Opiona cares about the security and privacy of your personal data. This text has been prepared as a disclosure notice under the Personal Data Protection Law (KVKK).
1. Data Controller
Your personal data is processed by Opiona as the data controller.
2. Personal Data Processed
Our platform may process the following personal data:
- Identity data: Name, surname, username
- Contact data: Email address, phone number, delivery address
- Payment data: Card information processed only via the payment provider during payment (card data is not stored in our systems)
- Transaction data: Order history, product reviews, favorites
- Technical data: IP address, browser type, cookie data, pages visited
3. Purposes of Processing Personal Data
- Creating, processing and fulfilling orders
- Account management and security
- Customer service and support requests
- Fulfilling legal obligations (invoicing, accounting)
- If consent given: marketing communications and newsletter
- Fraud and scam prevention
- Platform security and technical operations
4. Transfer of Personal Data
Your personal data may be shared with third parties in the following cases:
- Cargo and logistics companies: Name, surname and address for physical product deliveries
- Payment service providers: Minimum information required for payment processing
- Legal obligation: Authorized institutions under court orders or legal regulations
Your personal data is not sold or shared with third parties for marketing purposes.
5. Cookie Usage
Our platform uses cookies to improve the user experience. For cookie preferences, please review our Cookie Policy .
- Necessary cookies: Required for session management, shopping cart and security operations. Cannot be rejected.
- Analytics cookies: Used to analyze site usage. Subject to your consent.
- Marketing cookies: Used to provide content relevant to your interests. Subject to your consent.
6. Data Retention Periods
- Account data: Until account deletion + legally required retention period
- Order records: 10 years (as required by Turkish Commercial Code)
- Invoice and accounting records: 10 years
- Analytics and technical data: Maximum 26 months
7. Your Rights under KVKK
Under Article 11 of KVKK, you have the following rights:
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether data is used accordingly
- To know third parties to whom data is transferred domestically or abroad
- To request correction if data is incomplete or incorrect
- To request deletion or destruction under the conditions of Article 7 of KVKK
- To object to results arising from analysis via automated systems
- To claim compensation if you suffer damages due to unlawful processing
To exercise your rights, you may contact us through our contact channels. Your requests will be responded to within 30 days at the latest.
8. Security
Technical and administrative measures are taken to protect your personal data against unauthorized access, modification, disclosure or destruction. Payment transactions are protected with SSL/TLS encryption.
9. Policy Updates
When this policy is updated, the revised version will be published on this page. In case of major changes, users will be notified via email or platform notification.