PRIVACY POLICY

Last Updated: August 24, 2026

At Norseal Wool, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose and protect your personal data when you visit our website, create an account, place an order, contact us or otherwise use our services.

This Privacy Policy applies to the website:

https://norsealwool.com

By using our website, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Company Name: [LEGAL COMPANY NAME]
Registered Address: [FULL COMPANY ADDRESS]
Email: info@norsealwool.com
Website: https://norsealwool.com
Phone: [PHONE NUMBER]
Tax Number: [TAX NUMBER – if you want to display it]
MERSIS Number: [MERSIS NUMBER – if applicable]

For the purposes of Turkish Personal Data Protection Law No. 6698 (“KVKK”), the company identified above acts as the Data Controller.

Under KVKK, the data controller is the entity that determines the purposes and means of processing personal data.

2. Personal Data We Collect

Depending on how you use our website, we may collect the following categories of personal data:

A. Identity Information

This may include:

  • First name
  • Last name
  • Company name, where applicable

B. Contact Information

This may include:

  • Email address
  • Telephone number
  • Billing address
  • Delivery address

C. Order and Transaction Information

When you place an order, we may process:

  • Order number
  • Products purchased
  • Product quantities
  • Order date
  • Order status
  • Billing information
  • Delivery information
  • Return and refund information
  • Payment transaction information

D. Account Information

If you create an account, we may process:

  • Username
  • Email address
  • Account details
  • Order history
  • Saved addresses

E. Customer Service Information

If you contact us, we may process:

  • Your name
  • Contact information
  • Contents of your message
  • Order-related information
  • Other information you voluntarily provide

F. Technical Information

When you visit our website, certain technical information may automatically be collected, such as:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Language settings
  • Pages visited
  • Date and time of access
  • Referring website
  • Website usage information

G. Cookie and Similar Technologies

We may use cookies and similar technologies to operate the website, remember preferences, improve website performance, analyse traffic and, where applicable, support marketing activities.

Further information about our use of cookies is provided in our Cookie Policy.

3. How We Use Your Personal Data

We may process your personal data for the following purposes:

Order Processing

To:

  • Receive and process your orders
  • Confirm your purchases
  • Process payments
  • Prepare and deliver your orders
  • Provide order updates
  • Process returns, exchanges and refunds

Customer Service

To:

  • Respond to your questions
  • Handle complaints
  • Provide technical or customer support
  • Communicate with you regarding your orders

Account Management

To:

  • Create and manage customer accounts
  • Provide access to order history
  • Manage saved addresses and account preferences

Website Operation

To:

  • Operate and maintain our website
  • Improve website functionality
  • Detect technical problems
  • Maintain website security
  • Prevent fraud, abuse and unauthorized activity

Legal and Regulatory Compliance

To:

  • Comply with applicable legal obligations
  • Maintain accounting and financial records
  • Respond to lawful requests from competent authorities
  • Exercise or defend legal claims
  • Meet our obligations under applicable consumer, tax and e-commerce legislation

Website Analytics and Improvement

Where permitted by applicable law, we may use technical and usage information to understand how visitors use our website and improve our products, services and website experience.

4. Legal Bases for Processing

We process personal data in accordance with applicable data protection legislation, including Turkish Personal Data Protection Law No. 6698 (KVKK).

Depending on the particular processing activity, the applicable legal basis may include:

  • Processing being necessary for the establishment or performance of a contract;
  • Processing being necessary for compliance with a legal obligation;
  • Processing being necessary for the establishment, exercise or protection of a legal right;
  • Processing being necessary for our legitimate interests, where permitted by law and provided that your fundamental rights and freedoms are not overridden;
  • Your explicit consent, where explicit consent is legally required.

Personal data must be processed in accordance with the principles of lawfulness, fairness, specified purposes, proportionality and appropriate retention periods.

5. Payment Information

Payments made through our website may be processed through third-party payment service providers.

Where a third-party payment provider is used, payment transactions may be processed directly by that provider in accordance with its own privacy and security policies.

Norseal Wool does not intend to store complete credit or debit card numbers on its own servers unless this is specifically required and lawfully implemented.

The payment provider may process information necessary to authorize and complete your transaction, prevent fraud and comply with applicable financial and legal requirements.

Payment Provider: [INSERT ACTUAL PAYMENT PROVIDER]

⚠️ این قسمت را حتماً بعد از اینکه مشخص شد مثلاً iyzico، PayTR، Stripe یا کدام سرویس را وصل می‌کنید، دقیق می‌کنیم. اسم سرویس واقعی باید اینجا بیاید.

