Privacy Policy
This Privacy Policy explains how Kervan Bazaar (“we”, “us”) collects, uses and protects your personal data when you visit kervanbazaar.com or buy from us. We process personal data in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies to you, the EU General Data Protection Regulation (GDPR).
1. Who we are (data controller)
EMR Digital, trading as Kervan Bazaar
Atalar Mah. Doğu Cad. No:62, Kartal / Istanbul, Türkiye
Email: info@kervanbazaar.com · WhatsApp: +90 541 963 82 30
2. Personal data we collect
- Identity & contact data: name, email address, phone number, billing and delivery address.
- Order data: products purchased, order amounts, order history, notes you add to your order.
- Payment data: payments are processed by our payment provider. We do not receive or store your full card number.
- Account data: username and encrypted password if you create an account.
- Communication data: messages you send us by email, WhatsApp or contact forms.
- Technical data: IP address, browser type, device information and pages visited, collected through cookies and server logs.
- Marketing preferences: whether you have subscribed to our newsletter.
3. Why we use your data (purposes and legal grounds)
- To process, ship and deliver your order and handle returns — performance of a contract.
- To send order confirmations, shipping updates and answer your questions — performance of a contract / legitimate interest.
- To keep accounting and tax records and meet consumer-protection obligations — legal obligation.
- To protect our website against fraud and misuse and to improve our services — legitimate interest.
- To send you newsletters and offers — only with your consent, which you can withdraw at any time.
4. Who we share your data with
We only share your data when necessary, with:
- Courier companies (for example DHL, UPS, FedEx) to deliver your order;
- Payment service providers to process your payment;
- Our hosting, email and IT service providers;
- Accountants, auditors and legal advisers;
- Public authorities, including customs, when required by law.
We never sell your personal data.
5. International transfers
Because we ship worldwide, your delivery data is shared with couriers and authorities in the destination country. Some of our service providers may also process data outside Türkiye. Where required, such transfers are made with your explicit consent or on the basis of appropriate safeguards under KVKK and GDPR.
6. How long we keep your data
We keep order and invoice records for as long as required by Turkish commercial and tax law (generally 10 years). Account data is kept while your account is active. Marketing data is kept until you unsubscribe. Other data is deleted or anonymised when no longer needed.
7. Your rights
Under Article 11 of KVKK and, where applicable, the GDPR, you have the right to: learn whether your data is processed; request information and a copy of your data; learn the purpose of processing; know the third parties to whom your data is transferred; request correction or deletion; object to processing, including direct marketing; withdraw consent; request restriction or data portability; and claim compensation for damages arising from unlawful processing. EU/EEA residents may also lodge a complaint with their local supervisory authority.
To exercise your rights, email info@kervanbazaar.com. We will reply within 30 days at the latest.
8. Cookies
We use cookies to run the shop (for example, to remember your cart) and, with your consent, for analytics. See our Cookie Policy for details.
9. Security
Our website uses SSL encryption, and we take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access.
10. Changes to this policy
We may update this policy from time to time. The latest version is always published on this page with its update date.
11. Contact
Questions about your privacy? Email info@kervanbazaar.com.