Our principle
At ottopien we ask only for the information needed to get your order to you and to look after you well. We do not sell or rent your personal data, and we do not use it for marketing without your permission.
This policy complements our KVKK Privacy Notice. For the legal detail (data categories, legal grounds, your rights), please see the KVKK Privacy Notice.
What we collect
- When you order: name, email, telephone, delivery and billing address, and for company invoices, company and tax details.
- If you create an account: your account details and order history. Your password is stored irreversibly hashed; no one, including us, can see it.
- When you use the site: technical records needed for security (IP address, browser information) and only the analytics and marketing cookies you have agreed to.
- When you write to us: the content of your message and your contact details.
Payment security
Payments are taken through a licensed payment institution's infrastructure, with 3D Secure verification. Your card number, expiry date and CVV go directly to the payment institution; they never reach ottopien's servers and are not stored by us.
Payment institutions are subject to the international PCI DSS standards for card data security.
How we protect your information
- All connections to our site are encrypted with SSL/TLS.
- Access to data is limited to people who need it for their work.
- We sign contracts with our service providers that include confidentiality and data security obligations.
- We update our systems regularly and monitor unusual access.
In the event of a data breach, we notify the Personal Data Protection Board and the people affected as soon as possible, under Article 12 of the KVKK.
Who we share it with
Only as far as needed to provide the service: the carrier (delivery), the payment institution (payment), the e-invoice integrator (invoicing), hosting and email providers (running the site) and bodies authorised by law. If you consent, analytics and marketing providers and the Message Management System (İYS).
Children's privacy
Our product can be used by children aged 6 and over under adult supervision; however, purchases and accounts on our site are only for people aged 18 and over. We do not knowingly collect personal data from children.
Commercial messages
We send campaign and news emails and text messages only if you give explicit consent. You can withdraw it at any moment through the opt-out link in every message, from your account, through İYS or by writing to us. Transactional messages, such as order and shipping updates, are not commercial messages and do not require consent.
Changes and contact
We may update this policy from time to time; the current text is always on this page, with the date of the update. We inform our members of significant changes by email.
For any question about privacy: [email protected]
Last updated: 15 October 2026. Questions? See contact.