Privacy Policy

Last updated: 11 November 2026

This policy explains how we process your personal data when you visit our website, buy from our shop or contact us. It follows the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

1. Who we are

The data controller is Craycle, operated by Cemal ÖZÇELİK.

  • Address: İnönü Mahallesi, 682/3 sokak, No:56A, 35180 Buca, İzmir, Türkiye
  • E-mail: support@craycle.com

2. What data we process, why, and on what legal basis

We collect personal data electronically: through our website forms, account and checkout pages, the website chat, e-mail and social media messages, and automatically through cookies and similar technologies.

Account and orders. We process your name, contact details, addresses, order details, payment status and invoice details to create your account, deliver your orders, issue invoices and handle returns and warranty. An account is needed to place an order; without this data we cannot complete your order. Legal basis: performance of a contract and our legal obligations under Turkish commercial and tax law (KVKK Art. 5/2-c and 5/2-ç; GDPR Art. 6(1)(b) and (c)).

Payments. Card details are entered on the secure page of our payment provider and are not stored by us. You can also pay by bank transfer.

Messages to us. When you contact us through the website chat, e-mail or social media, we process your messages, the files you send and the contact details you give, so that we can answer you. If you are signed in, we can see your orders to help you with them. We may also note preferences you mention, such as the model you own, to help you better next time. Legal basis: performance of a contract and our legitimate interest in providing good support (KVKK Art. 5/2-c and 5/2-f; GDPR Art. 6(1)(b) and (f)). You can object to the notes at any time.

AI assistant. Our website chat and some of our replies are supported by an AI assistant, supervised by our team. Your messages are processed by our AI service provider to prepare replies. The assistant does not make decisions with legal or similarly significant effects on you; refunds, payments and order changes are always handled by a person.

Newsletter. If you subscribe, we use your e-mail address, name and purchases to send you news and offers. Legal basis: your consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)). You can unsubscribe with the link in every e-mail.

Website security and statistics. We process technical data such as your IP address and browser information to keep the site secure and to count visits to our links. Legal basis: our legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).

Analytics and advertising. Only with your consent, we use cookies to understand how the site is used and to measure and target our ads. Legal basis: your explicit consent, given in the cookie banner (KVKK Art. 5/1; GDPR Art. 6(1)(a)). Details are in our Cookie Policy.

3. Who receives your data

We share personal data only as far as needed with:

  • service providers who work on our behalf, such as hosting, e-mail, storage, AI, security and accounting providers;
  • payment providers and shipping companies;
  • analytics and advertising partners, only with your consent;
  • public authorities, only when the law requires it.

We do not sell your personal data.

4. Transfers outside Türkiye

Some of our service providers process data outside Türkiye, mainly in the United States and the European Union. We transfer data abroad only in line with Article 9 of the KVKK and, for users in the EU, Chapter V of the GDPR, using the safeguards these laws provide. You can ask us for more information about these safeguards. Using our website is never treated as consent to a transfer.

5. How long we keep your data

  • Orders and invoices, including refunded orders: 10 years from the end of the year of the order, as required by Turkish law. After that, your personal details in the order are deleted or anonymised.
  • Unpaid and failed orders: 6 months. Cancelled orders: 12 months.
  • Customer account: until you close it.
  • Conversations with us in our support system: up to 12 months after the conversation ends; guest website chats 30 days. Files sent in conversations: up to 30 days.
  • Notes about your preferences: up to 12 months.
  • Newsletter: until you unsubscribe.
  • Security, statistics and system log data: up to 180 days.
  • Records of data requests (what was requested and when, without the content): 3 years.
  • Analytics data: up to 14 months.

6. Your rights

Under Article 11 of the KVKK you have the right to:

  • learn whether we process your personal data and request information about it;
  • learn the purpose of the processing and whether it is used for that purpose;
  • know the recipients of your data in Türkiye and abroad;
  • have incomplete or incorrect data corrected;
  • have your data deleted or destroyed;
  • have recipients informed of such corrections or deletions;
  • object to a result against you that arises only from automated analysis;
  • claim compensation for damage caused by unlawful processing.

If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction of processing, data portability and objection, including objection to direct marketing. You can withdraw your consent at any time; this does not affect processing before the withdrawal.

To use your rights, send a written request to our address above or write to support@craycle.com or use our data request page: https://craycle.com/data-deletion. We reply within 30 days and may ask you to confirm your identity. You also have the right to lodge a complaint with the competent data protection authority.

7. Cookies

We use necessary cookies to run the shop. Other cookies are used only after you allow them in the cookie banner. You can change your choice at any time with “Cookie Settings” at the bottom of every page. See our Cookie Policy: https://craycle.com/cookie-policy/

8. Security

We use appropriate technical and organisational measures to protect your data. No system is completely secure; if a data breach affects you, we will inform you and the authorities as the law requires.

9. Children

Our shop is not directed at children under 16, and buying requires legal capacity. If you believe a child has given us personal data, please contact us and we will delete it.

10. Changes to this policy

We will publish any changes on this page and update the date above. If a change significantly affects how we use your data, we will tell you before it takes effect.