00
:
00
:
00

Privacy and Cookie Policy

At I Love Home Glass we take the security of your personal data seriously. This policy explains what we collect, why, how long we keep it and what rights you have — under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

1. Data controller

2. Data we process

  • Identity and contact data: name, surname, e-mail address, phone number.
  • Transaction data: order details and history, billing and delivery address, returns and support records.
  • Payment data: amount, payment method and transaction reference. We never see or store your card number, expiry date or CVV — payments are processed by a licensed payment institution.
  • Technical and usage data: IP address, browser and device information, on-site browsing records, cookie records.
  • Marketing data: newsletter subscription and contact preferences, only with your consent.

3. Purposes and lawful bases

  • Creating, shipping, delivering and invoicing your order — necessary for the performance of our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
  • Statutory retention, tax and accounting obligations — compliance with a legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
  • Customer support, complaint handling, returns — performance of the contract and our legitimate interests (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(f)).
  • Site security and fraud prevention — legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
  • Marketing e-mails and commercial messages — only with your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)), which you may withdraw at any time using the unsubscribe link or by writing to us.

4. Recipients

We share your data only as far as necessary for the purposes above:

  • carriers and logistics providers, to deliver your order;
  • licensed payment institutions and banks, to collect payment;
  • our e-commerce platform and hosting provider, to run this website;
  • our accountant, for invoicing and bookkeeping;
  • competent public authorities, where the law requires it.

We do not sell or rent your personal data.

5. International transfers

Some of the infrastructure, hosting, e-mail and analytics services we use run on servers located outside Türkiye, and our company is established in Türkiye. Where your data is transferred across borders, the transfer is made on the basis of appropriate safeguards such as the European Commission's standard contractual clauses, or on another lawful basis under GDPR Articles 44-49 and Article 9 of the KVKK. You may contact us for more detail about a specific transfer.

6. Retention

  • Orders, invoices and commercial records: 10 years, as required by Turkish tax and commercial legislation.
  • Account data: while your account is open, and thereafter until the expiry of applicable limitation periods.
  • Marketing consent and contact preferences: until you withdraw your consent.
  • Security and traffic logs: for the periods prescribed by law.

Data whose retention period has expired is deleted, destroyed or anonymised.

7. Cookies

This site uses cookies to function and to improve your experience:

  • Strictly necessary cookies — session management, remembering your basket, security. The site cannot work without them and they do not require consent.
  • Performance / analytics cookies — measuring page views and navigation (including Google Analytics and Google Tag Manager).
  • Marketing cookies — relevant advertising and campaign measurement (including the Meta/Facebook pixel).

You can block or delete analytics and marketing cookies at any time in your browser settings. Blocking strictly necessary cookies may stop the basket and checkout from working.

8. Your rights

Under GDPR Articles 15-22 and Article 11 of the KVKK you have the right to:

  • know whether we process your personal data, and obtain a copy of it;
  • know the purpose of processing and whether the data is used accordingly;
  • know the third parties, in Türkiye or abroad, to whom the data has been transferred;
  • have inaccurate or incomplete data corrected;
  • have your data erased or destroyed;
  • have corrections and erasures notified to the third parties concerned;
  • restrict processing, and receive your data in a portable format;
  • object to processing based on legitimate interests, and to decisions based solely on automated processing;
  • claim compensation for damage caused by unlawful processing.

Send requests to [email protected] or use the form on our Contact page. We respond within 30 days. You may also lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or, if you are in the EU/EEA or the UK, with the data protection supervisory authority of your country of residence.

9. Security

Data transmitted through this site is protected with SSL/TLS encryption. We apply administrative and technical measures to prevent unauthorised access to, loss of, or unlawful processing of your personal data. Only you can view and change your own account details.

10. Changes

We may revise this policy to reflect legal changes or changes to our services. The current version is always published on this page.

Last updated: 2026