedoms

5. Who We Share Data With

We do not sell your personal data. We may share it with a limited number of service providers strictly to operate our business:

• Logistics and shipping partners (for fulfilling orders)
• Hosting and analytics providers (such as Google Analytics, Firebase)
• Public authorities, where required by law
• Professional advisors (legal, accounting and auditing)

5.1 International Data Transfer

Some of the services we use, such as Google Analytics and Firebase, may process data on servers located outside Türkiye. We take reasonable steps to ensure these transfers comply with applicable law.

6. Data Retention

We keep personal data only as long as needed for the purpose it was collected and for the period required by law:

7. Data Security

We apply reasonable technical and organisational measures to protect your personal data:

• SSL/TLS encryption for data in transit
• Firewalls and anti-malware tools on operational systems
• Access controls and authorisation rules
• Regular review of security practices
• Staff awareness on data handling

8. Your Rights

Under KVKK and, where applicable, GDPR, you have the right to:

1. Learn whether your personal data is processed
2. Request information if your data has been processed
3. Learn the purpose of processing and whether it is used in line with that purpose
4. Know any third parties to whom your data has been transferred
5. Request correction if your data is incomplete or inaccurate
6. Request deletion or destruction of your data, where the conditions in law are met
7. Request that corrections or deletions are passed on to recipients of your data
8. Object to decisions based solely on automated processing
9. Claim compensation in case of damage from unlawful processing

9. How to Exercise Your Rights

To exercise any of the rights above, please contact us using the details below:

We aim to respond within 30 days, free of charge, in line with applicable law.

10. Changes to This Policy

We may update this policy when our services, providers or legal obligations change. Material updates are shown on this page with a revised effective date.