Privacy Policy

01 — Controller

The controller of your personal data is Ilyas Topcu, trading as Jazzville, Fenerbahçe Mah. İğrip Sk. No: 13 İç Kapı No: 1, Kadıköy/İstanbul, Türkiye ("we"). For any privacy question or request, write to contact@jazzville.co.

This policy applies to https://jazzville.co, to orders placed on it and to our emails. Customers in Türkiye also receive the KVKK Information Notice (KVKK Aydınlatma Metni), which applies alongside this policy.

02 — What we collect

Order and account data: name, email address, phone number, delivery and billing addresses, the items ordered, order and payment status, and your correspondence with us.

Payment data: payments are processed by our payment provider. We receive only the payment result and limited details, such as the card type and last four digits. We never receive or store your full card number or security code.

Technical data: when you visit the Site, our hosting provider automatically processes your IP address, browser type, requested pages and the time of the request, in server logs, for security and to deliver the Site. We also use your approximate country, derived from your IP address, to suggest a display currency. We do not store it.

Newsletter data: if you subscribe, your email address and the record of your consent.

03 — Why we use it and on what legal basis

To take, fulfil and deliver your order, handle returns and answer your questions: performance of the contract (GDPR art. 6(1)(b); KVKK art. 5(2)(c)).

To issue invoices and keep accounting and tax records: legal obligation (GDPR art. 6(1)(c); KVKK art. 5(2)(ç)).

To keep the Site secure, prevent fraud and defend legal claims: our legitimate interests (GDPR art. 6(1)(f); KVKK art. 5(2)(e) and (f)).

To send marketing emails: only with your consent (GDPR art. 6(1)(a); KVKK art. 5(1) and Law No. 6563 on electronic commerce). You can withdraw consent at any time through the unsubscribe link in every email. Withdrawing does not affect processing carried out before.

We do not sell your data. We do not use automated decision-making that produces legal or similarly significant effects for you.

04 — Cookies and similar storage

We do not use analytics, advertising or tracking cookies on https://jazzville.co. The Site stores the following in your browser's local storage, only to provide features you ask for, and these are therefore strictly necessary: the identifier of your shopping bag, so that it survives a page reload and your chosen display currency.

Checkout runs on Shopify, which sets the cookies it needs to process your order and prevent fraud. They are described in Shopify's cookie policy at shopify.com/legal/cookies. If we ever introduce analytics or marketing cookies, we will ask for your consent first.

05 — Who receives your data

We share data only with the service providers that we need to run the shop. They act on our instructions under data-processing agreements:

• Shopify (online store and checkout platform) • our payment provider, for card processing and fraud prevention • Vercel (website hosting) • Google (Workspace email) • UPS and its partners, for delivery and customs clearance, which requires your name, address, phone number and the parcel contents and value • our accountant and our e-invoice provider, for invoicing and tax compliance

We also disclose data to courts, tax and other public authorities when the law requires it.

06 — International transfers

We are established in Türkiye, and some of our providers process data outside your country, including in the United States, Canada and the European Union. For transfers out of the EU and UK, we rely on adequacy decisions or on the European Commission's standard contractual clauses, and the UK addendum to them, as provided by our providers.

For transfers out of Türkiye, we rely on the standard contracts provided for in Article 9 of the KVKK. For occasional transfers that are necessary to perform your contract, such as a cross-border delivery, we rely on Article 9(6)(b).

You may ask us for information about the safeguards used.

07 — How long we keep it

Order, invoice and accounting records: 10 years from the end of the calendar year of the order, as required by the Turkish Commercial Code (art. 82) and the Tax Procedure Law.

Customer correspondence: up to 3 years after the matter closes, to handle follow-up questions and legal claims.

Newsletter: until you unsubscribe, after which we keep only the proof of your consent and its withdrawal, for as long as the limitation period requires.

Server logs: for the short period set by our hosting provider, normally no more than 30 days.

We then delete or anonymise the data.

08 — Your rights

You have the right to access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. Customers in Türkiye have the rights listed in Article 11 of the KVKK. These are set out in the KVKK Information Notice.

Write to contact@jazzville.co. We may need to verify your identity. We answer free of charge within 30 days at the latest.

You may also complain to a supervisory authority: in Türkiye, the Personal Data Protection Authority (kvkk.gov.tr); in the EU, the data protection authority of your country; in the UK, the Information Commissioner's Office (ico.org.uk).

09 — Security

The Site is served only over encrypted HTTPS connections. Payment data is handled by PCI-DSS-certified providers. Access to customer data is limited to the people who need it to serve you. No system is completely secure. If a breach creates a risk to you, we will notify you and the competent authority as the law requires.

10 — Children

The Site is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided data to us, contact us and we will delete it.

11 — Changes

We may update this policy when our services or the law change. The date at the top of this page shows the latest version. If we make a material change, we will tell you by email or on the Site before it takes effect.