Privacy Policy

Effective date: 13 September 2026

This policy explains what we do with your personal data when you visit helloslimshop.com, place an order, or contact us.

Who is responsible

By Shiva Dış Ticaret Limited Şirketi Fevzi Çakmak Mah. Tamer Sok. No: 18, Küçükçekmece / İstanbul, Türkiye hello@helloslimshop.com · +90 533 020 68 39

We are the data controller for the personal data described here. Under Turkish law (KVKK no. 6698) we are the veri sorumlusu.

What we collect

When you order Name, delivery and billing address, email address, phone number, order contents, order value, and the last four digits and card type of the payment instrument. We never see or store your full card number — that goes straight to the payment provider.

When you contact us Your email address or phone number and whatever you write to us, plus our replies.

When you browse IP address, browser and device type, operating system, referring page, pages viewed, time on page, and the identifiers stored by cookies and similar technologies.

What we deliberately do not collect We do not ask for your date of birth, gender, or any other personal characteristic. We do not buy personal data from third parties or data brokers.

Why we use it, and on what legal basis

• Taking payment, packing and shipping your order, sending order emails — to perform the contract you entered into. Legal basis: GDPR art. 6(1)(b), contract.
• Handling refunds, returns and support requests — same reason. Art. 6(1)(b), contract.
• Keeping invoices and accounting records — tax and commercial law require it. Art. 6(1)(c), legal obligation.
• Detecting and preventing fraud and chargeback abuse — protecting the business against loss. Art. 6(1)(f), legitimate interests.
• Understanding how the site is used, and improving it — running a shop that works. Art. 6(1)(f), or consent where cookie rules require it.
• Marketing emails and advertising audiences — reaching people who want to hear from us. Art. 6(1)(a), consent, withdrawable at any time.

Who we share it with

We do not sell your personal data. We share it only with the companies that make the shop work:

• Shopify Inc. — hosts the store, processes orders, stores customer records.
• Payment providers — process card and wallet payments and run their own fraud checks. They are independent controllers for that processing.
• Carriers and customs brokers — receive the name, address, phone number and a customs description of the contents, because a parcel cannot cross a border without them.
• Email and messaging providers — send transactional and, where you consented, marketing email.
• Analytics and advertising providers (Google, Meta) — receive usage and, where you consented, conversion data through cookies and pixels.

We also disclose data where a court, tax authority or law enforcement body lawfully requires it, and to professional advisers bound by confidentiality.

Where your data goes

We operate from Türkiye, which the European Commission has not granted an adequacy decision. Our service providers are largely in the United States and the European Union.

Transfers of personal data out of the EEA or the UK to us are made on the basis of your explicit consent and the necessity of the transfer for performance of the contract you asked for — GDPR art. 49(1)(a) and 49(1)(b). Where we engage processors, we put the European Commission's Standard Contractual Clauses in place with them.

If you would rather your data did not leave your jurisdiction, the answer is not to place an order — we cannot deliver a parcel to you without sending your address abroad.

How long we keep it

• Order and invoice records — 10 years from the end of the financial year, as Turkish commercial and tax law requires.
• Support correspondence — 3 years from the last message.
• Marketing consent records — until you withdraw consent, then 3 years to prove the withdrawal was honoured.
• Analytics identifiers — no longer than 14 months.

After those periods data is deleted or irreversibly anonymised.

Your rights

If the GDPR or UK GDPR applies to you, you may ask us to:

• give you a copy of the personal data we hold about you (access)
• correct anything inaccurate (rectification)
• delete it (erasure)
• restrict how we use it, or object to our use of it
• send it to you or another provider in a portable format
• withdraw consent at any time, without affecting what we did before you withdrew

Write to hello@helloslimshop.com. We answer within 30 days and we do not charge for it. We may ask you to confirm your identity — usually by writing from the address on the order — before acting, because handing your data to the wrong person would be the greater harm.

You can also complain to the data protection authority where you live or work. In Türkiye that is the Kişisel Verileri Koruma Kurumu (KVKK); in the UK, the Information Commissioner's Office.

If you are in California

You may request to know what personal information we collected, request its deletion or correction, and opt out of "sharing" for cross-context behavioural advertising. We do not sell personal information as the CCPA/CPRA defines it. We will not discriminate against you for exercising these rights. Use the same address above, or the cookie controls on the site to opt out of advertising cookies.

Cookies

The shop sets:

• Strictly necessary cookies — cart contents, checkout state, security. The shop cannot work without them and they need no consent.
• Analytics cookies — how many people saw a page, where they came from, where they dropped off.
• Advertising cookies — measuring whether an advert led to an order, and building audiences.

Where the law requires consent, we ask before the analytics and advertising cookies are set, and you can change your answer at any time from the cookie settings link in the footer. Your browser can also block or delete cookies — the shop will still work, but the cart may not survive a page reload.

Automated decisions

We do not make any decision about you by purely automated means that produces a legal or similarly significant effect. Our payment providers run automated fraud scoring on transactions; if a payment is declined for that reason, email us and a person will look at it.

Children

The shop is for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, write to us and we will delete it.

Marketing

We email you about your order because we have to. Marketing email goes out only if you opted in, and every one of those emails has an unsubscribe link that works immediately. Unsubscribing from marketing does not stop your order emails.

Changes

If we change this policy we update the date at the top. If a change materially affects your rights, we will say so on the site and, where you have given us an address, by email.

Contact

hello@helloslimshop.com · +90 533 020 68 39 By Shiva Dış Ticaret Limited Şirketi, Fevzi Çakmak Mah. Tamer Sok. No: 18, Küçükçekmece / İstanbul, Türkiye