This is the first and primary entry to Garaia's Privacy, Cookies & KVKK information. Cookies are small text files stored on your device. We use them only for the purposes described here.

Essential cookies — always active. These are necessary for security, checkout, cart, localisation and recording your privacy choices. Depending on how you use the store, Shopify may set cookies including _shopify_essential (up to 1 year), _shopify_test (1 minute), _tracking_consent (1 year), cart (2 weeks), cart_currency (2 weeks), discount_code (session), localization (2 weeks), login_with_shop_finalize (5 minutes), shopify_pay (1 year) and storefront_digest (1 year).

Preference cookies — optional. These remember choices such as language or region.

Analytics cookies — optional. If you consent, Shopify analytics cookies may measure visits and store performance. These may include _landing_page (2 weeks), _orig_referrer (2 weeks), _shopify_analytics (1 year), _shopify_s (30 minutes, rolling), _shopify_y (1 year) and shop_analytics (1 year).

Marketing cookies — optional. These may be used only after consent and only where a relevant marketing integration is active. No Google, Meta or custom advertising pixel was active on the store on the last-updated date.

You can accept all, reject all non-essential categories, or make a granular choice. Rejecting non-essential cookies does not prevent you from shopping. You may reopen the controls below at any time. You can also delete stored cookies through your browser; blocking essential cookies may stop parts of the store from working.

The data controller for garaiastudio.com is Zeynep Alpin Erkanat, a sole proprietorship operating under the Garaia name, tax identification number 3610296743. This notice explains how Garaia processes personal data when you browse the store, order a product, submit a contact, wholesale or pre-order enquiry, or request marketing communications.

Questions and data-subject requests may be sent to info@garaiastudio.com. We may request information necessary to verify the applicant's identity before acting on a request.

Depending on your interaction with Garaia, we process:

• identity and contact details such as name, email, phone, billing and delivery address;
• order, payment status, delivery, return and customer-service records (full card details are handled by the relevant payment provider and are not made available to Garaia);
• information in contact, wholesale and pre-order forms, including company, city, requested products, quantities and messages;
• newsletter choice and consent records;
• technical and usage data such as IP address, device/browser information, referring page, pages viewed, cookie choices and security logs.

We use these data to operate the store, provide requested information, form and perform contracts, fulfil and deliver orders, process returns, provide customer support, prevent fraud, keep the store secure, meet accounting and legal duties, improve the service through consented analytics, and send marketing only where you have opted in.

Data is collected electronically from information you submit, your transactions, Shopify and authorised service providers, and cookies or similar technologies. Under Turkish Law No. 6698, processing is based as applicable on the establishment or performance of a contract, compliance with legal obligations, the establishment or protection of a right, Garaia's legitimate interests provided your fundamental rights are not harmed, and your explicit consent where required.

Marketing communications and non-essential cookies are not a condition of shopping or sending an enquiry. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

We disclose only the data needed for the relevant service to: Shopify and its infrastructure services; İyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (iyzico) for payment processing, payment status, fraud prevention, cancellation and refund operations; shipping and logistics providers; professional advisers and competent public authorities where required; and connected sales channels where you place an order through such a channel. Full card details are entered into and handled by the authorised payment infrastructure and are not made available to Garaia. Shopify may also process certain data for its own purposes as described in the Shopify Consumer Privacy Policy.

The store currently uses Shopify Translate & Adapt, Shopify Forms and Marketplace Connect. Translate & Adapt supports translated/localised storefront content. Shopify Forms supports form collection where configured. Marketplace Connect may synchronise product/catalogue information and, where a connected marketplace order occurs, related order and customer fulfilment information.

We do not sell personal data. Providers may change as store operations evolve; this notice will be updated when a material change affects the processing described here.

Garaia's storefront is hosted on Shopify and customer data is currently hosted in the United States. Other infrastructure, payment, logistics or sales-channel providers may also process data outside Türkiye. International transfers are limited to what is necessary for the service and are handled in accordance with Article 9 of Law No. 6698 using an applicable legal transfer mechanism and appropriate safeguards.

When you send a contact, wholesale or pre-order form, Garaia processes the information in that form to assess and answer your request, prepare a quotation or pre-order, keep necessary correspondence, establish or perform a possible contract, and protect legal rights. Required fields are limited to information needed to handle the request; optional fields may be left blank.

This processing is separate from marketing. Submitting an enquiry does not subscribe you to the newsletter. If a separate newsletter checkbox is available, it is optional and leaving it unchecked does not affect your request.

If you request the Garaia newsletter, we process your email address, consent record and related delivery/unsubscribe records to send brand, product, event and commercial electronic communications; manage the subscriber list; demonstrate and honour your choice; and comply with applicable electronic-communications rules. The data is collected through the relevant checkbox or subscription form and processed on the basis of explicit consent where required.

You may unsubscribe using the link in a message or by emailing info@garaiastudio.com. Operational messages about an order or enquiry are not marketing messages and may still be sent where necessary.

By actively selecting the optional newsletter choice and submitting the form, I consent to Zeynep Alpin Erkanat / Garaia processing my email address and consent/delivery records for the purposes described in the Newsletter Notice and sending me commercial electronic communications by email. I understand that this choice is optional, is not a condition of receiving another service, and may be withdrawn at any time.

Data is kept only for the period necessary for the relevant purpose and applicable legal, accounting, consumer-protection and limitation requirements. Order and transaction records are retained for statutory periods; enquiry records for the time needed to answer and protect related rights; consent records for as long as necessary to demonstrate and honour the choice; and newsletter data until withdrawal, subject to any record we must retain by law.

We apply proportionate organisational and technical measures and expect service providers to protect data. No internet transmission or storage system can be guaranteed absolutely secure.

Under Article 11 of Law No. 6698, you may ask whether your personal data is processed; request information about processing; learn its purpose and whether it is used accordingly; learn recipients in Türkiye or abroad; request correction and notification of recipients; request deletion or destruction where the legal conditions are met and notification of recipients; object to an outcome against you produced solely by automated analysis; and request compensation if unlawful processing causes damage.

Send a clear request identifying the right you wish to exercise to info@garaiastudio.com. Include sufficient information for us to identify you and locate the relevant processing, but do not email unnecessary sensitive information. We will respond within the statutory period, no later than 30 days, subject to applicable rules.

The store is not directed to children under 16 and Garaia does not knowingly request their personal data. If you believe a child has provided data, contact us so we can assess and take appropriate action.

We may update these texts when operations, providers or law change. The date above identifies the current version. Material changes will be communicated through an appropriate store notice or other suitable channel.

Data controller: Zeynep Alpin Erkanat (sole proprietorship), operating as Garaia. Tax ID: 3610296743. Email: info@garaiastudio.com.