Privacy Policy

Data Controller

This Privacy Policy has been prepared by Shusha Diamond, acting as data controller, in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”) and the relevant legislation.

Shusha Diamond is committed to processing personal data lawfully and fairly; keeping it accurate and up to date where necessary; processing it for specific, explicit and legitimate purposes; and keeping it relevant, limited and proportionate to those purposes.

Personal Data Collected

The following personal data may be collected through the website, mobile applications, contact forms and other digital channels:

• Identity data (first name, surname)
• Contact data (phone number, e-mail address)
• Address and delivery data
• Order and transaction data
• IP address, traffic data and cookie records
• Information shared within customer service

Purposes of Processing Personal Data

Personal data is processed for the following purposes:

• Establishing and performing the distance sales contract
• Preparing orders and carrying out delivery processes
• Carrying out payment transactions
• Providing after-sales support services
• Conducting accounting and finance processes
• Fulfilling legal obligations
• Carrying out marketing and information activities where explicit consent exists

Transfer of Personal Data

In accordance with Articles 8 and 9 of the KVKK and limited to the purposes of processing, personal data may be transferred to the following parties:

• Courier and logistics companies
• Payment infrastructure providers and banks
• Financial advisory and accounting service providers
• Legal advisors
• Authorised public institutions and bodies
• Analytics service provider (Google) — outside Türkiye, only if analytics cookie consent has been given

Where international delivery is required, data may be transferred to logistics companies abroad for the purpose of carrying out the delivery.

Data Security Measures

Shusha Diamond takes the necessary technical and administrative measures to prevent the unlawful processing of personal data and unauthorised access.

The website is protected by an SSL security certificate, and data processing is carried out under the principle of limited access and authorisation.

Cookie Policy

Cookies are used on the website to improve the user experience, perform analysis and enhance service quality. You can change your cookie preferences at any time via the “Cookie Manager” link at the bottom of the page.

Analytical cookies: We use Google Analytics 4 to understand how our website is used. This service runs only if you allow “Analytical cookies” in the cookie window. It collects the following information: number of visits, pages and products viewed, the city or country and the channel visitors come from, and purchase steps. The service is provided by Google Ireland Ltd. and Google LLC; data may be processed on Google’s servers outside Türkiye. Google Analytics 4 does not store your IP address. Data is retained for 14 months. The cookies used are _ga and _ga_Q94VTDJQNZ and remain for up to 2 years. You can withdraw your analytics consent at any time via the same link.

Rights of the Data Subject

Under Article 11 of the KVKK, data subjects have the following rights:

• To learn whether their personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used accordingly
• To know the third parties to whom it is transferred at home or abroad
• To request correction if processed incompletely or incorrectly
• To request erasure or destruction within the framework of Article 7 of the KVKK
• To object to an adverse outcome arising from the analysis of the data solely by automated systems
• To request compensation for damages incurred due to unlawful processing

Applications may be submitted to Shusha Diamond in writing, via a registered electronic mail (KEP) address, or via the e-mail address registered in the system.

Retention Period

Personal data is retained for the periods stipulated in the relevant legislation or for as long as the purpose of processing requires. Upon expiry of the period, it is deleted, destroyed or anonymised in accordance with the legislation.

Effect & Updates

Shusha Diamond reserves the right to amend this Privacy Policy in line with changes in legislation or company policies. The current text takes effect on the date it is published on the website.