KVKK Disclosure Statement

Prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK)

1. DATA CONTROLLER

CUCIX YAZILIM TEKSTİL ORGANİZASYON DIŞ TİCARET LİMİTED ŞİRKETİ ("CUCIX")

Address: Güvenevler Mah. 1928 Sok. Ekinci Global İş Merkezi No:5 İç Kapı No:25, Yenişehir, Mersin 33140, Türkiye
Tax number: 2150669486
Contact: info@cuciwear.co · 0850 304 12 00

2. PERSONAL DATA PROCESSED AND PURPOSES OF PROCESSING

The table below outlines the categories of personal data we process and the purposes for which they are processed.

Data Category Personal Data Purpose
Identity First name, last name Order processing, invoicing, delivery
Contact Email address, phone number, shipping/billing address Order notifications, shipment tracking, customer support
Financial Payment method information (payment card numbers are not stored) Payment processing
Shopping Order history, shopping cart information Order management, returns/exchanges, customer support
Technical IP address, browser and device information, cookie data Website security, performance improvement, analytics

3. LEGAL BASIS FOR PROCESSING PERSONAL DATA

Your personal data is processed in accordance with Articles 5 and 6 of the Turkish Personal Data Protection Law (KVKK) based on the following legal grounds:

  • Performance or execution of a contract (order processing, delivery, invoicing)

  • Compliance with legal obligations (tax, commercial, and accounting legislation)

  • Legitimate interests (website security, fraud prevention)

  • Explicit consent (marketing communications, where separately obtained)

4. TRANSFER OF PERSONAL DATA

Your personal data is shared only with third parties where necessary for the provision of our services.

These may include:

  • Shipping carriers: Name, surname, and delivery address for order fulfillment.

  • Shopify Inc.: As our e-commerce infrastructure provider, Shopify processes order and payment-related data. International data transfers are protected through Standard Contractual Clauses (SCCs) or other legally recognized safeguards.

  • Public authorities: Where required by applicable laws or upon requests from competent governmental authorities.

5. DATA RETENTION PERIODS

Your personal data is retained for the following periods:

  • Order and invoice records: 10 years, as required by applicable legislation.

  • Customer account information: Until you request deletion of your account.

  • Marketing communication records: Deleted within 30 days following withdrawal of your consent.

  • Technical logs: Retained for a maximum of 3 years.

6. YOUR RIGHTS AS A DATA SUBJECT

Pursuant to Article 11 of the Turkish Personal Data Protection Law (KVKK), you have the right to:

  • Learn whether your personal data is being processed.

  • Request information regarding the processing of your personal data.

  • Learn the purpose of processing and whether your data is used in accordance with that purpose.

  • Learn the third parties to whom your personal data has been transferred, domestically or internationally.

  • Request the correction of incomplete or inaccurate personal data.

  • Request the deletion or destruction of your personal data where permitted by law.

  • Request notification of such corrections or deletions to third parties to whom your data has been disclosed.

  • Object to decisions based solely on automated processing that produce legal or similarly significant effects.

  • Request compensation for damages incurred due to unlawful processing of your personal data.

7. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights under the Turkish Personal Data Protection Law (KVKK), you may contact us at info@cuciwear.co.

We will respond to your request within the time limits prescribed by applicable law (generally within 30 days). If you believe your request has not been handled in accordance with the law, you may file a complaint with the Turkish Personal Data Protection Authority (KVKK).