Privacy policy

Last Updated: October 15, 2026

Privacy Policy and Personal Data Protection Notice (KVKK)

At Drbiobarf, we value the privacy and security of your personal data. This notice has been prepared to inform you about the processing of your personal data when you visit our website, place an order, purchase products, or contact us.

This notice has been prepared in accordance with Turkish Personal Data Protection Law No. 6698 (“KVKK”) and applicable legislation. Your personal data is processed only for the relevant purposes and under the conditions permitted by applicable law.

1. Data Controller

Your personal data is processed by Ayhan Güngör, acting as the data controller in connection with activities carried out under the Drbiobarf brand.

For questions regarding privacy and your personal data, you can contact us through the following channels:

Formal applications under the KVKK must be submitted in accordance with the procedures and requirements specified in the relevant legislation.

2. Personal Data Processed

Depending on your use of our website, your orders, and your communications with us, the following categories of personal data may be processed:

  • Identity information: First and last name.
  • Contact information: Email address, telephone number, and delivery address.
  • Customer transaction information: Order number, purchased products, order history, and order status.
  • Financial transaction information: Order amount, payment status, invoices, and transaction records. The processing of card details may vary depending on the payment infrastructure used.
  • Customer communications: Information you provide through contact forms, support requests, and other inquiries.
  • Transaction security information: IP address, device and browser information, and technical logs that may be processed to operate and secure the website.

Data is processed only when necessary to provide the relevant service or achieve the stated purposes and when an appropriate legal basis exists.

3. Methods of Collecting Personal Data

Your personal data may be collected when you place an order or use an account, contact us through contact forms or email, use the Shopify e-commerce infrastructure and other services, or through automatic technical logs generated for the operation and security of the website. Where permitted by law, data may also be obtained from authorized institutions and organizations.

4. Purposes of Processing Personal Data

  • Receiving and managing orders,
  • Processing payments, invoicing, and accounting,
  • Preparing and delivering products,
  • Handling requests concerning orders, deliveries, and product issues,
  • Providing customer service,
  • Operating the website and ensuring information security,
  • Fulfilling obligations imposed by law,
  • Resolving legal disputes and protecting relevant rights.

Drbiobarf does not send advertising or promotional emails for marketing purposes. This does not prevent us from sending necessary messages concerning your orders.

5. Legal Grounds for Processing Personal Data

Your personal data is processed on the basis of applicable processing conditions specified in Article 5 of the KVKK. If the processing of special categories of personal data becomes relevant, the conditions set out in Article 6 of the KVKK will also be considered.

Depending on the nature of the processing activity, the legal grounds may include the necessity of processing for the establishment or performance of a contract, compliance with legal obligations, the establishment, exercise, or protection of a right, legitimate interests provided that your fundamental rights and freedoms are not harmed, or other valid processing conditions provided by law. Where explicit consent is required, it will be obtained separately.

6. Transfer of Personal Data

Your personal data may be transferred, only to the extent necessary and in accordance with applicable legislation, to the following categories of recipients:

  • Shopify: To provide the e-commerce infrastructure, order management, and store services.
  • Payment service providers and banks: To process payments and maintain related records.
  • Shipping and logistics companies: To deliver orders.
  • Accounting and technical service providers: To provide relevant services and fulfill legal obligations.
  • Authorized public institutions and legally authorized persons: In connection with legal obligations and proceedings.

The application of these transfer categories depends on the services used and the type of transaction involved. Due to the infrastructure of Shopify or other service providers, personal data may be processed abroad or transferred outside Türkiye. Where such a transfer occurs, the requirements of Article 9 of the KVKK and the relevant legislation must be met.

7. Cookies and Similar Technologies

Our website operates on the Shopify platform. Shopify or its infrastructure may use cookies and similar technologies for purposes such as operating the store, ensuring security, and managing cart and order processes.

Drbiobarf does not make unverified claims regarding the use of additional cookies or tracking tools for advertising and marketing purposes. The actual scope of cookies used on the website should be determined by reviewing Shopify settings and active applications.

If non-essential analytics, personalization, or advertising cookies are used, appropriate disclosures and consent mechanisms will be provided in accordance with applicable legislation.

8. Retention and Deletion of Personal Data

Your personal data is retained for as long as required by the purposes of processing, taking into account the retention periods prescribed by applicable legislation. When the reasons for retention no longer apply, the data is deleted, destroyed, or anonymized in accordance with the relevant legislation. Records that must be retained by law may be kept for the applicable period.

9. Security of Personal Data

Technical and administrative measures appropriate to the nature of our activities and the risks associated with the data processed are taken to protect personal data. As absolute security cannot be guaranteed for data transmitted over the internet, it is important to exercise due care in protecting personal data.

10. Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the following rights:

  • To learn whether your personal data is being processed,
  • To request information if your personal data has been processed,
  • To learn the purpose of processing and whether the data is being used in accordance with that purpose,
  • To learn which third parties in Türkiye or abroad receive your personal data,
  • To request the correction of incomplete or inaccurate personal data,
  • To request the deletion or destruction of personal data under the conditions set out in the KVKK,
  • To request notification to relevant third parties of correction, deletion, or destruction actions,
  • To object to a result arising against you from the analysis of processed data exclusively through automated systems,
  • To request compensation for damages if you suffer harm due to unlawful data processing.

11. How to Submit a Request

You may direct requests under the KVKK to the data controller, Ayhan Güngör. General inquiries may be sent to destek@drbiobarf.com or submitted through our Contact Page.

Formal applications under the KVKK must be submitted using methods suitable for verifying the applicant’s identity and in accordance with the procedures and requirements specified by law. Not every message sent by email or through a contact form should automatically be considered a formally valid application. Applications will be evaluated within the periods and procedures prescribed by law.

12. Third-Party Services

Our website may contain links to third-party services or websites. The personal data practices of those services may be governed by their own policies. We recommend reviewing the relevant privacy notices before using third-party services.

13. Changes to This Policy

This notice may be updated in response to changes in legislation or changes to our personal data processing activities. The current version will be published on our website, and the last updated date will be shown at the beginning of the page.

14. Contact

If you have questions about our Privacy Policy or your personal data, you can contact us through the following channels:

Drbiobarf