Privacy and Security Policy
| General Information |
| Last Updated: 23 July 2026 This Privacy and Security Policy explains how personal data collected through the www.onzipet.com website and related services operated by Onzipet İç ve Dış Ticaret A.Ş. (“Onzipet”), acting as the data controller, is processed, protected and used. Personal data is processed in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”), Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection and other applicable legislation. This policy does not, by itself, constitute an explicit consent form. Where explicit consent is required, the user’s separate and freely given consent is obtained. |
| Data Controller |
| Company Name: Onzipet İç ve Dış Ticaret A.Ş. Address: Karadenizliler Mah. Türkmen Sk. No:11/3 Başiskele/Kocaeli, Türkiye MERSIS No.: 0772150050900001 Tax No.: 7721500509 Trade Registry No.: 33453 Telephone: 0 (262) 320 00 62 Email: [email protected] Registered Electronic Mail (KEP): [email protected] |
| Personal Data That May Be Processed |
Depending on the transactions carried out through www.onzipet.com, the following personal data may be processed:
|
| Payment Information |
| Credit or debit card payments are processed through the secure payment service provider PayTR. Card information, such as the card number, expiry date and security code, is processed directly through the secure infrastructure of the payment institution; it is neither viewed by Onzipet nor stored in Onzipet’s systems. Onzipet may process only limited transaction information that can be associated with the order, such as payment status, transaction reference and payment method. |
| Purposes of Processing Personal Data |
Personal data may be processed for the following purposes:
|
| Legal Bases for Processing Personal Data |
| Personal data is processed on the legal bases that processing is necessary for the establishment or performance of a contract, for Onzipet to fulfil its legal obligations, for the establishment, exercise or protection of a right, for Onzipet’s legitimate interests provided that the fundamental rights and freedoms of the data subject are not harmed, and, where necessary, on the explicit consent of the data subject. Separate explicit consent is not requested for order, delivery, payment and invoicing processes that do not require explicit consent. |
| Methods of Collecting Personal Data |
| Personal data may be collected through membership and order forms, guest checkout transactions, contact and return forms, email, telephone, cookies, payment and delivery systems, and customer service channels, either by automated means or by non-automated means provided that such processing forms part of a data filing system. |
| Transfer of Personal Data |
Personal data is never sold. Personal data may be shared with the following parties only where necessary to provide the services and solely to the extent required for the relevant purpose:
|
| International Transfer of Personal Data |
| Onzipet does not deliver products outside Türkiye. However, if internationally based analytics and advertising services such as Google Analytics 4, Google Ads and Meta Pixel are enabled, certain online identifiers, device information and usage data may be transferred to service providers located abroad. Such transfers are carried out in accordance with the conditions and appropriate safeguards for international data transfers specified in Article 9 of the KVKK. Where the transfer must be based on explicit consent, the user’s separate explicit consent is obtained before the data is transferred. Users may reject non-essential analytics and advertising cookies or withdraw previously given consent. |
| Use of Cookies |
| www.onzipet.com may use cookies to operate the website, manage sessions and shopping carts, ensure security, remember preferences, analyse website usage and, where permission is given, carry out advertising activities. Cookies that are strictly necessary for the website to function and to provide services explicitly requested by the user may be used without explicit consent. Non-essential cookies used for analytics, performance, personalisation and advertising are activated only with the user’s active consent where required. Rejecting non-essential cookies does not prevent users from accessing essential website services such as membership, product browsing or shopping. Users may change their cookie preferences at any time through the cookie management panel. Further details are provided in the separately published Cookie Policy. |
| Commercial Electronic Communications |
| Campaigns, discounts, product promotions and announcements are sent by email, SMS or telephone on the basis of consent for commercial electronic communications obtained in accordance with applicable legislation. Consent to receive commercial communications is not a mandatory condition of membership or purchase. Users may withdraw their communication consent at any time by using the opt-out methods provided to them or by contacting [email protected]. |
| Retention and Destruction of Personal Data |
| Personal data is retained for as long as necessary for the purpose for which it is processed and in accordance with the statutory retention periods prescribed by applicable legislation. When the retention period expires or the reasons requiring the processing of personal data cease to exist, the data is deleted, destroyed or anonymised in accordance with the KVKK and applicable legislation. Where there is an ongoing dispute, legal claim, investigation or request from a competent authority, the relevant data may be retained on a limited basis for the necessary period. |
| Data Security |
| Onzipet takes technical and administrative measures appropriate to the nature of its activities and the data processed in order to prevent the unlawful processing of and unauthorised access to personal data and to ensure that personal data is stored securely. These measures include SSL-encrypted communications, access and authorisation controls, transaction and system logs, secure payment infrastructure, backups, updates and information security measures. Service providers’ access is limited to the data necessary for the services they provide. |
| Rights of the Data Subject Under the KVKK |
Under Article 11 of the KVKK, data subjects have the right to apply to Onzipet to:
|
| Methods for Submitting Applications Under the KVKK |
Requests under the KVKK may be submitted to Onzipet by one of the following methods:
Applications are concluded as soon as possible, depending on the nature of the request, and no later than 30 days. Applications are free of charge unless the process requires an additional cost; if an additional cost arises, the fee specified in the tariff determined by the Turkish Personal Data Protection Board may be charged. |
| Relationship with Other Documents |
| Detailed information on the processing of personal data is provided in the KVKK Privacy Notice; the types, durations and purposes of cookies are explained in the Cookie Policy; and processing activities based on explicit consent are explained in the Explicit Consent Form. These documents should be considered together. |
| Changes to This Policy |
| Onzipet may update this policy in line with changes in legislation, technologies used or personal data processing activities. The current policy becomes effective on the date it is published on www.onzipet.com. |
| Contact |
| Onzipet İç ve Dış Ticaret A.Ş. Address: Karadenizliler Mah. Türkmen Sk. No:11/3 Başiskele/Kocaeli, Türkiye Telephone: 0 (262) 320 00 62 Email: [email protected] Registered Electronic Mail (KEP): [email protected] |