Privacy Policy
1. Who we are
BYQEE TEKNOLOJİ ANONİM ŞİRKETİ ("Byqee", "we", "us") is a joint stock company incorporated under the laws of the Republic of Türkiye, registered with the Istanbul Trade Registry under number 261079-5, with its registered office at Müeyyetzade Mahallesi, Tatar Beyi Sokak, İş Hanı Apt. No: 17/2, Beyoğlu, İstanbul, Türkiye.
Byqee is the controller of the personal data described in this policy.
Contact Email: [email protected] Telephone: +90 850 307 23 04
This policy explains what personal data we collect, why we collect it, how long we keep it, who we share it with and what rights you have. It applies to https://www.byqee.tech/ and to any related pages, applications and channels we make available.
2. The personal data we process
Identity data. Your first name, last name, date of birth, and any further details you choose to provide.
Contact data. Your mobile telephone number, email address, delivery address and billing address.
Payment data. Information relating to your payments and payment methods. We do not store full card numbers; card details are processed directly by our payment provider.
Order and transaction data. Your purchase and order history, order details, number of orders, invoice information, requests and complaints, reviews, ratings and feedback.
Technical and usage data. Information collected automatically through cookies and similar technologies, as described in our Cookie Policy.
We do not deliberately collect special categories of personal data, and we ask that you do not send us such data.
3. How we collect your data
Directly from you, when you create an account, place an order, complete a form on our website, contact us by email at [email protected] or any other Byqee address, send us documents, or call us on the number above.
Automatically, through cookies and similar technologies when you use our website. Full details, including how to control these, are in our Cookie Policy.
From third parties, such as payment providers confirming a transaction and carriers providing delivery updates.
4. Why we process your data, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Processing your order, taking payment, arranging delivery and providing after-sales support | Performance of a contract with you (Art. 6(1)(b) GDPR) |
| Responding to your enquiries and complaints | Performance of a contract, or our legitimate interest in responding to those who contact us (Art. 6(1)(b) and (f)) |
| Meeting accounting, tax and other legal obligations | Compliance with a legal obligation (Art. 6(1)(c)) |
| Sending promotions, campaigns and newsletters | Your consent (Art. 6(1)(a)), which you may withdraw at any time |
| Personalised advertising and profiling for marketing | Your consent (Art. 6(1)(a)) |
| Analysing use of our website, improving our products, services and communications | Your consent for non-essential cookies (Art. 6(1)(a)); otherwise our legitimate interest in improving our business (Art. 6(1)(f)) |
| Conducting customer surveys and satisfaction research | Our legitimate interest in understanding and improving customer experience (Art. 6(1)(f)) |
| Securing our systems, preventing fraud and protecting our legal, technical and commercial interests | Our legitimate interest in operating securely (Art. 6(1)(f)) |
| Establishing, exercising or defending legal claims | Our legitimate interest in protecting our legal position (Art. 6(1)(f)) |
| Providing information to public authorities where required by law | Compliance with a legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your interests or fundamental rights. You may object to this processing at any time; see section 8.
Providing your identity, contact, delivery and payment data is necessary for us to conclude and perform a contract with you. Without it, we cannot process your order.
5. Marketing
We send marketing communications only where you have given consent. Accepting our terms of sale is not consent to marketing.
You can withdraw your consent at any time, as easily as you gave it, by using the unsubscribe link in any message or by emailing [email protected]. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.
We do not sell your personal data.
6. Who we share your data with
We share personal data only where necessary, with the following categories of recipient:
- Service providers acting on our behalf, including our e-commerce platform, hosting and IT providers, payment providers, carriers and logistics partners, customer support tools and marketing platforms. These providers act as processors under written contracts and may use your data only on our instructions.
- Professional advisers, such as accountants and lawyers, where relevant to the services they provide to us.
- Public authorities, courts and law enforcement, where we are required to do so by law or where necessary to establish, exercise or defend legal claims.
We do not transfer your personal data to any recipient for purposes unrelated to those set out in this policy.
7. International transfers
Byqee is established in Türkiye. Your personal data is therefore transferred to and processed in Türkiye, and may be processed by our service providers in other countries.
Türkiye is not currently the subject of an adequacy decision by the European Commission. Transfers of personal data from the European Economic Area to Byqee take place on the basis of Standard Contractual Clauses adopted by the European Commission, supplemented by additional measures where our assessment identifies these as necessary.
You may request a copy of the safeguards in place by emailing [email protected].
8. Your rights
You have the right to:
- Access your personal data and receive a copy of it;
- Rectification of inaccurate data and completion of incomplete data;
- Erasure of your data where the grounds set out in the GDPR apply;
- Restriction of processing in the circumstances set out in the GDPR;
- Data portability, meaning you may receive data you provided to us in a structured, commonly used, machine-readable format and have it transmitted to another controller;
- Object to processing based on our legitimate interests, including profiling;
- Object at any time to processing for direct marketing purposes, including profiling for that purpose. Where you object, we will stop;
- Withdraw consent at any time where processing is based on consent;
- Not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you;
- Be informed of any rectification, erasure or restriction we carry out, communicated to the recipients to whom your data has been disclosed;
- Lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.
To exercise any of these rights, email [email protected] or write to us at the address in section 1.
Exercising your rights is free of charge. We respond within one month of receiving your request. That period may be extended by up to two further months where the request is complex or where we receive a number of requests; we will tell you within one month if this applies, and why.
We may charge a reasonable fee, or refuse to act, only where a request is manifestly unfounded or excessive, in particular because of its repetitive character.
We may need to ask you for information to confirm your identity before acting on a request.
9. How long we keep your data
| Data | Retention period |
|---|---|
| Order, invoice and transaction data | 10 years from the end of the financial year in which the transaction took place, to meet accounting and commercial record-keeping obligations |
| Account data | For as long as your account is active, and for 3 years after your last activity |
| Enquiries and complaints | 3 years from resolution, or longer where needed to establish, exercise or defend legal claims |
| Marketing consent and preferences | Until you withdraw consent; a record of the withdrawal is kept to demonstrate compliance |
| Warranty and after-sales records | For the duration of the warranty and statutory conformity period, plus 3 years |
| Cookie data | As stated in our Cookie Policy |
Where data is no longer needed for the purpose for which it was collected, it is deleted or anonymised.
10. Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
Where you have consented to advertising cookies, your data may be used for profiling for marketing purposes. You can withdraw this consent at any time through the "Cookie settings" link in our footer, and you can object to direct marketing profiling at any time.
11. Security
We apply technical and organisational measures appropriate to the risk, including encrypted transmission, access controls and contractual safeguards with our processors. No system is completely secure, and you are responsible for keeping your account credentials confidential.
12. Keeping your data accurate
It is important that the personal data we hold about you is accurate and current. Please let us know if any of your details change.
13. Changes to this policy
We may update this policy from time to time. The current version is always published on our website, with the date of the last update at the top. Where a change materially affects how we process your data, we will notify you and, where required, ask for your consent again.