Privacy Policy (Draft)

1) Data Controller

[SATICI_UNVAN]
Address: [SATICI_ADRES]
Phone: [SATICI_TELEFON] | E-mail: [SATICI_EPOSTA]

This Policy summarises how personal data is processed in the services offered at www.venthub.com.tr. For the full statutory disclosure, please see our Data Protection (KVKK) Notice; in the event of any difference between the two texts, the KVKK Notice prevails.

2) Data We Collect

• Identity: full name, Turkish ID number (for individual invoices)
• Contact: e-mail, telephone, delivery and billing addresses
• Customer transaction: order details, return/request records, transaction history
• Financial: payment amount, instalments, transaction result (card details are processed by iyzico; the Company never sees or stores them)
• Technical: IP address, browser/device information, session and log records

3) Purposes of Processing

• Conclusion and performance of the contract: orders, payment, delivery, returns and withdrawal
• Legal obligations: invoicing, tax and accounting records
• Security: fraud prevention, account and transaction security
• Conducting customer support processes
• Marketing and messaging based on explicit consent

4) Sharing

Your data may be shared, strictly limited to the relevant purpose, with the payment institution (iyzico) and banks, logistics/courier providers ([ANLASMALI_KARGO_FIRMALARI]), hosting and technical infrastructure providers, e-mail/SMS delivery providers, accounting and legal advisers, and competent public authorities upon lawful request. Your data is never sold to third parties for marketing purposes.

5) International Transfers

Our technical infrastructure providers may operate servers abroad. Such transfers are carried out under Article 9 of the KVKK on the basis of an adequacy decision, appropriate safeguards (standard contractual clauses, undertakings, binding corporate rules), or the incidental cases provided by law.

6) Cookies

For the types of cookies used, their durations and how to manage your consent, please see our Cookie Policy.

7) Retention Periods

• Orders and invoicing: 10 years
• Support correspondence: 3 years
• Marketing consents/data: 2 years
• Log and security records: 2 years

8) Data Security

Appropriate technical and administrative measures are applied, including role-based access control, row-level data isolation, encryption in transit and at rest, access logging and regular supplier audits. We recommend using a strong and unique password for your account.

9) Children's Data

The Site is not directed at persons under 18 and does not knowingly collect personal data from children. If we become aware, or are notified, that data belonging to a child has been processed, it is deleted without delay.

10) Your Rights

To exercise your rights under Article 11 of the KVKK, you may apply to [KVKK_BASVURU_EPOSTA]. Details of the application procedure are set out in §10 of our Data Protection (KVKK) Notice.

11) Updates

This Privacy Policy was last updated on 2026-08-15. In the event of a material change, notice will be given on the Site.

This English text is provided for information purposes. In the event of any discrepancy, the Turkish version prevails.