Privacy Policy

This notice explains what happens to personal data when you use this website and our online shop. It describes what we actually do, not a general template: every statement below was checked against this site.

1. Who is responsible for your data

The controller for the personal data processed through this website is:

Galata Quality
İzmir–Aydın Highway, Acarlar Village
35920 Selçuk / İzmir
Türkiye

Telephone: +90 232 892 0220
E-mail: ✉

We also run a second website. The same business operates galataquality.com.tr. The two sites are built differently and do different things, so each has its own privacy notice; the business behind both, and the address and telephone number above, are the same.

If you need our registered commercial-registry and tax details in writing, write to the e-mail address above and we will send them to you.

Which law applies. We are established in Türkiye, so Law No. 6698 on the Protection of Personal Data (KVKK) governs our processing. Because this site is published in English and we ship to customers abroad, where the EU or UK General Data Protection Regulation applies to a particular customer we honour the rights it gives them as well.

2. Information collected automatically when you visit

This website is delivered through the Cloudflare content-delivery network, so every request is handled both at Cloudflare’s edge and at our origin server. Each request produces technical connection data: your IP address, the date and time, the address requested, the amount of data transferred, the page you came from, and your browser and operating-system identifiers.

We use this data only to deliver the site securely and reliably and to defend it against attacks. It is not combined with other sources and it is not used to identify you personally.

Legal basis: our legitimate interest in the secure and correct operation of the website (KVKK Art. 5(2)(f), and Art. 6(1)(f) GDPR where that Regulation applies).

International processing: Cloudflare operates a global network, so connection data may be handled on servers outside our own country. Cloudflare acts as our service provider and processes this data on our instructions.

Retention: connection and security logs are kept only for as long as they are needed to operate and protect the site, and are then deleted or overwritten. We do not build visitor profiles from them.

3. Your customer account

You can create an account on this site. When you register we store the e-mail address and password you choose (the password only as a cryptographic hash, never in readable form), together with the name and addresses you save for delivery and billing, and the history of the orders placed from the account.

The account exists so that you can place orders without re-entering your details, see your order history and manage your addresses. You do not have to create one to buy from us.

Legal basis: performance of the contract you enter into when you order, and steps taken at your request before that.

Deleting your account — how, and what happens. You may close your account at any time, without giving a reason, by writing to ✉ from the e-mail address the account uses, or from any address if you can otherwise show the account is yours. We confirm receipt and act within thirty days.

When we close an account we delete the login credentials, the saved addresses, the contents of the basket and any wish list, and the marketing preferences attached to it. What we cannot delete immediately are the records of completed purchases — invoices and the transaction data on them — because Turkish commercial and tax law obliges us to keep those for a fixed statutory period. Those records are locked so that they are used for nothing except meeting that obligation, and are deleted when the period ends. We tell you which of your data falls into that category when you ask us to close the account.

4. Orders, delivery and payment

To fulfil an order we process the name, delivery address, billing address, e-mail address and telephone number you give at checkout, together with the items ordered and the amount payable. Delivery addresses are passed to the carrier that brings the parcel to you, because there is no way to deliver it otherwise.

Payment is handled by the payment provider shown to you at checkout; the details you enter there are processed by that provider under its own responsibility, and we do not receive or store your full card number. If you want to know exactly which provider handles a given payment method before you use it, ask us at the e-mail address in section 1 and we will tell you.

Legal basis: performance of the contract; and, for the invoice and accounting records, compliance with a legal obligation.

Retention: order and invoice records for as long as Turkish commercial and tax law requires, and no longer; everything else connected with an order only for as long as it is needed to complete the order, handle returns and answer questions about it.

5. Enquiries, returns and our contact forms

When you write to us, use a contact or returns form, or ask about a career with us, we process what you send in order to answer you. We keep it for as long as we need to deal with the matter and any follow-up, and then delete it — subject to the statutory retention rules above where the matter concerns a purchase.

