Privacy policy

At The Body Shop Turkey, protecting your personal data is very important to us. We value your trust and are committed to handling your personal information responsibly, transparently, and in accordance with applicable laws.

This Privacy Policy explains what personal data we collect, how and why we use it, how we protect it, and what rights you have as a data subject.

Please take a moment to read this Privacy Policy carefully.

1. Who We Are (Data Controller)

In accordance with Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), the data controller is:

OBON SAI ELYSIA KOZMETIK ANONIM SIRKETI
NISBETIYE MAH. GAZI GUCNAR SK.
UYGUR IS MERKEZI NO: 4
IC KAPI NO: 2
BESIKTAS / ISTANBUL
TURKEY

Trading as The Body Shop Turkey.

Throughout this Privacy Policy, “we”, “us”, or “our” refer to OBON SAI ELYSIA KOZMETIK ANONIM SIRKETI, and “you” refers to the individual whose personal data is processed.

2. What Personal Data We Collect

Depending on how you interact with us (online, in-store, or via customer service), we may collect the following categories of personal data:

• Identity information (name, surname)

• Contact information (email address, telephone number)

• Address and delivery details

• Payment and transaction information

• Order history

• Website usage data (IP address, device information, cookies)

• Customer preferences and communications

• Marketing consent information

We only collect personal data that is necessary and relevant for the purposes described below.

3. How We Collect Your Personal Data

We may collect your personal data when you:

• Place an order on our website

• Create or use a customer account

• Contact our customer service team

• Subscribe to newsletters or marketing communications

• Participate in promotions, campaigns, or surveys

• Visit and browse our website

• Interact with us via email or other communication channels

4. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

• To process and deliver your orders

• To manage payments and prevent fraud

• To provide customer support and respond to inquiries

• To manage returns, refunds, and complaints

• To comply with legal and regulatory obligations

• To improve our products, services, and website

• To conduct marketing activities, where you have provided consent

• To ensure the security and proper functioning of our website

5. Legal Grounds for Processing

We process personal data in accordance with KVKK based on one or more of the following legal grounds:

• Processing is necessary for the performance of a contract

• Processing is required to comply with legal obligations

• Processing is necessary for our legitimate interests, provided it does not harm your fundamental rights

• Your explicit consent, where required by law

6. Sharing of Personal Data

We may share your personal data, strictly for the purposes outlined above, with:

• Courier and logistics companies (for delivery of orders)

• Payment service providers and banks

• IT service providers and website infrastructure partners

• Authorized public institutions and authorities, where legally required

All third parties are required to protect your personal data and process it only in accordance with our instructions and applicable law.

7. Transfer of Personal Data

Your personal data may be transferred within Turkey or, where legally permitted, abroad, provided that adequate safeguards are in place and all legal requirements under KVKK are fulfilled.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws.

When personal data is no longer needed, it is securely deleted, destroyed, or anonymized.

9. Your Rights Under KVKK

As a data subject, you have the right to:

• Learn whether your personal data is processed

• Request information about processed personal data

• Learn the purpose of processing and whether data is used in accordance with that purpose

• Know the third parties to whom personal data is transferred

• Request correction of incomplete or inaccurate data

• Request deletion or destruction of personal data under legal conditions

• Object to results arising against you from automated processing

• Request compensation if you suffer damage due to unlawful processing

10. How to Exercise Your Rights

You may submit your requests regarding your personal data by contacting us at:

📧 Email: info@thebodyshop.tr

Your request will be evaluated and responded to within the time limits set by applicable law.

11. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration.

These measures include secure systems, access controls, encryption, and staff training on data protection obligations.

12. Cookies and Website Technologies

Our website uses cookies and similar technologies to improve user experience and analyze website performance.

Detailed information about cookies and how you can manage them is provided in our Cookies Policy.

13. Children’s Privacy

Our website and services are intended for adults. We do not knowingly collect personal data from children. If we become aware that personal data of a child has been collected without appropriate consent, we will take steps to delete it promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, business practices, or services.

The updated version will be published on our website and will become effective as of the publication date.

15. Contact Us

If you have any questions or concerns regarding this Privacy Policy or how we process personal data, please contact us:

📧 Email: info@thebodyshop.tr