Privacy Policy

We at Nook Gıda İnşaat Turizm Bilişim Ticaret Ltd. Şti.(“the Company”, “we”) take the privacy of your personal data seriously. This policy describes our practices for the personal data we collect, process, and retain in our capacity as data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”).

• Data controller: Nook Gıda İnşaat Turizm Bilişim Ticaret Ltd. Şti.
• Address: Cepa Ofis Kule, Mustafa Kemal Mah. 2123 Cad. No:2D, Çankaya / Ankara, 06510
• Tax number: 6311327467 (Maltepe Tax Office)
• Email: kvkk@nunchishop.com

We collect the following categories of data, all provided directly by you through our website:

• Contact form: name and surname, email, phone (optional), subject, and message.
• B2B request form: name and surname, email, phone (optional), business type, and request message.
• Subscription order: name and surname, email, phone, product selection, delivery cadence, and delivery address.
• Newsletter sign-up: email.
• Technical logs: server access logs for your visits (IP address, user agent, request timestamp) — used for security and incident investigation.

• Responding to requests and questions submitted through our forms.
• Processing subscription orders, delivering products, and providing customer service.
• With your consent, sending marketing communications via our newsletter.
• Maintaining the security of the site and detecting and preventing abuse (bots, spam, brute-force attacks).

Your personal data is processed on the legal grounds set out in Article 5 of the KVKK: on the basis of your explicit consent (newsletter and marketing communications); where processing is necessary for the conclusion or performance of a contract (subscription orders); and to the extent that doing so is not detrimental to your fundamental rights and freedoms, on the basis of our legitimate interests (site security, request tracking). When you submit a form and check the consent box, you confirm that you have read and accepted this policy.

Your personal data is retained for as long as the processing purpose requires and within the retention periods prescribed by applicable law. Our general retention period is five (5) years; at the end of that period the data is deleted, destroyed, or anonymized.

In order to deliver our services, we work with the following service providers under contractual safeguards. These providers process your data only on our behalf and only on our instructions:

• Vercel Inc. (United States) — web hosting and delivery infrastructure.
• MongoDB Atlas (United States) — database for form submissions and order records.
• Resend (Resend, Inc.) (United States) — sending administrative notification emails.
• Sentry (Functional Software, Inc.) (European Union) — application error monitoring.
• BetterStack (Better Stack, s.r.o.) (European Union) — site uptime monitoring.

For detailed information about these providers' cross-border-transfer safeguards under Article 9 of the KVKK, please contact us at kvkk@nunchishop.com.

In the future we plan to integrate analytics and marketing-effectiveness tools such as Google Analytics and Microsoft Clarity. Should that integration occur, we will update this policy and the cookies that require prior consent will be clearly separated from the technically necessary ones.

Under Article 11 of the KVKK, you have the right to: learn whether your personal data is being processed; request information regarding the data being processed; learn the purpose of processing and whether the data is being used in line with that purpose; know the third parties to whom the data is transferred, whether domestically or abroad; request correction of incomplete or inaccurate data; request deletion or destruction of the data when the grounds for processing have ceased; request that any such correction, deletion, or destruction be communicated to third parties to whom the data has been transferred; object to a result that is produced solely through automated processing of your data and that has an adverse effect on you; and seek compensation if you have suffered damage due to unlawful processing.

To exercise these rights, please send your request to kvkk@nunchishop.com or via our contact form. Under Article 13 of the KVKK, your request will be resolved free of charge within thirty (30) days at the latest.

Today the site uses only technically necessary cookies for session management and security: the admin login session cookie and the CSRF protection cookie. Because these cookies are strictly necessary for the service to be provided, they do not require explicit consent (Article 6(1)(f) of the GDPR and the legitimate-interest exception of Article 5(2) of the KVKK).

When you first visit the site, the cookie-preference notice that appears lets you state your preference in advance for any optional analytics and marketing cookies that may be added in the future:

• Accept: You consent to the analytics and marketing cookies in use today and to those added in the future.
• Necessary only: Only the strictly necessary cookies are loaded. Optional cookies — even if we integrate them — will not be loaded into your browser.

You can reset your preference at any time by clearing your browser's local storage; the notice will reappear and you can update your selection.

We apply administrative and technical measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These include encrypted communication over HTTPS, an admin panel protected by a strong password, a session-revocation list, rate limiting to prevent abuse, and security scanning of our dependencies (Dependabot).

This policy may be updated to reflect changes in the law or developments in our services. When a material change is made, it will be announced on the site and the new version number will be shown at the top of this policy. Last updated: April 17, 2026.