PRIVACY POLICY AND PERSONAL DATA PROTECTION NOTICE

1. Purpose and scope

This Privacy Policy and Personal Data Protection Notice explains how the personal data of individuals who visit www.holiedress.com, create an account, place an order or contact Holie Dress through its communication channels is processed.

Holie Dress respects the privacy of its customers and users and processes personal data in accordance with Turkish Personal Data Protection Law No. 6698 and other applicable legislation.

2. Data controller information

Data controller and business owner: Abdulhamit Hacıkeleşoğlu
Brand: Holie Dress
Website: https://www.holiedress.com
Address: Meşrutiyet Mah. Kodaman Sok. No: 68/B, Şişli, Istanbul, Türkiye
Email: [email protected]
Telephone: +90 533 379 04 21
Tax office: Mecidiyeköy Tax Office
Tax number: 4540812811
MERSIS number: 3618819316600001
Registered electronic mail address: Not available.

3. Personal data processed

The following categories of personal data may be processed:

Full name,
Telephone number,
Email address,
Billing and delivery address,
Account and membership information,
Order and shopping history,
Purchased product, size, colour and preference information,
Invoice and transaction information,
Payment transaction information,
Shipping, delivery, return and exchange information,
Customer-service communications,
Request, suggestion and complaint records,
IP address,
Device, browser and session information,
Cookie records,
Website usage and browsing information,
Marketing and communication preferences.

Holie Dress does not store complete debit or credit card information. Card payments are processed through the secure infrastructure of authorised banks and payment-service providers.

4. Purposes of processing

Personal data may be processed for the following purposes:

Creating and managing customer accounts,
Receiving and processing orders,
Processing payments and collections,
Conducting invoicing and accounting procedures,
Preparing, packing and delivering products,
Managing deliveries and tracking shipments through Aras Kargo,
Managing returns and exchanges,
Responding to customer requests and complaints,
Providing after-sales support,
Preventing fraud and misuse,
Maintaining website and information security,
Complying with legal and commercial obligations,
Responding to requests from competent authorities,
Measuring website performance,
Improving customer experience,
Sending promotional, campaign or discount communications where permission has been given,
Providing personalised advertisements and product recommendations where consent or another valid legal basis exists.

5. Legal bases

Personal data may be processed on the following legal grounds:

Processing is necessary for entering into or performing a contract,
Processing is necessary for compliance with a legal obligation,
Processing is expressly required by law,
Processing is necessary for the establishment, exercise or protection of a legal right,
Processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the individual are not harmed,
Explicit consent, where required.

Where processing is based on consent, the individual may withdraw that consent at any time.

6. Collection methods

Personal data may be collected automatically, partly automatically or through physical means via:

Account and registration forms,
Order and checkout pages,
Contact and support forms,
Return and exchange requests,
Email correspondence,
Telephone calls,
WhatsApp and social-media messages,
Cookies and similar technologies,
Shipping information received from carriers,
Transaction information received from banks and payment providers,
Customer-service records.

7. Disclosure of personal data

Personal data may be disclosed, only where necessary, to:

Aras Kargo and other shipping or logistics companies where required,
Banks and authorised payment providers,
E-invoice and electronic archive providers,
Accountants and financial advisers,
Software, hosting, server and technical-support providers,
Information-security service providers,
Customer-support and communications providers,
Legal, audit and consultancy providers,
Advertising and marketing providers,
Legally authorised public institutions,
Courts, prosecutors, enforcement offices and other competent authorities.

Only the information necessary for delivery, such as the recipient’s name, telephone number and delivery address, is shared with shipping companies.

8. International transfers

Personal data may be transferred outside Türkiye where website hosting, email, cloud storage, analytics, advertising, social-media or support providers operate abroad.

Any international transfer is carried out in accordance with the applicable provisions of Turkish Personal Data Protection Law No. 6698 and the legally required safeguards.

9. Cookies

The website may use:

Strictly necessary cookies: Required for the shopping cart, account login, payment and security functions.

Functional cookies: Used to remember language, region, size and customer preferences.

Analytics cookies: Used to measure visitor numbers, page visits, performance and usage patterns.

Advertising and marketing cookies: Used to show relevant advertisements and measure advertising performance.

Non-essential cookies are activated in accordance with the user’s preferences or consent where required by law.

Users may delete or block cookies through their browser settings. Blocking essential cookies may prevent some website features from functioning correctly.

10. Marketing communications

Campaign, discount, product and promotional communications may be sent by email, SMS, telephone or other channels where the user has provided the necessary permission.

Marketing permission may be withdrawn at any time by:

Using the unsubscribe link in a message,
Using the applicable communication-management system,
Emailing [email protected].

Order confirmation, payment, delivery, return, account and security notifications are service communications and are not considered marketing messages.

11. Retention

Personal data may be retained for:

Tax and accounting retention periods,
Consumer-transaction limitation periods,
The period required to perform the contract,
The period required to manage returns, complaints and disputes,
Other periods required by applicable legislation.

When the relevant purpose and legal retention period end, data is deleted, destroyed or anonymised in accordance with the law.

12. Data security

Holie Dress applies appropriate technical and organisational safeguards to prevent personal data from being:

Unlawfully processed,
Accessed by unauthorised persons,
Lost,
Altered,
Disclosed,
Misused.

These measures may include access controls, secure server systems, encryption, firewalls, backups, logging and limitations on staff access.

13. Data-subject rights

Subject to Turkish Personal Data Protection Law, individuals may request:

Confirmation of whether their data is processed,
Information about processing,
Information about processing purposes,
Confirmation that data is used in accordance with those purposes,
Information about third-party recipients,
Correction of inaccurate or incomplete data,
Deletion or destruction where legal conditions are met,
Notification of corrections or deletion to recipients,
Objection to adverse results produced exclusively through automated systems,
Compensation where damage results from unlawful processing.

14. Applications

Requests relating to personal data may be submitted through:

Email: [email protected]
Telephone: +90 533 379 04 21
Postal address: Meşrutiyet Mah. Kodaman Sok. No: 68/B, Şişli, Istanbul, Türkiye
Registered electronic mail address: Not available.

Applications should include:

Full name,
Turkish identity number or passport/identity number for foreign nationals,
Postal address,
Email address and telephone number,
Details of the request,
Supporting documents, where applicable,
Signature for written applications.

Applications are answered as soon as possible and within the applicable statutory period.

15. Children’s privacy

The website is primarily intended for adult customers. Minors should not place orders without the knowledge and consent of a parent or legal representative.

16. Third-party links

The website may contain links to payment providers, social-media platforms or other third-party websites. Holie Dress is not responsible for the privacy practices of those third parties.

17. Updates

Holie Dress may update this Privacy Policy due to legal, technical or operational changes. The updated version becomes effective when published on www.holiedress.com.

18. Contact

Business owner: Abdulhamit Hacıkeleşoğlu
Brand: Holie Dress
Email: [email protected]
Telephone: +90 533 379 04 21
Address: Meşrutiyet Mah. Kodaman Sok. No: 68/B, Şişli, Istanbul, Türkiye
Business hours: Monday to Friday, 09:00–19:00
Weekends: Closed