Privacy Policy
This is a courtesy translation. The Turkish version is legally binding.
Last updated: 11.09.2026
This policy explains how we, Nurçin Ehlimanoğlu ("Deri Leather"), protect your information when you visit our website at derileather.com or shop with us. Detailed information on the processing of your personal data (purposes of processing, legal grounds, transfers, and your rights) is provided in the KVKK Privacy Notice. This policy should be read together with that notice.
1. Scope
This policy applies to our website, the ordering and payment process, our customer service channels (e-mail, phone, WhatsApp), and the electronic messages we send.
2. Information We Collect
- Information you provide: first name, last name, e-mail, phone number, delivery and billing address, corporate invoice details, and your correspondence with us.
- Information generated when you shop: order contents, amount, payment method, and return and exchange records.
- Information collected automatically: IP address, device and browser information, pages visited, and cookie data.
Sharing information that is not required is optional. Fields required to place an order are marked on the forms.
3. How We Use Your Information
- To receive, prepare, deliver, and invoice your order
- To handle your return, exchange, and withdrawal requests
- To answer your questions and support you
- To keep our website secure and prevent misuse
- To fulfill our legal obligations
- With your consent, to send you announcements about promotions and new collections, and to measure and personalize our advertising
We do not sell or rent your information, or use it for any purpose other than those listed above.
4. Payment Security
Payments are processed through iyzico, a payment institution licensed by the Central Bank of the Republic of Türkiye. Your card details are processed directly on iyzico's PCI DSS-compliant systems; your card number, expiration date, and security code (CVV) never reach our servers and are not stored by us. 3D Secure verification is applied to card payments.
5. Data Security
In accordance with Article 12 of Law No. 6698 on the Protection of Personal Data (KVKK), we take appropriate technical and administrative measures to protect your personal data:
- A TLS/SSL-encrypted connection across the entire site
- Access to data limited to employees who need it for their duties, within the scope of their authorization
- Logging of access and regular security checks
- Contracts with our service providers that include confidentiality and data security obligations
If your personal data is obtained by others through unlawful means, we will notify the Personal Data Protection Board as soon as possible and within 72 hours at the latest, and notify you without delay.
Deri Leather will never ask you for your password or card details by e-mail, SMS, or phone.
6. Sharing of Information
Your information is shared only to the extent necessary to provide our service: with the shipping company (Yurtiçi Kargo), the payment institution (iyzico), our e-invoice integrator, and hosting and infrastructure providers, and, with your consent, with advertising and analytics partners (Google, Meta). Lawful requests from authorized public authorities are complied with. Details on recipient groups and transfers abroad are provided in the KVKK Privacy Notice.
7. Cookies
In addition to strictly necessary cookies, our website uses functional, analytics, and marketing cookies that run only with your consent. You can change your preferences at any time via the "Cookie Preferences" link at the bottom of the site. For details, please see the Cookie Policy.
8. Commercial Electronic Messages
Commercial electronic messages such as e-mails, SMS, or calls containing promotions, discounts, and new collection announcements are sent only with your prior consent, in accordance with Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages. Your consent is recorded in the Message Management System (İYS).
- Not giving consent does not prevent you from shopping with us.
- You can withdraw your consent at any time, without giving a reason and free of charge: via the opt-out link in each message, your account settings, the admin@derileather.com address, or İYS (iys.org.tr or e-Devlet (e-Government portal)).
- Messages will stop no later than 3 business days after we receive your opt-out request.
Informational messages about your transaction, such as order confirmations, shipping notifications, and return updates, are not commercial messages and are sent regardless of your consent.
9. Updating and Deleting Your Information
You can request an update to your information at any time by writing to admin@derileather.com. You can request deletion of your data by writing to admin@derileather.com from the e-mail address you used for your order. Your data is deleted or anonymized, except for records we are legally required to retain (e.g., invoices).
10. Children's Privacy
Our website is intended for people aged 18 and over. We do not knowingly collect personal data that we know belongs to anyone under 18. If you become aware of such a case, please let us know at admin@derileather.com.
11. Third-Party Links
Our website may contain links to third-party sites, such as our social media accounts. We are not responsible for the privacy practices of these sites; we recommend reviewing the privacy policy of each site you visit.
12. Your Rights and Contact
You can find your rights under Article 11 of KVKK and how to submit a request in the KVKK Privacy Notice. For privacy-related questions:
- E-mail: admin@derileather.com
- Address: Nurçin Ehlimanoğlu, Barbaros Hayrettin Paşa Mah. 1003. Sk. No: 4 İç Kapı No: 3, Gaziosmanpaşa / İstanbul
13. Changes
We may update this policy in line with changes in legislation or in our services. We will announce significant changes on our website. The current version is always available on this page.