x
All credit cards: 2 INTEREST-FREE INSTALLMENTS!
On orders of 500 TL and over: FREE SHIPPING!

Privacy and Security Policy

General Information
Last Updated: 23 July 2026

This Privacy and Security Policy explains how personal data collected through the www.onzipet.com website and related services operated by Onzipet İç ve Dış Ticaret A.Ş. (“Onzipet”), acting as the data controller, is processed, protected and used.

Personal data is processed in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”), Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection and other applicable legislation.

This policy does not, by itself, constitute an explicit consent form. Where explicit consent is required, the user’s separate and freely given consent is obtained.
Data Controller
Company Name: Onzipet İç ve Dış Ticaret A.Ş.
Address: Karadenizliler Mah. Türkmen Sk. No:11/3 Başiskele/Kocaeli, Türkiye
MERSIS No.: 0772150050900001
Tax No.: 7721500509
Trade Registry No.: 33453
Telephone: 0 (262) 320 00 62
Email: [email protected]
Registered Electronic Mail (KEP): [email protected]
Personal Data That May Be Processed
Depending on the transactions carried out through www.onzipet.com, the following personal data may be processed:
  • First name, last name, and customer or membership information,
  • Address, telephone number and email address,
  • Turkish Republic identity number, tax identification number and billing information where required by law or for issuing invoices,
  • Order, product, payment, delivery, return and transaction history,
  • Customer service requests, complaints and communication records,
  • IP address, device, browser, traffic, session and system records,
  • Cookie preferences and, where consent is given, analytics and advertising data,
  • Information relating to legal proceedings and dispute resolution processes.
Payment Information
Credit or debit card payments are processed through the secure payment service provider PayTR. Card information, such as the card number, expiry date and security code, is processed directly through the secure infrastructure of the payment institution; it is neither viewed by Onzipet nor stored in Onzipet’s systems.

Onzipet may process only limited transaction information that can be associated with the order, such as payment status, transaction reference and payment method.
Purposes of Processing Personal Data
Personal data may be processed for the following purposes:
  • Managing membership and guest checkout transactions,
  • Receiving, preparing, processing payment for and delivering orders,
  • Carrying out invoicing and e-invoicing procedures,
  • Managing returns, cancellations and the right of withdrawal,
  • Evaluating customer requests, suggestions and complaints,
  • Providing after-sales support,
  • Ensuring information and transaction security and preventing misuse and fraud,
  • Carrying out finance, accounting, audit and reporting activities,
  • Fulfilling legal obligations and managing disputes,
  • Sending campaigns, discounts and announcements where explicit consent or valid consent for commercial electronic communications has been obtained in accordance with applicable legislation,
  • Conducting analytics, advertising and personalised marketing activities where explicit consent has been given.
Legal Bases for Processing Personal Data
Personal data is processed on the legal bases that processing is necessary for the establishment or performance of a contract, for Onzipet to fulfil its legal obligations, for the establishment, exercise or protection of a right, for Onzipet’s legitimate interests provided that the fundamental rights and freedoms of the data subject are not harmed, and, where necessary, on the explicit consent of the data subject.

Separate explicit consent is not requested for order, delivery, payment and invoicing processes that do not require explicit consent.
Methods of Collecting Personal Data
Personal data may be collected through membership and order forms, guest checkout transactions, contact and return forms, email, telephone, cookies, payment and delivery systems, and customer service channels, either by automated means or by non-automated means provided that such processing forms part of a data filing system.
Transfer of Personal Data
Personal data is never sold. Personal data may be shared with the following parties only where necessary to provide the services and solely to the extent required for the relevant purpose:
  • T-Soft, within the scope of e-commerce infrastructure and hosting services,
  • PayTR, banks and payment institutions for processing payments,
  • MNG Kargo and UPS for delivery processes,
  • QNB eSolutions and relevant accounting/ERP service providers for e-invoicing and financial processes,
  • Suppliers providing information technology, security, maintenance, support and consultancy services,
  • Legally authorised public institutions, courts, enforcement offices and other competent authorities.
Transfers are carried out in accordance with the conditions set out in Article 8 and, where applicable, Article 9 of the KVKK.
International Transfer of Personal Data
Onzipet does not deliver products outside Türkiye. However, if internationally based analytics and advertising services such as Google Analytics 4, Google Ads and Meta Pixel are enabled, certain online identifiers, device information and usage data may be transferred to service providers located abroad.

