Privacy and personal data
What we collect, why, and your rights under KVKK, Russian personal-data law and the GDPR.
Who is responsible
Pipolune is the data controller for the shop at pipolune.com. Privacy requests go to info@pipolune.com. The seller details on this page name the controller; the legal name and address will appear there before card payments open.
What we use
We use the name, email, telephone, delivery address and order contents you give us; your account password in hashed form; your bag and wishlist; messages you send us; the language and currency you choose; and technical logs needed to keep the site secure. We do not ask for a child’s account, and we do not knowingly build a profile of a child. Payment card numbers are handled by the payment provider, not stored on Pipolune servers.
Why we use it
We use order and account data to perform the contract and to take the steps you ask for before a contract: keeping your bag, confirming stock, delivering, and sending the messages an order requires. We keep order records where tax and consumer law require it. We use security logs as a legitimate interest in protecting the site. Marketing email is sent only if you opt in, and you can unsubscribe in every letter or from your account.
Under Turkish Law No. 6698 (KVKK) this page is the disclosure notice. You may ask to know whether we process your data, to have it corrected or deleted, to object to a result that is reached solely by automated means, and to complain to the Personal Data Protection Authority (KVKK). Under Russian Federal Law No. 152-FZ you may ask what data we hold, require correction or blocking, and withdraw a consent that was the only basis for processing. If the GDPR applies to you, you also have the right of access, rectification, erasure, restriction, portability and objection, and you may complain to your local supervisory authority. Contract and legal-duty processing does not depend on a marketing tick.
Sharing and storage
We share data with the carrier who delivers the order, with the payment provider when you pay, and with the email service that sends transactional letters. We do not sell personal data. Data is stored on the hosting used to run pipolune.com and is kept for as long as the order, tax and consumer-claim periods require, and for account data until you delete the account, plus a short backup window.
These pages are Pipolune’s store rules. They are written for Law No. 6502 and the Distance Contracts Regulation in Türkiye, the Consumer Protection Law and Government Decree No. 2463 of 31 December 2020 in the Russian Federation, and, where they apply, Directive 2011/83/EU and the GDPR. If a mandatory rule in your country gives you more protection than this text, that rule prevails. This is the store’s policy, not a personal legal opinion.