DATA PROTECTION

Privacy Notice

This notice explains how your personal data is handled when you visit madscommerce.com and when you contact MadsCommerce via the contact form or by email. Last updated: 26 September 2026.

1. Data controller

Under Turkish Personal Data Protection Law no. 6698 (“KVKK”), the data controller is Didem Ürgüplü, the owner of the sole proprietorship operating under the MadsCommerce brand. Contact location: Bornova/İzmir. You can reach us at hello@madscommerce.com.

2. Data collected and method

When you complete the contact form or email us, your name, email address, chosen topic and message, and any phone or company details you choose to provide are collected electronically and directly from you.

If you give consent in the cookie banner, usage data such as the pages you visit, visit duration and interactions, approximate location (country/city level), device and browser details and how you reached the site are collected electronically and automatically through Google Analytics.

When you visit the site, technical data such as your IP address, request time and error records may be processed automatically through the site infrastructure to keep the site secure and operating correctly.

Please do not send identity documents, payment card details, health information or marketplace passwords that are unnecessary for your enquiry.

3. Purposes and legal bases

Identity, contact and message data in service and preliminary consultation enquiries is processed to assess and answer your request, communicate with you and, where appropriate, establish or perform a contract. Processing directly related and necessary to establishing or performing a contract is carried out under KVKK art. 5/2-c.

Processing required to answer other questions and maintain the site’s technical security is assessed on the basis of legitimate interests, provided your fundamental rights and freedoms are not harmed (art. 5/2-f). Records required to meet legal obligations may be processed under art. 5/2-ç, and records necessary to establish, exercise or protect a right under art. 5/2-e.

Google Analytics usage data is processed only on the basis of your explicit consent (art. 5/1) to measure how the site is used and improve its content. You may withdraw consent at any time; withdrawal does not affect the lawfulness of prior processing.

Contacting us does not constitute marketing permission. Enquiry data is not sold or used for advertising, profiling or automated decision-making.

4. Service providers and recipients

Google may process contact data to the extent necessary to receive, transmit and store emails. Messages sent through the contact form are also stored in the site database. The site is published on Namecheap shared hosting infrastructure. Technical data and records in the site database may be processed by Namecheap and infrastructure providers involved in delivering the service to the extent necessary to deliver the site, maintain its security and operate it technically.

If you consent to cookies, usage data is processed by the analytics provider Google (Google Analytics).

Relevant data may be disclosed to authorised public bodies, judicial authorities or legal advisers where necessary to meet a legal obligation or establish, exercise or protect a right.

Due to the technical structure of Google and Namecheap services, contact data, form records, technical records and, where you have consented, Google Analytics usage data may be processed outside Türkiye or transferred abroad. International transfers are carried out in accordance with the conditions of Article 9 of the KVKK and applicable safeguards. Completing the form or sending us an email does not constitute explicit consent to an international transfer.

6. Retention and deletion

Initial enquiry correspondence and contact form records that do not develop into a contract or dispute are retained for no more than 1 year from receipt. Google Analytics usage data is deleted automatically at the end of the retention period set in Google Analytics (no more than 14 months). If the purpose of processing ends earlier and no other legal basis requires retention, the data is deleted or destroyed. Records that must be kept for a contract, legal obligation or the protection of rights are retained only for the period required by the applicable legal basis.

You may request deletion by contacting hello@madscommerce.com.

7. Cookies and technical records

The site uses two types of cookies and similar technologies:

Essential: required to publish and secure the site and to remember your cookie choice in your browser. These do not depend on your consent and are not used for marketing.
Analytics (Google Analytics – _ga, _ga_*): used only if you select “Accept” in the cookie banner, and kept for up to 2 years. If you reject, no analytics cookies are set.

No advertising or marketing cookies are used. You can change your choice or withdraw consent at any time via Cookie preferences.

8. Your rights and requests

Ask whether your data is processed and obtain information about that processing.
Learn the purpose, whether your data is used accordingly and who receives it in Türkiye or abroad.
Request correction of incomplete or inaccurate data, and deletion or destruction when the legal conditions are met.
Ask for recipients to be notified of corrections, deletion or destruction.
Object to adverse results based solely on automated analysis and seek compensation for damage caused by unlawful processing.

You may exercise your rights under KVKK art. 11. You may send a request from an email address you have previously provided to us and that is recorded in our system to hello@madscommerce.com. Your request must clearly state the information needed to verify your identity, the right you wish to exercise and what you are requesting. Requests are answered as soon as possible and within 30 days at the latest.