Such transfers are carried out in accordance with the conditions and appropriate safeguards for international data transfers specified in Article 9 of the KVKK. Where the transfer must be based on explicit consent, the user’s separate explicit consent is obtained before the data is transferred. Users may reject non-essential analytics and advertising cookies or withdraw previously given consent.
Use of Cookies
www.onzipet.com may use cookies to operate the website, manage sessions and shopping carts, ensure security, remember preferences, analyse website usage and, where permission is given, carry out advertising activities.

Cookies that are strictly necessary for the website to function and to provide services explicitly requested by the user may be used without explicit consent. Non-essential cookies used for analytics, performance, personalisation and advertising are activated only with the user’s active consent where required.

Rejecting non-essential cookies does not prevent users from accessing essential website services such as membership, product browsing or shopping. Users may change their cookie preferences at any time through the cookie management panel. Further details are provided in the separately published Cookie Policy.
Commercial Electronic Communications
Campaigns, discounts, product promotions and announcements are sent by email, SMS or telephone on the basis of consent for commercial electronic communications obtained in accordance with applicable legislation.

Consent to receive commercial communications is not a mandatory condition of membership or purchase. Users may withdraw their communication consent at any time by using the opt-out methods provided to them or by contacting [email protected].
Retention and Destruction of Personal Data
Personal data is retained for as long as necessary for the purpose for which it is processed and in accordance with the statutory retention periods prescribed by applicable legislation. When the retention period expires or the reasons requiring the processing of personal data cease to exist, the data is deleted, destroyed or anonymised in accordance with the KVKK and applicable legislation.

Where there is an ongoing dispute, legal claim, investigation or request from a competent authority, the relevant data may be retained on a limited basis for the necessary period.
Data Security
Onzipet takes technical and administrative measures appropriate to the nature of its activities and the data processed in order to prevent the unlawful processing of and unauthorised access to personal data and to ensure that personal data is stored securely.

These measures include SSL-encrypted communications, access and authorisation controls, transaction and system logs, secure payment infrastructure, backups, updates and information security measures. Service providers’ access is limited to the data necessary for the services they provide.
Rights of the Data Subject Under the KVKK
Under Article 11 of the KVKK, data subjects have the right to apply to Onzipet to:
  • Learn whether their personal data is being processed,
  • Request information if their personal data has been processed,
  • Learn the purpose of processing their personal data and whether it is being used in accordance with that purpose,
  • Know the third parties to whom their personal data has been transferred in Türkiye or abroad,
  • Request the correction of incomplete or inaccurate personal data,
  • Request the deletion or destruction of personal data under the conditions set out in Article 7 of the KVKK,
  • Request that correction, deletion or destruction operations be notified to third parties to whom the personal data has been transferred,
  • Object to any outcome against the person resulting from the analysis of processed data exclusively through automated systems,
  • Claim compensation for damage arising from the unlawful processing of personal data.
Methods for Submitting Applications Under the KVKK
Requests under the KVKK may be submitted to Onzipet by one of the following methods:
  • Delivering a written and signed application in person or through a notary public to Karadenizliler Mah. Türkmen Sk. No:11/3 Başiskele/Kocaeli, Türkiye,
  • Sending the application to the registered electronic mail (KEP) address [email protected] using a secure electronic signature or mobile signature,
  • Sending the application to [email protected] using an email address previously provided to Onzipet by the data subject and registered in Onzipet’s systems.
The application must include the applicant’s first and last name, signature, contact details, the subject of the application and explanations concerning the request. Additional information or documents may be requested to verify identity.

Applications are concluded as soon as possible, depending on the nature of the request, and no later than 30 days. Applications are free of charge unless the process requires an additional cost; if an additional cost arises, the fee specified in the tariff determined by the Turkish Personal Data Protection Board may be charged.
Relationship with Other Documents
Detailed information on the processing of personal data is provided in the KVKK Privacy Notice; the types, durations and purposes of cookies are explained in the Cookie Policy; and processing activities based on explicit consent are explained in the Explicit Consent Form. These documents should be considered together.
Changes to This Policy
Onzipet may update this policy in line with changes in legislation, technologies used or personal data processing activities. The current policy becomes effective on the date it is published on www.onzipet.com.
Contact
Onzipet İç ve Dış Ticaret A.Ş.
Address: Karadenizliler Mah. Türkmen Sk. No:11/3 Başiskele/Kocaeli, Türkiye
Telephone: 0 (262) 320 00 62
Email: [email protected]
Registered Electronic Mail (KEP): [email protected]

 

T-Soft 360 Logo Powered by T-SOFT E-Commerce