Privacy Policy

Introduction and Data Controller

At HIERA DIŞ TİCARET LİMİTED ŞİRKETİ ("the Company", "we" or "our"), we are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, transfer and protect your data when you visit our website, become a member, or make a purchase. Under Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is our Company, registered with the Denizli Trade Registry.

Information We Collect

We process the following data that you provide directly or that is collected automatically during your use:

• Identity and contact information: First name, last name, e-mail address, phone number, delivery and billing address.
• Account data: Login credentials used when you create a membership and your order history.
• Transaction security and device data: IP address, browser type, operating system, referring URLs, browsing behavior on our site, and cookie records.
• Payment information: Your credit and debit card details are processed securely through our licensed payment partner iyzico. Your card details are never retained or stored on our servers.

How We Use Your Information

We use the information we collect for the following legal and operational purposes:

• Processing your orders, invoicing and managing delivery (shipping),
• Managing your customer account and providing after-sales support,
• Sending mandatory transactional notifications such as order confirmations and shipping updates,
• Analyzing our website's performance to improve user experience,
• Complying with legal obligations, preventing fraud and ensuring information security,
• Sending campaigns, discounts and commercial electronic messages only if you have given explicit consent.

Cookies and Tracking Technologies

We use cookies to improve your browsing experience:

• Necessary cookies: Required for core site functions such as the shopping cart and member login.
• Analytics and marketing cookies: Collected via your browser, with your consent, to understand how the site is used and to offer content tailored to your preferences.

You can manage your cookie preferences at any time through your browser settings.

Data Sharing and Third Parties

Your personal data is never sold to third parties. Your data is shared, only for the performance of services and in accordance with KVKK legislation, with the following parties:

• Our payment service provider (iyzico) for secure collection of payments,
• Contracted cargo and logistics companies for product deliveries,
• E-invoice and accounting integrations for legal invoicing processes,
• Authorized judicial and administrative authorities where a legal obligation arises.

Data Security

To protect your data we apply end-to-end SSL/TLS encryption, PCI-DSS compliant secure payment gateways and strict server access controls. Our modern software architecture, developed specifically for our Company, is protected with the latest security protocols.

Your Legal Rights (KVKK and GDPR)

Under Article 11 of the KVKK and (where applicable) the GDPR, you have the right to request access to your data, correct inaccurate data, request erasure or restriction of processing, request your data in a portable format, and claim compensation for damages in the event of unlawful processing. To exercise your rights, you may apply in writing to our registered e-mail address [email protected].

Data Retention Periods

Your data is retained for the periods required by applicable legislation. In accordance with the obligation to keep commercial books and records, order data is retained for at least 10 years; membership data is retained for as long as your account remains active and during the statutory limitation periods following its closure. At the end of the period, your data is securely destroyed or anonymized.

Data Hosted Abroad (Germany)

The technical infrastructure, database and application servers of our website are hosted in high-security data centers located in Frankfurt, Germany. Personal data entered while transacting on our site is transferred to and processed on secure servers abroad (Germany), in accordance with Article 9 of the KVKK, in order to provide technical services without interruption. This transfer is protected to EU General Data Protection Regulation (GDPR) standards and takes place when you check the separate "International Data Transfer Explicit Consent Statement" box presented to you during membership or ordering.

Contact Information

Company Title: HIERA DIŞ TİCARET LİMİTED ŞİRKETİ
Address: Yenişehir Mahallesi, Şht. Pyd. Çvş. Tuncay Özçoban Caddesi No:2 D:B A-1 Blok, 20040 Pamukkale / Denizli, Türkiye
E-mail (KEP): [email protected]

Last Updated: 9 June 2026