Privacy Policy and Personal Data Notice

KVKK

Last updated: 7 August 2026

This notice explains how personal data may be processed in connection with e-commerce activities carried out under the TWO-BORG brand through www.two-borg.com.

1. Contact information

2. Data we may process

• Name, surname and identity information required for orders/invoicing,
• Email, telephone, delivery and billing addresses,
• Order, product, amount, delivery, return and customer-service records,
• Payment status, transaction and reference information,
• IP address, device, browser, session and security logs,
• Requests, complaints and customer-service correspondence,
• Marketing and communication preferences where permitted by law.

3. Purposes

• Order creation, payment, invoicing, packing, shipping and delivery,
• Returns, withdrawal, exchanges and customer support,
• Fraud prevention and information security,
• Compliance with tax, accounting, consumer and e-commerce obligations,
• Managing legal claims and disputes,
• Lawful campaign and brand communications,
• Site analytics and user-experience improvements subject to cookie preferences.

4. Payment data and iyzico

Payments may be processed through iyzico and/or other licensed payment service providers displayed on the Site. TWO-BORG does not directly store full card numbers or card security codes.

5. Sharing

Where necessary to perform an order, data may be shared with payment providers, banks, carriers/logistics providers, e-commerce infrastructure, hosting/software/security providers, accounting and e-document providers, competent public authorities and professional advisers.

6. International transfers

If technology or infrastructure services are located abroad, data may be transferred only where a lawful international-transfer mechanism under applicable Turkish data-protection rules is available.

7. Cookies

The Site may use cookies necessary for operation. Non-essential analytics, advertising or personalization cookies are used according to your preferences/consent where required by applicable law.

8. Retention

Data is retained for the period necessary for the relevant purpose and statutory retention/limitation periods, and is then deleted, destroyed or anonymized as required.

9. Your rights

Subject to applicable Turkish data-protection law, you may request information regarding processing, purposes, recipients, correction, deletion/destruction and exercise other rights available under Article 11 of Law No. 6698.

10. Requests

Personal-data requests may be sent to info@two-borg.com. Additional information may be requested where legally necessary to verify identity.

11. Updates

This policy may be updated as our services or applicable law changes. The current version applies from the date it is published on www.two-borg.com.