KVKK Disclosure Text

Last updated: October 13, 2026

Data Controller

According to the Personal Data Protection Law No. 6698 ("KVKK"), the data controller is Sezer Kulpu (Flexilab Creative; Zümrütova Mah. Sinanoğlu Cad. Yalçın Apt. No: 23/C, Muratpaşa / Antalya).

What data do we process?

• Identity and contact: first name, last name, email, phone.
• Delivery: address and city.
• Wholesale quote and dealer application: the name, company, email, phone, city, and message you shared in the form.
• Membership: email, first and last name, optional phone, registered delivery addresses (recipient name, phone, province, district, detailed address), membership and last login date. We do not store passwords; login is performed via a one-time code sent to your email. The code and session information are stored only as an irreversible summary (hash).
• Billing information (optional): If you select corporate invoice, we’ll collect the company name, tax office, and tax number.
• Commercial electronic communication consent (optional): whether you gave permission and the date of permission.
• Return request: order number, returned items, reason for return and your comments.
• Franchise: company name, tax office and number, authorized person's first and last name, phone, province, district, professional group; if your application is approved, the tax certificate you sent via email.
• Security: irreversible summary of the IP address in login code requests; kept for a maximum of 24 hours solely to prevent abuse.
• Sales rep chat and custom print: messages you typed in the chat box; the STL file you uploaded for a custom print, its name and dimensions, chosen material, quantity, color and painting; your name and email entered in the form if you want to contact Sezer. Details: Sales rep and custom print.
• Order: Purchased items, amount, order number and payment result. Card details are not processed by us; they are handled directly by iyzico.
• Site usage: Only if you give consent, usage data collected via analytical cookies (see Cookie Policy).
• Customization (optional): Only with your explicit consent: viewed products, time spent on pages, items added to cart and site‑search terms. This data is processed solely on your device (browser’s local storage), not sent to our servers or third parties, retained for up to 30 days and deleted immediately if you withdraw consent.

Sales rep and custom print files

The “Astra” chat on the site works to answer questions, calculate prices, prepare custom print quotes, and forward your request to us if you wish. The responses are generated by an AI model; the model runs on Cloudflare Workers AI (abroad) and your messages are sent to it only to generate a response. The price is determined by the site's calculation rule, not the model. Chat history is kept only in this browser tab and is deleted when the tab is closed; no message text is stored on our server.

For custom prints, the STL file you upload is stored and measured in Cloudflare’s private storage (R2, overseas) to calculate the price and produce your order. The file of an unpaid quote is kept for 90 days; a file that becomes an order is kept for 2 years and then deleted. The file of a paid order is also downloaded to our workshop computer for production. To prevent abuse, an irreversible hash of the IP address and request count are retained for up to 48 hours. Requests you send via the submission form are stored for 1 year, like bulk‑quote data. Do not include card numbers, Turkish ID numbers, or health information in the chat. Legal basis: KVKK m. 5/2 (c) contract formation and performance (quote, order, production) and (f) legitimate interest (answering questions); overseas transfer is justified by the Cloudflare clause.

Why we process data?

To receive and deliver your order, process your payment, issue invoices, fulfill our legal obligations, and respond to your questions and wholesale quote or dealer applications. Also, to create and manage your membership account, display your orders and shipping status, pre-fill the payment form with your registered address and invoice information, receive and process return requests, apply dealer conditions to approved dealers, and send campaigns and updates via email if you have given permission.

Legal reason

KVKK Art. 5/2 (c) conclusion and performance of the contract, (d) fulfillment of legal obligations, and (f) legitimate interests (security of the site and payments, prevention of fraud, and correspondence regarding the service we provide to you); explicit consent under KVKK Art. 5/1 for analytics cookies and personalization. Consent is given via separate checkboxes in the cookie banner; checkboxes are not pre-checked and are not a condition for shopping. You can always withdraw your consent via the “Cookie preferences” link; withdrawal does not affect the lawfulness of processing up to that point. Your consent is required for commercial electronic messages under Law No. 6563 and the relevant Regulation; the consent box is not pre-checked and is not a condition for membership. You can always withdraw your consent from My Account > My Info or via the link in every email.

Who do we share with?

• Payment powered by iyzico (payment provider).
• Delivery via HepsiJet.
• Cloudflare (abroad) for site hosting and order records. This transfer is based on the standard contract announced by the Personal Data Protection Board in accordance with Article 9 of the KVKK.
• Resend (email delivery service, overseas) for sending login codes, order confirmations and dealer notification emails. Only your email address and the email content are transferred; the transfer is performed under a standard contract in accordance with KVKK Art. 9.
• If you consent, analytics will be sent to Google (outside Turkey).
• Authorized public institutions in case of legal obligation.

How long we store it?

We keep order and invoice records for 10 years and correspondence for 2 years as required by the Tax Procedure Law and the Turkish Commercial Code; wholesale quotes and dealer applications are kept for 1 year; cookie data is retained for the periods specified in the Cookie Policy. We keep membership details and registered addresses for as long as the membership is active; they are deleted immediately via My Account > My Info > Delete My Account (orders and invoices remain for the legal period). Return requests are kept with the order record. Dealer information is kept for as long as the dealership is active and for the legal period thereafter; information in rejected dealer applications is deleted upon request. When the period expires, data is deleted or anonymized.

Your rights

You have the right to learn whether your data is being processed, request information, request correction or deletion, know the third parties to whom it has been transferred, object, and request the remedy of damages under Art. 11 of KVKK. You can submit your applications to [email protected] along with information that allows us to verify your identity. We will respond to your application free of charge within a maximum of 30 days. If your application is rejected, if you find the response insufficient, or if no response is given within the deadline, you may file a complaint with the Personal Data Protection Board within 30 days from the date you learn of the response, and in any case within 60 days from the date of your application.

Changes in this version (Oct 13, 2026)

• The font is now loaded from the site itself; visitor information no longer goes to Google Fonts.
• The legitimate interest and the operations it is used for have been documented.
• Application response time (30 days) and right to complain to the Board have been added.
• Optional personalization (device‑only, 30 days, with explicit consent) added.
• Data, purpose, and retention period (1 year) added to wholesale quote and dealer application forms.
• Membership (profile, saved address, billing info, return request, account deletion), franchise information, optional commercial e‑mail consent, and email sending service (Resend) are included.