Last updated: June 2026

As ALLBYB ("Company", "we"), in our capacity as data controller within the scope of the Personal Data Protection Law No. 6698 ("PDPL"), we would like to inform you about the processing of your personal data.

1. Identity of the Data Controller

ALLBYB — Allbyb Design
Address: 18 Mart Sok. Akınay Sit. C/3, Çiftehavuzlar, Kadıköy, Istanbul, 34728
Email: info@allbyb.com
Web: www.allbyb.com.tr

2. Your Processed Personal Data

Within the scope of our relationship with you, the following personal data may be processed:

• Identity Information: Name, surname
• Contact Information: Email address, phone number, delivery and billing address
• Customer Transaction Information: Order history, purchase amounts, return and exchange requests
• Financial Information: Payment method information (card number is not retained by us; processed by our payment providers iyzico/Shopify Payments)
• Marketing Information: Membership information, newsletter preferences, survey responses
• Digital Trace Information: IP address, cookie data, browser information, visit duration, browsing history

3. Purposes of Personal Data Processing

Your personal data is processed for the following purposes:

• Executing order taking, preparation, delivery, and return processes
• Processing payment transactions
• Customer service and communication activities
• Membership registration and account management
• Marketing, advertising, and campaign notifications (with your consent)
• Fulfilling legal obligations (tax, commercial law)
• Site security and fraud prevention
• Improving and analyzing service quality

4. Transfer of Personal Data

• Shopify Inc. (store infrastructure — servers located abroad)
• iyzico, Shopify Payments (payment processing)
• Yurtiçi Kargo, DHL, and other cargo companies (delivery)
• Google Analytics (analytics)
• Meta Platforms, Inc. (Facebook/Instagram advertising measurement)
• Financial advisors, legal advisors, and auditors (within the framework of confidentiality agreements)
• Authorized public institutions (in case of legal obligation)

Data transfer abroad is carried out to countries or with measures that provide adequate protection under PDPL Article 9.

5. Method of Personal Data Collection and Legal Basis

Your data is collected through automatic or partially automatic methods via our website, email, social media accounts, call center, and physical contact points.

Legal bases:

• Establishment or performance of a contract (order processing)
• Fulfillment of our legal obligations (invoicing, commercial law)
• Our legitimate interests (analysis, security)
• Your explicit consent (marketing communication)

6. Your Rights Under the PDPL

Pursuant to PDPL Article 11:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used in line with its purpose
• To know the third parties to whom it has been transferred domestically or abroad
• To request rectification if it is incomplete or incorrectly processed
• To request its deletion or destruction within the conditions stipulated by the PDPL
• To request that the rectification, deletion, or destruction operations be notified to third parties to whom the data has been transferred
• To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems
• To request compensation for damages if you suffer damage due to unlawful processing of your personal data

7. Application Method

To exercise your rights:

• Email: info@allbyb.com
• Mail: 18 Mart Sok. Akınay Sit. C/3, Çiftehavuzlar, Kadıköy, Istanbul, 34728

Your applications will be finalized within 30 days. For the detailed application format, please refer to the official website of the Personal Data Protection Authority (kvkk.gov.tr).

8. Policy Changes

This Disclosure Text may be updated. The current version will always be published on this page. The last updated date is specified above.