Privacy Policy

Last Update: December 5, 2025

This Privacy Policy applies to the business operated by Sólvia Studio . This document outlines the principles regarding the processing of personal data within the scope of the www.studiosolvia.com website, mobile version, social media sales channels, and all our digital/service infrastructures (“ Services ”).

At Sólvia Studio, we process your personal data in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and related legislation, based on the rule of law and fairness; we embrace the principles of transparency, data minimization, security, and accountability.

This policy also covers Shopify's technical role as a data processor, since we operate on Shopify's infrastructure.

1. FROM WHICH SOURCES DO WE COLLECT YOUR PERSONAL DATA?

We may collect personal data using the following methods:

  • Through our website (order forms, account creation, contact forms, shopping processes)

  • Through payment infrastructures (Iyzico, Shopify Payments qualified data)

  • Shipping/logistics processes

  • Our social media accounts (Instagram posts, social media stores)

  • Cookies and analytical tools

  • Call center / WhatsApp / email communications

2. CATEGORIES OF PERSONAL DATA WE PROCESS

The following data categories can be processed:

Identity Information

  • First name, last name

  • User name

Contact Information

  • Phone number

  • Email address

  • Delivery and billing address

Customer Transaction Data

  • Order details

  • Product preferences

  • Basket movements

  • Returns, exchanges, claim history

Payment Information

  • Limited information about the cardholder (the full card number is held by Shopify/Iyzico, we have no access to it)

  • Payment type, installment information, transaction number.

Technical/Internet Access Data

  • IP address

  • Cookies

  • Session information

  • Device model, scanner type

  • Site navigation actions

Marketing Data

  • Newsletter subscription with explicit consent.

  • Email/SMS marketing preferences

  • Campaign engagement data

3. PURPOSES OF PROCESSING PERSONAL DATA

We process your personal data for the following purposes:

A) Formation and performance of the contract

  • Creating orders, receiving payments.

  • Product preparation, packaging

  • Managing cargo and delivery processes.

  • Returns, exchanges, customer support.

B) Legal obligations

  • Tax and financial legislation

  • Issuing an invoice

  • Commercial record and document retention requirements

C) Legitimate interests

  • Management of internal operational processes

  • Fraud prevention

  • Security checks

  • Site performance and improvement

  • Inventory and operations management

  • Customer segmentation and analytics (anonymized)

D) Transactions requiring explicit consent

  • Commercial electronic communications (campaign emails/SMS)

  • Advanced marketing cookies

  • Profile-based advertising activities

4. TO WHOM DO WE TRANSFER YOUR DATA?

Transfers are possible only within the following categories:

Mandatory service providers

  • Shopify (infrastructure, server, security)

  • Iyzico / payment institutions

  • Shipping companies (UPS, DHL, Amazon, etc.)

  • ERP/e-invoice providers

  • Social media stores (Instagram Shop, Facebook Commerce)

Technical service providers

  • Analytical tools (Shopify Analytics, Google Analytics*)

  • Server and security services

  • Cookie management platforms

Legal authorities

  • In accordance with legal obligations, courts and official institutions

  • Supervisory authorities upon request

*Some analytical tools require user consent for the use of cookies.

5. TRANSFER OF DATA ABROAD

Due to Shopify's infrastructure, your data:

  • Canada

  • USA

  • On secure servers located in the EU region

It can be processed and stored.

This transfer is based on your explicit consent under Article 9 of the KVKK ( Personal Data Protection Law) or through transfer mechanisms authorized by the Board .

Transmission is limited only to the categories of technical data that are essential for the provision of the service.

6. COOKIES AND DIGITAL TRACKING TECHNOLOGIES

Our website uses the following types of cookies:

Mandatory Cookies

  • Security

  • Session management

  • Shopping cart and payment processes

Performance and Analytical Cookies

  • Traffic measurement

  • Anonymous analysis of user behavior

Marketing and Targeting Cookies

  • Retargeting ads

  • Social media pixel technologies

Marketing cookies will not be activated without your explicit consent .

7. RETENTION PERIODS OF PERSONAL DATA

Retention periods for each data category:

  • Order records: 10 years (as required by tax/commercial law)

  • Customer contact records: 3 years

  • Marketing data: Up to the date consent is withdrawn.

  • Technical logs: 6 months – 2 years

  • Shipping/tracking data: 3 years from delivery

After this period, the data is deleted, destroyed, or anonymized.

8. PERSONAL DATA SECURITY

The following security measures are implemented:

  • Shopify's ISO certified infrastructure

  • TLS/SSL encryption

  • Restricting access rights

  • Regular analysis of log records

  • Data minimization

  • Secure encryption and authentication.

  • Regular penetration testing and security scans.

  • We do not have access to e-commerce payment information (PCI-DSS compliant)

9. YOUR RIGHTS UNDER THE PERSONAL DATA PROTECTION LAW (KVKK)

In accordance with Article 11 of the KVKK (Turkish Personal Data Protection Law), you have the following rights:

  • To find out whether your personal data is being processed.

  • Request information if it has been processed.

  • To find out if it is being used for its intended purpose.

  • Requesting corrections if it is incomplete or incorrectly processed.

  • Requesting deletion/deletion

  • Requesting information about the parties to whom it is transferred.

  • Object to the process

  • Claim compensation if you suffer damages.

You can communicate your rights to us using the following method.

10. DATA CONTROLLER INFORMATION

Data Controller: Sólvia Studio / Merve Güngör Design Workshop

Phone: +90 506 128 61 38

Email: studio.solvia@gmail.com

Address: Emekevler Mahallesi, Ada Sokak No:10, 41180 Kartepe / Kocaeli, Turkey

You can submit your applications in accordance with the Personal Data Protection Law (KVKK) Application Procedures and Principles.

11. CHANGES TO BE MADE IN POLICY

This policy may be updated as necessary. All changes will take effect on the date of publication and will be announced on our website.

This policy guarantees Sólvia Studio's commitment to protecting your personal data and ensuring the quality of our services. You can always contact us with any questions.