Privacy Policy

Privacy and Personal Data Protection Policy

1. Data Controller

The personal data collected through this website is processed by DrunkCraft as the data controller, in accordance with the Law No. 6698 on the Protection of Personal Data (KVKK – Turkish Personal Data Protection Law) and applicable international data protection principles.

2. Collected Data

When you visit our website or place an order, the following data may be processed:

  • First and last name

  • Email address

  • Phone number

  • Shipping and billing address

  • Order and payment information

  • IP address, browser information, and cookie data

  • Transaction data processed via the iyzico payment infrastructure (card details are not included; these are securely processed by iyzico)

3. Purposes of Data Processing

Your personal data is processed for the following purposes:

  • Creating and managing order processes

  • Processing payments (via iyzico infrastructure)

  • Handling shipping and delivery processes

  • Providing customer support and communication

  • Fulfilling legal obligations

  • Ensuring website security and preventing fraud

  • Improving customer experience

4. Payment Security (iyzico)

Payments are processed through the infrastructure of iyzico Electronic Money and Payment Services Inc.

Credit card information is never stored, viewed, or processed by DrunkCraft. The entire payment process is securely handled by iyzico systems.

5. Transfer of Personal Data

Your personal data may only be shared with the following parties:

  • Shipping and logistics companies

  • Payment service provider (iyzico)

  • Public authorities, where required by applicable law

Apart from these, your data is not shared with third parties for commercial purposes.

6. Data Retention Period

Personal data is stored for the period required by applicable legislation or as long as necessary for the purpose of processing. At the end of this period, it is securely deleted, destroyed, or anonymized.

7. Your Rights Under Applicable Data Protection Laws

Depending on your country of residence, you may have rights under applicable data protection regulations, including but not limited to KVKK (Turkey) and principles aligned with the EU General Data Protection Regulation (GDPR).

These rights may include:

  • Learning whether your personal data is processed

  • Requesting access to your data

  • Requesting correction or deletion

  • Learning the purpose of processing

  • Learning third parties to whom data is transferred domestically or internationally

  • Requesting compensation in case of unlawful processing

8. Cookies

Our website may use cookies to improve user experience and analyze site performance. You can manage your cookie preferences through your browser settings.

9. Security Measures

DrunkCraft takes appropriate technical and administrative security measures to protect personal data against unauthorized access, loss, or misuse.

10. Contact

For your data protection-related requests, you can contact us:

E-mail: drunkcraftco@gmail.com