KVKK Privacy Notice
Last updated: 25.09.2026 · The Turkish version of this text prevails.
Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), we process your personal data as data controller to the extent described below.
1. Data Controller
Milad Gavsi (MGH) · Ali Fuat Başgil Mahallesi, No: 138, Bayrampaşa/İstanbul · 5360449988 · mgh@mghhali.com
2. Data We Process
- Identity and contact: first and last name, company name, tax or Turkish ID number, email address, phone number
- Delivery: delivery addresses, recipient name and phone, order notes
- Customer transactions: orders, payment status, uploaded payment receipts, cancellation and return requests with photos, IBAN given for refunds, loyalty points (Mil/M²), product reviews
- Security: an irreversible hash of your password (the password itself is not stored), IP address, login attempts and activity logs
3. Purposes
- Reviewing retailer applications and managing accounts
- Accepting orders, checking payments, delivery, cancellations and returns
- Informing you about order and payment status and customer support
- Running the loyalty programme (Mil/M² points, membership tiers)
- Information security and preventing misuse
- Meeting tax and commercial law obligations
4. Legal Grounds and Collection
Your data is collected electronically through registration and order forms, receipt uploads, account pages and your contact with us via WhatsApp or phone. It is processed under KVKK Art. 5(2) on the grounds of concluding or performing a contract (c), meeting our legal obligations (ç), establishing, exercising or protecting a right (e) and our legitimate interest, provided your fundamental rights are not harmed (f).
5. Transfers
Your data is shared only for the purposes above and only as needed: with shipping and logistics companies for delivery, with banks for payment checks, with competent public authorities on request and with our hosting provider.
To send order and payment notifications to our team we use the Telegram messaging service, whose servers are located abroad. Order code, name, company name, phone, amount and the payment receipt image may be transferred abroad for this purpose, in line with the conditions of KVKK Art. 9. WhatsApp may also be used to communicate with customers.
6. Retention
Your data is kept for as long as the purpose requires and the law prescribes (e.g. up to 10 years under the Turkish Commercial Code and Tax Procedure Law), then deleted, destroyed or anonymised.
7. Your Rights (KVKK Art. 11)
- Learn whether your data is processed and request information about it
- Learn the purpose and whether data is used accordingly
- Know the third parties in Türkiye or abroad to whom data is transferred
- Request correction of incomplete or incorrect data
- Request deletion or destruction under KVKK Art. 7
- Request that recipients be notified of corrections or deletions
- Object to adverse results arising solely from automated analysis
- Claim compensation for damage caused by unlawful processing
Send your request in writing to the address above or from your registered email address to mgh@mghhali.com. We respond free of charge within 30 days at the latest.