Data Protection Notice (KVKK)

Data Controller

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is Abdullah Şahan, operating under the Şahan Design brand. Applications and contact: destek@sahandesign.com.

Data Processed & Purpose

Identity and contact details (name, email, phone) and message content submitted via the contact and quote forms are processed to evaluate your request, provide a proposal and communicate with you.

When you place an order we also process your billing details (individual or company title, tax details, address), your order contents and payment records (amount, date, order number). Your card details are NOT stored by us; payments are processed through the infrastructure of a licensed payment institution.

Legal Basis & Transfer

Data is processed on the legal grounds of establishing and performing a contract and legitimate interest. To deliver the service it is shared, in a limited and purpose-bound way, with the following processors: hosting and database infrastructure (Vercel, Supabase; servers may be located abroad), payment infrastructure (licensed payment institution), SMS notifications (NETGSM), email communication (Google Workspace). Beyond this it is not shared with third parties except for legal obligations.

If you choose to contact us over WhatsApp, the content of that conversation and your phone number are processed on the servers of the company operating WhatsApp abroad; using this channel is your choice. When you sign in by phone, the verification SMS sent to your number is part of performing the service and is not marketing.

Retention Period

Your personal data is retained for as long as the processing purpose requires and for the statutory periods set out in relevant legislation, then deleted or anonymized.

Your Rights

Under Article 11 of the KVKK you have the right to access, rectify/delete your data and object to its processing. Submit requests to destek@sahandesign.com.