How Rabi's Boutique collects, uses, protects, and shares personal data under applicable privacy rules, including KVKK.
Last updated: 2026-08-03The seller identified on this page acts as data controller for information processed through lam7a.net, except where a payment, logistics, or technology provider acts independently under its own notice.
This policy covers visitors, customers, people contacting support, and recipients of orders.
We may collect identity and contact data, delivery address, order choices, size and color selections, support messages, invoices, transaction references, payment status, consent records, device data, IP address, session identifiers, and security logs.
We do not intentionally collect complete card numbers or CVV values. Those are entered directly into the payment provider’s secure environment.
Data is used to form and perform sales contracts, process orders, deliver goods, issue records, provide returns and support, prevent fraud, secure the service, comply with accounting and consumer law, and establish or defend legal claims.
Where required, optional analytics or marketing processing relies on consent. Necessary processing may rely on contract performance, legal obligation, legitimate interest, or the establishment of a right under KVKK.
Relevant data may be shared with Shopier, Fourthwall, banks, payment institutions, cargo companies, hosting and email vendors, accountants, professional advisers, and public authorities when necessary and lawful.
Each recipient receives only the data reasonably needed for its role. Providers may act as processors or independent controllers under their own terms.
Some technology or payment providers may process data outside Türkiye. Where a cross-border transfer occurs, we use an available lawful transfer mechanism and reasonable contractual and security safeguards.
Provider locations and safeguards may change as services evolve; current information can be requested through [email protected].
Records are retained for the period required by commercial, tax, payment, consumer, and limitation rules, then deleted, anonymized, or securely isolated. Shorter-lived session and security logs follow operational schedules.
We use access controls, encryption in transit, credential protection, backups, logging, signed webhooks, and restricted administrative access. No online system can guarantee absolute security.
Subject to applicable law, you may ask whether data is processed, request access or correction, learn the purpose and recipients, object to certain automated outcomes, request deletion or anonymization where conditions apply, and seek compensation for unlawful processing.
Send a verifiable request to [email protected]. We may request information necessary to confirm identity and respond within the statutory period.
The storefront is not directed to children who cannot legally enter a purchase contract. A guardian should contact us if a child submitted personal data without proper authority.
Material policy changes are published on this page. You may complain to the Turkish Personal Data Protection Authority where you believe a KVKK request was not resolved lawfully.
Contact customer care and include your order number when your request concerns a purchase.