This translation is provided for convenience. If it differs from the Turkish version, the Turkish version prevails.
This notice explains, under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK), how we process the personal data you provide while setting up and using your account in the app.igora.shop seller panel. General topics such as cookies, our service providers and international transfers are covered in detail in our [Privacy Policy](/en/privacy); this notice supplements it.
1. Data controller
2. Personal data we process
| Category | Data |
|---|---|
| Identity | First and last name; Turkish ID number for individual sellers and sole proprietorships |
| Contact | E-mail address, mobile (WhatsApp) number, city |
| Customer transaction and finance | How you sell (individual, sole proprietorship, company), business or trade name, tax office, tax number, billing address and billing e-mail |
| Transaction security | E-mail and phone verification records (when codes were sent and confirmed), sign-in records, IP address, browser details |
| Legal transactions | Records of your acceptance of agreements and notices: document, version, time, IP address and browser details |
| Seller profile | Sales channels and store status, selling experience, target markets, product categories and sales goal |
| Marketing | Your consent to commercial electronic messages and your preferences (only if you consent) |
Verification codes are kept only in hashed (irreversible) form and for 10 minutes. Your Turkish ID number is stored encrypted and shown masked in the panel.
3. Purposes and legal bases
| Purpose | Legal basis (KVKK Art. 5) |
|---|---|
| Opening your account and providing the seller panel and the package you bought | Formation and performance of a contract (Art. 5/2-c) |
| Issuing your invoices and keeping tax and accounting records | Compliance with a legal obligation (Art. 5/2-ç) |
| Confirming that the e-mail address and phone number belong to you, account security and fraud prevention | Performance of a contract (Art. 5/2-c) and legitimate interest (Art. 5/2-f) |
| Proving acceptance of agreements and notices and protecting rights in a dispute | Establishing, exercising or protecting a right (Art. 5/2-e) |
| Tailoring the panel to your seller profile and offering relevant guides and support | Legitimate interest (Art. 5/2-f) |
| Sending news about campaigns, features and events | Explicit consent (Art. 5/1) and your consent under Law No. 6563 |
4. How we collect it
We collect data electronically: directly from you through the package application form and the account setup and profile screens of the seller panel, and automatically while you use the service (server and security logs). The name, e-mail and phone you gave in your application are pre-filled on the account setup screen for you to check.
5. Who we share it with
- Service providers: companies that provide our authentication, hosting, e-mail and WhatsApp messaging; only the data the service needs, under contract and on our instructions.
- Accountants: the identity, tax and billing details needed for invoicing and accounting.
- Competent public authorities: such as the tax administration and courts, only where the law requires and on request.
Your Turkish ID number and tax details are not shared with the partners who produce and deliver your orders. Some of our service providers are located abroad, so transfers rely on the safeguards in KVKK Art. 9; see the "International transfers" section of our Privacy Policy.
6. Retention
| Data | Period |
|---|---|
| Account, contact and seller profile details | While your account is open; after closure, for the general limitation period |
| Invoice, tax and accounting records | Up to 10 years under the Tax Procedure Law and the Turkish Commercial Code |
| Verification codes | 10 minutes; deleted as soon as used |
| Verification and security records | 2 years |
| Records of accepted agreements and notices | For the contract and 10 years after it ends |
| Records of commercial message consent | 3 years after the consent stops being valid |
Data past its period is deleted, destroyed or anonymised.
7. Your rights and how to apply
Under KVKK Art. 11 you may ask whether your data is processed and, if so, for information about it; learn the purpose and whether data is used accordingly; know the third parties it is transferred to; have incomplete or inaccurate data corrected and, where the conditions are met, erased or destroyed, with these steps notified to the recipients; object to a result against you that arises solely from automated analysis; and claim compensation for damage caused by unlawful processing.
Send your request from your registered e-mail address to [email protected] or in writing to our address above. We respond free of charge within 30 days at the latest. You can update your name, contact and billing details at any time on the Profile page of the panel.
8. Changes
When this notice changes, the current version is published on this page and shown to you again the next time you sign in to the seller panel.