Legal Documents

Privacy Policy

Last updated: March 29, 2026

Your security matters to us. The personal data you share with us is protected with care. This policy transparently explains what data is collected, how it is used, with whom it is shared, and what your rights are.

Table of Contents

1.Identity of the Data Controller 2.Scope and Purpose of the Policy 3.Categories of Personal Data Collected 4.Collection Methods and Legal Bases 5.Purposes of Processing Personal Data 6.Parties to Whom Data is Transferred 7.Credit Card and Payment Data Security 8.Cookie Usage 9.Retention Periods 10.Security of Personal Data 11.Commercial Electronic Messages 12.Third-Party Websites 13.Data Subject Rights (KVKK Art. 11)14.Policy Changes 15.Contact

1. Identity of the Data Controller

The details of the data controller within the scope of the Turkish Personal Data Protection Law No. 6698 ("KVKK") are set out below:

Trade Name	Podyum Pera Tekstil Sanayi ve Ticaret Limited Şirketi
Business Activity	Kadın giyim ürünleri toptan satışı ve e-ticaret
Address	Merkez Mahallesi Merter Sokak No:13/A Güngören, İstanbul
Email	info@sophisticwoman.com
Phone	+90 536 581 79 09
Website	www.sophisticwoman.com
MERSIS No	0730039488400017
Trade Registry No	30542-5
Tax ID	7300394884

2. Scope and Purpose of the Policy

This Privacy Policy has been prepared pursuant to Article 10 of KVKK to explain the conditions, purposes, recipients, retention periods, and rights related to the processing of personal data of all users who visit, register on, or place orders at www.sophisticwoman.com.

By using the Site and/or creating a membership, you are deemed to have accepted the practices covered by this Policy.

3. Categories of Personal Data Collected

Identity and Contact Information

—First name, last name, national ID number (for invoicing)
—Email address, phone number
—Billing address and delivery address

Commercial and Financial Information (For Wholesale Members)

—Company name, tax identification number, tax office
—Trade registration number (when requested)
—Order history, invoice details, payment method

Transaction Security Information

—IP address, browser type and version, operating system
—Session data, login times, page view data
—Usage data obtained through cookies

Marketing and Preference Data (Based on Explicit Consent)

—Product preferences, purchase history, category interests
—Newsletter subscription status and communication preferences

4. Methods of Collecting Personal Data and Legal Bases

Collection Methods

—Electronically: Via website forms, order forms, contact forms, email, WhatsApp, and cookies
—In person: During showroom visits, trade fairs, and business meetings
—Automatically: Through cookies and similar technologies

Legal Bases — KVKK Art. 5

KVKK Art. 5/2-cConclusion or performance of a contract — Membership, order, delivery, invoicing

KVKK Art. 5/2-çLegal obligation — Tax, accounting, and commercial regulations

KVKK Art. 5/2-fLegitimate interest — Site security, fraud prevention, service improvement

KVKK Art. 5/1Explicit consent — Marketing messages and commercial electronic communication

5. Purposes of Processing Personal Data

—Creating membership registration and account management
—Managing and tracking wholesale order processes
—Fulfilling invoicing, accounting, and financial obligations
—Coordinating shipping and delivery processes
—Managing customer service, complaints, and return requests
—Wholesale price list, new collection, and campaign notifications (based on explicit consent)
—Ensuring site security and preventing unauthorized access
—Website usage analytics and improvement of service quality
—Making required notifications to legal authorities
—Managing business partner and dealer relationships

Your personal data will not be used outside the purposes stated above. It will not be shared with or sold to third parties for commercial purposes without your explicit consent.

6. Parties to Whom Personal Data is Transferred

Within the scope of Articles 8 and 9 of KVKK, your personal data may be shared with the following parties:

Recipient	Purpose
Shipping and logistics companies	Fulfillment of order deliveries
Payment infrastructure and banks	Processing secure payment transactions
Financial advisor / accounting	Fulfillment of legal financial obligations
Cloud and software service providers	Operating site and database infrastructure
Email / SMS marketing platforms	Consent-based commercial communication (with explicit consent)
Authorized public institutions and organizations	Tax authority, SSI, courts — legal obligation

International Data Transfers: Data transfers abroad are carried out only to countries providing adequate protection under Article 9 of KVKK or with your explicit consent.

