Privacy Policy

As Oğuzhan Şahin, we process the personal data you share while using the KodStore store (https://kodstore.com) as data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"). This notice is provided under Article 10 of the KVKK. This English text is provided for convenience; in case of any inconsistency the Turkish version prevails.

1. Data controller

The data controller is Oğuzhan Şahin, operator of KodStore. You can reach us at info@kodstore.com about anything concerning your personal data.

2. Personal data we process

• Identity and contact: name, email address, phone, billing address and city; optionally company name and tax number.
• Customer transactions: orders, payment records (the Paddle transaction and invoice numbers and amounts), download records, refund requests, product reviews and support messages.
• Account: a one-way hash of your password (the password itself is never stored) and an optional profile photo.
• Security: IP address, browser information, session and sign-in records.
• Marketing: your newsletter subscription and its consent record, only if you opt in.

Your card details never reach our site and are not stored by us: Paddle collects them directly in its checkout window.

3. Purposes and legal grounds

• Taking orders, taking and verifying payments, delivering products, handling refunds and support: performance of a contract (KVKK Art. 5(2)(c)).
• Invoicing, accounting and record-keeping duties and requests from authorities: legal obligation (Art. 5(2)(ç)).
• Account and transaction security, preventing fraud and refund abuse, and evidence in disputes: establishing, exercising or defending a right and legitimate interest (Art. 5(2)(e) and (f)).
• Newsletter and campaign emails and analytics cookies: your explicit consent (Art. 5(1)), which you can withdraw at any time.

4. How we collect data

Data is collected electronically through the sign-up, checkout, contact and newsletter forms, through cookies and server logs while you use the site, and through the payment notifications Paddle sends us.

5. Transfers

Your personal data may be shared only for the purposes above and to the extent necessary with our hosting and email providers, our accountants and legal advisers and, on request, competent public authorities (KVKK Art. 8).

Paddle: Your order number, the products you order, the amount and your email address are transferred to Paddle, our online reseller and the Merchant of Record for all our orders (for Türkiye and most other countries Paddle.com Market Limited, United Kingdom), to take the payment, conduct the sale, invoice, handle refunds and prevent fraud. Paddle collects the card, billing and contact details you enter in its checkout window directly and processes them as a data controller under its own Privacy Policy. From Paddle we only receive the payment result, the transaction and invoice numbers and the amounts.

Google Analytics runs only with your explicit consent. Transfers to Paddle and Google are transfers abroad and are made in line with the conditions of KVKK Art. 9.

6. Retention

Data is kept for as long as the purpose requires. Order and invoice records are kept for the periods required by law (up to 10 years under the Turkish Commercial Code and Tax Procedure Law). Data whose period has expired or whose legal ground no longer exists is deleted, destroyed or anonymised.

7. Security

We apply technical and organisational measures such as encrypted connections (HTTPS), one-way hashing of passwords, restricted access and activity logs to protect your personal data against unauthorised access, loss and misuse.

8. Your rights

Under KVKK Art. 11 you have the right to learn whether your personal data is processed and to request information about it; to learn the purpose of processing and whether it is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data; to request deletion or destruction under Art. 7 and notification of these actions to the recipients; to object to a result against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.

9. How to apply

Send your request from the email address registered to your account to info@kodstore.com. If you prefer to apply in writing by post, you can ask for our postal address at the same email address. Requests are concluded free of charge within 30 days at the latest, depending on their nature (KVKK Art. 13). You can unsubscribe from the newsletter with the link in every email.

10. Cookies

The cookies used on the site and how to manage your choices are explained in the Cookie Policy.