Privacy Policy

Effective Date: [Insert Effective Date]

This Privacy Policy explains how BAFK PAZARLAMA SAN. VE TİC. LTD. ŞTİ. ("Company", "we", "our", or "us") collects, uses, discloses, and safeguards your personal information when you visit, access, or make a purchase from https://bafk.co (the "Website").

We comply with applicable privacy laws including:

- General Data Protection Regulation (GDPR – European Union)
- UK GDPR (United Kingdom)
- California Consumer Privacy Act (CCPA) and CPRA
- Other applicable U.S. federal and state privacy laws

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, place an order, subscribe to marketing, or contact us, we may collect:

Full name
Billing and shipping address
Email address
Phone number
Payment method details (processed by third parties)
Order history
Communication records

1.2 Automatically Collected Information

When you browse our Website, we may automatically collect:

IP address
Device type and identifiers
Browser type and version
Operating system
Referring URLs
Pages visited and interaction data
Session duration
Cookies and similar tracking technologies

2. Legal Basis for Processing (GDPR)

If you are located in the EU/EEA or UK, we process your data based on:

Performance of a contract (order fulfillment)
Legal obligations (tax and accounting laws)
Legitimate interests (fraud prevention, business improvement)
Your explicit consent (marketing communications and non-essential cookies)

3. How We Use Your Information

We use personal information to:

Process and fulfill orders
Provide customer service
Send order confirmations and shipping updates
Prevent fraudulent transactions
Improve website functionality and performance
Conduct analytics and internal research
Send marketing emails or SMS (only with consent)
Comply with legal and regulatory obligations

We do not sell personal information.

4. Payment Processing

Payments are securely processed through third-party providers such as: Stripe, PayTR, PayPal, Apple Pay, Google Pay and other integrated processors.

We do not store full credit card numbers on our servers. All payment transactions are encrypted and handled in accordance with PCI-DSS security standards.

5. Data Sharing and Disclosure

We may share personal data with:

Payment processors
Shipping and logistics providers
Cloud hosting providers
Email marketing services
Analytics providers
Advertising platforms (where consent is given)
Legal authorities if required by law

All third parties are contractually obligated to protect personal data in compliance with applicable laws.

6. International Data Transfers

Your personal information may be transferred to and processed in countries outside your country of residence, including the United States and the European Union.

Where required, we implement safeguards such as:

Standard Contractual Clauses (SCCs)
Encrypted data transfers (SSL/TLS)
Reputable secure hosting providers

7. Data Retention

We retain personal data only for as long as necessary to:

Fulfill orders
Comply with tax, accounting, and legal requirements
Resolve disputes
Enforce agreements

8. Your Privacy Rights

8.1 European Union / UK Residents

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion ("Right to be Forgotten")
Restrict processing
Request data portability
Withdraw consent at any time
Lodge a complaint with your local data protection authority

8.2 California Residents (CCPA/CPRA)

You have the right to:

Know what personal information is collected
Request deletion of personal information
Correct inaccurate personal data
Opt-out of sale or sharing (we do not sell personal data)
Non-discrimination for exercising privacy rights

To exercise any of these rights, contact us at: [email protected]

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Ensure essential website functionality
Store user preferences
Analyze website traffic
Deliver personalized advertising (with consent)

You may manage cookie preferences through your browser settings. EU users are provided with a cookie consent banner where required by law.

10. Data Security

We implement appropriate technical and organizational safeguards including:

SSL encryption
Secure servers
Access controls
Regular security monitoring

However, no transmission over the Internet can be guaranteed 100% secure.

11. Children's Privacy

Our Website is not intended for individuals under the age of 13 (or 16 in certain EU jurisdictions). We do not knowingly collect personal data from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated Effective Date.

13. Contact Information

BAFK PAZARLAMA SAN. VE TİC. LTD. ŞTİ.
Merkez MH. Firuze Sk. No: 3 Bumerang Ofis Kat: 1 Ofis: 37
Kağıthane / Istanbul / Turkey
+90 212 294 11 12
[email protected]