6. Sharing of Personal Data

We may share personal data with third parties only where necessary for the purposes described in this Privacy Policy and in accordance with applicable law.

Depending on the service being provided, these parties may include:

Payment Service Providers

For processing and completing payments.

Shipping and Courier Companies

For delivering orders and processing shipment-related information.

IT and Hosting Service Providers

For hosting, maintaining and securing our website and information systems.

Accounting and Financial Service Providers

For accounting, invoicing, tax and financial obligations.

Professional Advisors

Such as legal, accounting or professional consultants where necessary.

Government Authorities

Where disclosure is required by applicable law or by a lawful request from an authorized authority.

Analytics and Technology Providers

Where applicable and legally permitted, we may use third-party technology providers for website analytics, performance, security or other website functions.

We do not sell your personal data to third parties.

7. International Transfers

Some service providers we use may process or store personal data outside Türkiye.

Where personal data is transferred outside Türkiye, we will take the measures required by applicable data protection legislation and comply with the applicable requirements governing international transfers of personal data.

The rules concerning international transfers are particularly important under the current KVKK framework, so this section should be reviewed against the actual providers installed on Norseal Wool, especially payment, hosting, analytics, advertising and email services.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including:

  • Completing and managing orders;
  • Providing customer support;
  • Meeting accounting, tax and legal obligations;
  • Resolving disputes;
  • Preventing fraud and abuse;
  • Exercising or defending legal claims.

When personal data is no longer necessary, it will be deleted, destroyed or anonymized in accordance with applicable legislation and our data retention procedures.

9. Data Security

We take reasonable technical and organizational measures to protect personal data against:

  • Unauthorized access;
  • Unauthorized processing;
  • Accidental loss;
  • Destruction;
  • Damage;
  • Alteration;
  • Unauthorized disclosure.

Under Article 12 of KVKK, data controllers are required to take the necessary technical and organizational measures to prevent unlawful processing or access and to ensure the security of personal data.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

10. Cookies

Our website may use cookies and similar technologies.

Cookies may be used for purposes including:

  • Essential website functionality;
  • Remembering user preferences;
  • Shopping cart functionality;
  • Login and account functionality;
  • Website performance;
  • Analytics;
  • Security;
  • Marketing, where applicable.

Where applicable law requires consent for non-essential cookies, we will request your consent before activating those cookies.

You may also control cookies through your browser settings.

For more information, please see our Cookie Policy.

KVKK has specifically addressed cookie-based processing in e-commerce and has emphasized that non-essential cookies requiring consent should not simply be activated without the appropriate consent mechanism.

11. Your Rights Under KVKK

Subject to the conditions and limitations provided by applicable law, you may have the right to:

  1. Learn whether your personal data is being processed;
  2. Request information regarding the processing of your personal data;
  3. Learn the purpose of processing and whether your data is used in accordance with that purpose;
  4. Learn the third parties to whom your personal data has been transferred;
  5. Request correction of incomplete or inaccurate personal data;
  6. Request deletion or destruction of personal data where the relevant legal conditions are met;
  7. Request notification of correction, deletion or destruction to third parties to whom your data has been transferred, where applicable;
  8. Object to certain results arising from the analysis of your personal data exclusively through automated systems, where applicable;
  9. Request compensation for damages arising from unlawful processing of your personal data.

These rights arise under Article 11 of KVKK.

12. How to Exercise Your Rights

You may submit your requests regarding your personal data to:

Email: info@norsealwool.com

Postal Address:
[LEGAL COMPANY ADDRESS]

Your request should include sufficient information to identify you and clearly explain the right or request you wish to exercise.

We may request additional information where necessary to verify your identity and protect your personal data.

We will respond to your request within the period required by applicable legislation.

13. Third-Party Websites

Our website may contain links to third-party websites, services or social media platforms.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policies of those third parties before providing them with personal information.

14. Children’s Privacy

Our website is not intentionally directed toward children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal data without appropriate authorization, please contact us at:

info@norsealwool.com

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services;
  • Changes to our website;
  • Changes to applicable legislation;
  • Changes to our data processing practices;
  • Changes to our service providers.

The updated version will be published on this page with a revised “Last Updated” date.

16. Contact Us

If you have any questions about this Privacy Policy or the processing of your personal data, please contact us:

Norseal Wool
Email: info@norsealwool.com
Phone: [PHONE NUMBER]
Address: [FULL COMPANY ADDRESS]