Privacy Policy

Last updated: 01/10/2026

GAON Bridal values your privacy. This Privacy Policy explains what personal data we collect, why and on what legal basis we process it, who we share it with, how long we keep it and what your rights are. It is designed to meet the EU General Data Protection Regulation (GDPR), the UK GDPR and Turkish Personal Data Protection Law No. 6698 (KVKK).

1. Data Controller

GAON Gelinlik Tekstil ve Konfeksiyon San. Tic. Ltd. Şti.
Gaziosmanpaşa Mahallesi Filistin Sokak No:2/7, Çankaya, Ankara, Türkiye
Email: iletisim@gaonbridal.com · Phone: +90 312 447 52 25

2. Data We Collect

• Name
• Address (delivery and billing)
• Phone
• Email
• Order details (products, size, measurements, wedding date and other notes you provide)
• Payment transaction details (amount, date, result — not your card number)
• Account details and technical usage data (session, language/currency preference, pages visited)

3. Purposes and Legal Bases

• Order processing, production, delivery and customer support — performance of a contract (GDPR Art. 6(1)(b)).
• Invoicing, accounting, customs/export and tax obligations — legal obligation (Art. 6(1)(c)).
• Website security, preventing fraud and fake accounts — legitimate interests (Art. 6(1)(f)).
• Newsletters and promotional emails — only with your consent (Art. 6(1)(a)); you can unsubscribe at any time via the link in every email.

Providing the data marked as required at checkout is necessary to conclude the contract; without it we cannot process your order. We do not use automated decision-making or profiling.

4. Recipients

We share your data only as far as necessary with: our payment provider (iyzico), carriers (domestic couriers and DHL Express), customs and tax authorities, our hosting and email service providers, and public authorities where legally required. We never sell your data or share it with third parties for advertising.

Card details are not stored by us. Secure payment services are provided by iyzico.

5. International Transfers

We are based in Türkiye and your data is processed in Türkiye. For customers in the EU/EEA and the UK, this transfer is necessary for the performance of the sales contract you conclude with us (GDPR Art. 49(1)(b)). When your parcel is shipped, DHL processes your delivery data in the transit and destination countries.

6. Retention

Order and invoice records are kept for 10 years as required by Turkish tax law; distance contract records for 3 years. Account data is kept while your account exists; newsletter data until you withdraw consent. After that, data is deleted or anonymised.

7. Your Rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw your consent at any time without affecting prior processing. You also have the right to lodge a complaint with the data protection authority in your country of residence (in the UK: the Information Commissioner's Office). To exercise your rights, email iletisim@gaonbridal.com; we will respond within one month.

8. Cookies

We use only strictly necessary and preference cookies; no advertising or third-party tracking cookies are used. See our Cookie Policy.

9. Children

Our services are not directed at persons under 18, and we do not knowingly collect their data.

10. Changes

We may update this policy; the current version is always published on this page.