KVKK Privacy Notice

Data controller and information processed

Baz Gold, whose legal name and address appear above, provides this notice under the Turkish Personal Data Protection Law No. 6698 (KVKK). It covers accounts, guest purchases, orders, delivery, invoicing, support and account security.

Depending on your transaction, we process your name, email, phone, delivery and billing addresses, invoicing details you provide, product and order records, payment result and transaction amount, correspondence, and session and security records. PayTR processes card details on its own payment screen; card details are not stored in your Bazgold account or order record.

Purposes and legal grounds

Creating and managing your account, taking your order, verifying payment, delivery and order support rely on necessity for entering into or performing a contract (Article 5/2-c). Invoicing and retaining mandatory transaction records fulfil our legal obligations (Article 5/2-ç).

Requests, objections and dispute records are processed where necessary to establish, exercise or protect a right (Article 5/2-e). Account and transaction security checks rely on legitimate interests while respecting your fundamental rights and freedoms (Article 5/2-f).

Providing this notice or receiving your acknowledgement that you have read it does not constitute explicit consent or marketing permission. If a separate activity relying on explicit consent is offered, its purpose will be explained and consent requested separately from this notice.

How information is collected

Information is collected electronically, wholly or partly by automated means, through account, address and order forms, payment-result notifications, session cookies and messages you send us.

If you choose Google sign-in, we receive your Google-verified name and email for account operations. Our contact form prepares a WhatsApp message using the information you enter; you choose whether to send it through WhatsApp. The form does not also create a message record on our website. Correspondence sent directly by email or WhatsApp is received through the relevant channel.

Who receives information

Information needed to fulfil your order is shared, to the extent required, with PayTR for payment verification, the carrier for delivery, the email provider for account and order notifications, and the hosting provider for website operation and security. Information may be disclosed to competent public authorities and courts to fulfil legal obligations.

Using Google sign-in or WhatsApp contact involves exchanging data with the platform you choose. Processing carried out by those platforms for their own services is explained in their own privacy notices.

Retention and requests about your rights

Data is retained for the period needed to carry out the relevant activity and meet applicable legal retention obligations. Once those periods end, it is erased, destroyed or anonymised in accordance with the applicable rules.

Under Article 11 of the Law, you may request information and correction; request erasure or destruction where the conditions are met and notification to recipients; object to adverse results of automated analysis; and seek compensation for unlawful processing. Send your request, identifying yourself and explaining what you seek, to the controller address above or the contact channels below. Identity verification may be needed to protect your information. Requests are answered within 30 days under the conditions set by the Law.