The accessibility report form deserves a specific word. This site carries a form for reporting accessibility problems, and one of its fields asks which assistive technology you use. You are free to leave that field empty, and the report still reaches us. If you do fill it in, please give only what is needed to reproduce the problem — the name of the software or device is enough. We use what you write solely to fix the problem you reported, we do not attach it to any customer record, and we delete it once the issue is resolved.

Legal basis: our legitimate interest in answering enquiries and in keeping the site usable for everyone; where you are asked to tick a consent box, your consent, which you may withdraw at any time.

6. Analytics, cookies and consent

This site does not load a Google Analytics or Google Ads tag.

It does show a consent banner, which is set to ask before anything non-essential is stored: you can accept, reject, or choose category by category, and you can change or withdraw that choice at any time from the same banner.

One exception you should know about, stated rather than hidden. Our shop software records how you arrived at the site — for example whether you came from a search engine or followed a link — so that an order can be attributed to the right source. That attribution is currently written to your browser when the page loads, before you make a consent choice. It holds no name, no e-mail address and no account identifier. You can remove it by clearing this site’s cookies and site data in your browser, and you can object to it at the e-mail address in section 1.

We deliberately do not print a fixed table of cookie names and lifetimes here. Such a table goes out of date the moment a service changes a value, and a stale table is worse than none. Your browser’s cookie inspector shows the exact set this site has stored on your device, with real expiry dates, at any moment; and you can ask us for a current list at the e-mail address in section 1.

7. Newsletter

Where this site offers a newsletter, we send it only to people who asked for it, and we use the e-mail address for nothing else. Every message we send carries a one-click unsubscribe link, and unsubscribing takes effect immediately; you can also ask us to remove you at the address in section 1. We keep a minimal record that you unsubscribed, purely so that we do not add you again by mistake.

Legal basis: your consent, which you may withdraw at any time with effect for the future.

8. Social media and maps

This site links to our profiles on social networks. These are ordinary links: opening a page here does not transmit your data to those networks, and no Meta Pixel or comparable tracking pixel is present on this site. If you follow one of the links, the network concerned processes your data on its own responsibility and under its own policy.

9. What this website does not do

We checked the site rather than assuming. The following are not present on it:

• no Google Analytics, Google Ads or Google Tag Manager tag
• no Meta Pixel or comparable tracking pixel
• no captcha service
• no session-recording, heatmap or profiling tool
• no sale or rental of your personal data to anyone, for any purpose

If any of these is added later, this policy is updated before the feature goes live.

10. Your rights

You have the right to learn whether we process personal data about you, to obtain access to it and information about how it is used, to have inaccurate data corrected, to request erasure or restriction, to object to processing we carry out on the basis of a legitimate interest, to receive the data you gave us in a portable form where that applies, and to withdraw any consent you have given, with effect for the future.

To exercise any of these, write to ✉. We may need to ask you for enough information to be sure we are dealing with the right person before we act on a request — that check protects your data, not ours. We answer within thirty days, and sooner where we can.

If you hold an account with us, section 3 explains how to close it and exactly what is deleted and what is retained.

One limit, stated honestly. Where a request concerns records connected to a purchase, we cannot always delete everything immediately: statutory commercial and tax retention rules oblige us to keep certain transaction records for a fixed period. In that case we restrict the data so that it is no longer used for anything else, and delete it when the retention period ends. We tell you when this applies to your request.

11. Complaints

If you believe we have handled your personal data incorrectly, we would like to hear from you first, at the address in section 1 — most matters are resolved quickly that way.

You may also complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu), Nasuh Akar Mah. Ziyabey Cad. 1407. Sok. No: 4, 06520 Balgat / Çankaya, Ankara, Türkiye — or, if you live elsewhere, to the data protection supervisory authority responsible for your place of residence.

12. Changes to this policy

We update this policy whenever the services used on this site or the law that applies to them change. The version published on this page is the one that applies. Where a change materially affects how your data is used, we say so on this page rather than changing the text quietly.