Privacy & Security Policy

This English text is provided for convenience only; the Turkish version is the legally binding text.

At Gizemli Tasarımlar we care about your privacy. This policy explains how your information is protected when you shop at or visit www.gizemlitasarimlar.com. For detailed information on personal data processing see the KVKK Privacy Notice, and for cookies see the Cookie Policy.

1. Information We Collect

During ordering and registration we collect your name, e-mail, phone, delivery/billing address and order contents; the name/letters you choose for product personalization; and, while you browse, limited technical data via cookies (language, currency preference, session). Detailed categories and purposes are listed in the KVKK Privacy Notice.

2. Payment Security

Payments are processed through the infrastructure of PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş., a licensed payment institution, in compliance with international PCI-DSS security standards. Your card details are never seen, recorded or stored by us; transactions use 3D Secure verification. Payment details travel over an encrypted connection between you and the payment institution only.

3. Data Security Measures

All site traffic is encrypted with SSL/TLS. Your data is stored on infrastructure protected by access authorization and row-level security (RLS) rules; account passwords are stored as irreversible hashes. We apply reasonable technical and administrative measures against unauthorized access, loss or misuse; should a data breach nevertheless occur, statutory notification obligations will be fulfilled.

4. Sharing with Third Parties

Your information is shared only to the extent required by the service: with PayTR and the relevant banks for payments, with shipping carriers for delivery, and with hosting and e-mail service providers for infrastructure. Our hosting providers' servers may be located abroad; such transfers are carried out in accordance with Article 9 of the Turkish Data Protection Law. Your data is never sold or shared for marketing purposes.

5. Children's Privacy

Our site is intended for users over 18. The baby name you share for personalization is used solely to produce the product; no other data about children is requested or processed.

6. EU Customers (GDPR)

For customers ordering from the European Union, personal data is processed only to form and fulfil the order, in line with GDPR principles. You may send GDPR access, rectification, erasure and portability requests to info@gizemlitasarimlar.com.

7. Changes to This Policy

This policy may be updated when necessary; the current version is always published on this page with its version date. Significant changes are announced through reasonable means.

8. Contact

For any privacy questions or requests: info@gizemlitasarimlar.com — Yedikule Mahallesi, Hacıkadın Caddesi No: 133, Fatih / İstanbul.