Data Privacy

Last updated: May 1, 2026 This summary explains, in plain language, key points about how Novaskin processes personal data in connection with its website and online services. For full details, please read our Privacy Policy, KVKK notice, and Cookie Policy. 1. Controller Novaskin acts as the data controller. Contact details are provided on the website and in order / support flows. 2. What data we process Identity and contact: name, email, phone, delivery / invoice address. Transaction: order contents, payment and delivery information, customer service records. Technical: IP address, browser and device information, timestamps, pages visited, error logs. Cookies and marketing signals: analytics and marketing cookies only if you accept the relevant categories in the cookie banner, plus records of your choices. 3. Optional analytics and marketing Google Analytics 4 (GA4): If you accept “Analytics”, usage statistics may be processed by Google, subject to Google’s terms, regional configuration, and your browser settings. Meta Pixel: If you accept “Marketing”, Meta technologies may be used for conversion measurement and advertising optimisation, subject to Meta’s policies. These tools are not required to use the site; you can withdraw consent via the cookie banner or browser controls. 4. Legal bases Performance of a contract, legitimate interests (security, fraud prevention, service improvement), legal obligations, and consent where required (optional cookies and related processing). 5. Transfers We may share data with payment providers (for example iyzico) and logistics / operational partners as needed to fulfil your order. If you give consent, data may be transferred to providers such as Google and Meta, including outside your country where applicable safeguards described in our policies apply. 6. Retention We keep data only as long as necessary for the relevant purposes and statutory limitation periods, then delete, anonymise, or archive it. 7. Your rights You may exercise rights under KVKK Article 11 and the GDPR (access, rectification, erasure, objection, etc.) using our published contact channels.