7. Credit Card and Payment Data Security

—Credit card information is never stored on our company's servers.
—All payment transactions are processed through payment infrastructure compliant with PCI DSS security standards.
—All financial transactions are secured with 256-bit SSL encryption.
—For EFT/wire transfers, only the payment receipt and amount information is collected.

Secure Payment: Your credit card information is only shared with the relevant bank or payment institution during order completion. Our company has no access to this information.

8. Cookie Usage

sophisticwoman.com uses cookies to enhance user experience and for analytics purposes. The types of cookies used are explained below:

Cookie Type	Purpose	Consent
Essential cookies	Session management, cart, login — core functionality	Not required
Analytics cookies	Visitor count, page views (Google Analytics etc.)	Optional
Marketing cookies	Personalized advertising and content delivery	Explicit consent
Preference cookies	Language, session, and user preferences	Optional

You can change your cookie preferences through browser settings or the cookie management panel. If you disable non-essential cookies, some features may be restricted.

For detailed information, please visit www.sophisticwoman.com/cerez-politikasi.

9. Retention Periods for Personal Data

Data Type	Retention Period
Membership and account information	While account is active + 3 years from deletion date
Order and invoice records	10 years as required by Commercial Code and Tax Regulations
Customer service correspondence	3 years from last communication
Marketing data	Until explicit consent is withdrawn
Website log records	2 years
Payment transaction records	10 years as required by tax regulations

Upon expiry of retention periods, your personal data is deleted, destroyed, or anonymized.

10. Security of Personal Data

Pursuant to Article 12 of KVKK, the following technical and administrative measures are taken to ensure the security of your personal data:

Technical Measures

—Securing data transmission with SSL/TLS encryption
—Firewall and access authorization systems
—Regular security tests and vulnerability scans

Administrative Measures

—Employee confidentiality agreements and KVKK awareness training
—Data processing agreements with third parties
—Data minimization: Only necessary and purpose-appropriate data is collected
—Access restriction: Personal data is accessible only by authorized personnel

Security Breach: In the event of a security breach, data subjects and the Personal Data Protection Authority will be notified as soon as possible in accordance with Article 12 of KVKK.

11. Commercial Electronic Messages

Mandatory Notifications

Order confirmations, shipment tracking, invoices, security notifications — sent without requiring consent.

Commercial Messages

New collection, campaign, and discount announcements — sent only based on explicit consent.

Ways to Opt Out of Commercial Communications

—Via Account Settings > "Notification Preferences" section
—Via the "Unsubscribe" link in sent emails
—By sending an email to info@sophisticwoman.com

12. Third-Party Websites

sophisticwoman.com may contain links to third-party websites such as social media platforms, payment providers, and shipment tracking sites.

The Company is not responsible for the privacy policies and practices of these websites. You are advised to review the privacy policies of the relevant sites separately.

13. Data Subject Rights (KVKK Art. 11)

Pursuant to Article 11 of KVKK, you have the following rights:

—To learn whether your personal data is being processed
—To request information if it has been processed
—To learn the purpose of processing and whether it is used accordingly
—To learn about third parties to whom it is transferred domestically or abroad
—To request correction of incomplete or incorrectly processed data
—To request deletion or destruction under KVKK Art. 7
—To request notification of correction and deletion to third parties
—To object to results arising against you from automated data processing
—To request compensation for damages caused by unlawful processing

Application: To exercise your rights, you must apply with documents verifying your identity (name, surname, national ID number, signature). Requests will be answered within the legal period of 30 days.

14. Policy Changes

The Company reserves the right to update this Privacy Policy in line with legal regulations or changes in business processes.

Important changes will be announced on the Site and registered members will be notified by email. The current policy is always accessible at www.sophisticwoman.com/gizlilik-politikasi.

15. Contact

For your applications and questions regarding KVKK, you can reach us through the following channels:

Email	info@sophisticwoman.com
Phone / WhatsApp	+90 536 581 79 09
Written Application	Merkez Mah. Merter Sok. No:13/A Güngören, İstanbul
Web	www.sophisticwoman.com

This Privacy Policy has been prepared within the scope of the Personal Data Protection Law No. 6698.
Podyum Pera Tekstil Sanayi ve Ticaret Limited Şirketi — www.sophisticwoman.com