Privacy Policy

Last updated: 15.10.2026

As Thpshop Hediyelik Eşya ve Fotoğraf (the “Company”), we care about the security of the personal data of everyone who visits and shops on the hizlikupa.com website (the “Site”). This notice has been prepared to inform you in our capacity as data controller, pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.

1. Data Controller

Company name: Thpshop Hediyelik Eşya ve Fotoğraf
Address: İsmetpaşa Mah. 93. Sok A Blok Apt. No: 2A Sultangazi / İstanbul
E-mail: [email protected]
Phone: 08503035560

2. Personal Data We Process

Identity: first name, last name; Turkish ID number / tax number for corporate invoices.
Contact: phone number, e-mail address, delivery and billing address.
Customer transaction: order contents, order number, amount, payment method, order note, billing details.
Images and design: photos, logos and text you upload to personalize products, and the print designs created from them.
Financial: payment result and payment reference number. Your card details are not stored on our Site and are never visible to us; payment is processed on the 3D Secure payment page of iyzico, a licensed payment institution.
Transaction security: IP address, browser and device information, site traffic records (logs).
Marketing: information about visits, clicks and shopping behavior collected through cookies with your explicit consent.

3. Purposes of Processing

Receiving your order, preparing the design, and producing, shipping and delivering the product,
Concluding and performing the distance sales contract, and handling payment and return processes,
Issuing invoices / e-archive invoices and fulfilling legal accounting obligations,
Contacting you about your order status and responding to requests and complaints,
Carrying out information security processes, preventing fraud, and meeting record-keeping obligations under Law No. 5651,
Providing information to authorized institutions and organizations,
Where you have given explicit consent, analyzing site usage and showing you relevant advertisements.

4. Collection Method and Legal Grounds

Your personal data is collected electronically through the order form on the Site, the design screen, our communication channels (phone, e-mail, WhatsApp) and cookies. Under Article 5/2 of the KVKK, your data is processed on the following legal grounds:

(c) it is directly related to the conclusion or performance of a contract,
(ç) it is necessary for the data controller to fulfill its legal obligations (Consumer Protection Law No. 6502, Tax Procedure Law No. 213, Turkish Commercial Code No. 6102, Law No. 5651),
(e) it is necessary for the establishment, exercise or protection of a right,
(f) our legitimate interest, provided that it does not harm your fundamental rights and freedoms.

Analytics and marketing cookies, and any related transfers abroad, are used solely on the basis of your explicit consent pursuant to Articles 5/1 and 9 of the KVKK.

5. Transfer of Personal Data

Your personal data may be shared with the following recipients, limited to the purposes above and only to the extent necessary:

Shipping and logistics companies: first name, last name, phone number and delivery address (for delivery),
Payment institution (iyzico): first name, last name, contact details, address and order amount / contents (for collecting payment and fraud checks),
Accounting firms, financial advisors and e-invoice service providers: billing details,
Hosting and IT service providers: data necessary for the Site to operate,
Authorized public institutions and organizations: upon request and to the extent permitted by law.

If you give explicit consent, cookie data may be transferred abroad under Article 9 of the KVKK, since the servers of Google (Google Analytics, Google Ads), Meta (Facebook / Instagram Pixel) and TikTok used for analytics and advertising services are located outside Turkey. The text you type in the address field is sent to the Google Maps service used for address suggestions.

6. Cookies

Our Site uses the following cookies and similar technologies (including browser storage):

Essential cookies: needed to remember your cart, your design, and your language and cookie preferences; they are used for the Site to function and do not require consent.
Analytics cookies (Google Analytics): help us improve the Site using statistics such as the number of visits and pages viewed.
Marketing cookies (Google Ads, Meta Pixel, TikTok Pixel): used to measure our advertising and show ads tailored to your interests.

Analytics and marketing cookies are not activated unless you select “Accept” in the cookie bar shown at the bottom of the Site. You can change your preference at any time via the “Cookie preferences” link at the very bottom of the page, and you can delete or block cookies in your browser settings.

7. Retention Periods

Your personal data is retained for as long as required by the purpose of processing and by applicable legislation: order, invoice and accounting records for 10 years under the Turkish Commercial Code and the Tax Procedure Law; distance sales records for at least 3 years under the relevant legislation; traffic records for 2 years under Law No. 5651; images uploaded with orders until production and any return / complaint process has been completed. Once the period expires, your data is deleted, destroyed or anonymized in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

8. Data Security

To protect your data, we take administrative and technical measures such as SSL (HTTPS) encryption, access authorization, secure server infrastructure and logging. Your card details are never processed or stored on our Site.

9. Your Rights Under Article 11 of the KVKK

As a data subject, you have the right to:

Learn whether your personal data is being processed and, if so, request information about it,
Learn the purpose of processing and whether your data is used in line with that purpose,
Know the third parties, in Turkey or abroad, to whom your data is transferred,
Request correction if your data is incomplete or inaccurate,
Request deletion or destruction of your data under the conditions set out in Article 7 of the KVKK,
Request that correction, deletion and destruction be notified to third parties to whom your data has been transferred,
Object to any outcome against you resulting from analysis carried out exclusively by automated systems,
Claim compensation if you suffer damage due to unlawful processing of your data.

You may withdraw any explicit consent you have given at any time.

10. How to Apply

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit requests regarding your rights in writing, together with documents verifying your identity, to İsmetpaşa Mah. 93. Sok A Blok Apt. No: 2A Sultangazi / İstanbul; via registered electronic mail (KEP); with a secure electronic signature / mobile signature; or from the e-mail address registered in our system to [email protected]. Your application will be finalized free of charge within 30 days at the latest, depending on the nature of the request; if the process involves additional costs, the fee schedule set by the Personal Data Protection Board may apply.

11. Children’s Privacy

Our Site is not intended for individuals under the age of 18. Persons under 18 should not place orders or share personal data without the consent of their parent or guardian.

12. Changes

This policy may be updated in line with changes in legislation and our services. The current version is always published on this page.