Privacy policy
Last Updated: July 18, 2026
Octobubble respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit our website, place an order, contact us or otherwise interact with Octobubble.
This policy has been prepared with consideration for Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, the European Union General Data Protection Regulation (“GDPR”). KVKK requires data controllers to provide clear information regarding their identity, processing purposes, recipients, collection methods, legal grounds and data-subject rights.
1. Data Controller
For the purposes of applicable data protection legislation, the data controller is:
Brand: Octobubble
Legal Business Name: [Company or sole proprietorship name]
Business Address: [Full business address]
Email: info@octobubble.com
Telephone: [Telephone number]
Tax or MERSIS Number: [Tax or MERSIS number]
References to “Octobubble,” “we,” “us” or “our” in this Privacy Policy refer to the business identified above.
2. Personal Information We Collect
Depending on how you use our website and services, we may collect the following categories of personal information.
Contact Information
This may include:
- Your full name
- Email address
- Telephone number
- Billing address
- Delivery address
- Country, city and postal code
Order and Transaction Information
This may include:
- Products purchased or added to your cart
- Order number
- Order date and amount
- Billing and delivery details
- Discount or promotional code information
- Return, exchange and refund history
- Communication relating to your order
Payment information is generally processed securely by authorised payment service providers. We do not ordinarily receive or store your complete debit or credit card details.
Account Information
Where customer accounts are available, we may collect:
- Account login details
- Saved addresses
- Order history
- Communication and marketing preferences
Device and Usage Information
When you access our website, certain information may be collected automatically, including:
- Internet Protocol address
- Browser and device type
- Operating system
- Language and regional settings
- Pages viewed
- Links clicked
- Time spent on the website
- Referring website
- Approximate location derived from your IP address
- Cookie and similar technology identifiers
Customer Support Information
When you contact us, we may collect the information contained in your request, including emails, messages, photographs, order details, return requests, complaints and other information you voluntarily provide.
Marketing Information
Where permitted by law, we may collect:
- Email or SMS marketing preferences
- Newsletter subscriptions
- Responses to promotions or campaigns
- Interaction with advertisements
- Product interests and shopping preferences
Information Received from Third Parties
We may receive information from service providers that help us operate our business, such as Shopify, payment providers, delivery companies, fraud-prevention providers, analytics services and advertising platforms.
3. How We Use Personal Information
We may process personal information for the following purposes:
- Processing and fulfilling orders
- Receiving and confirming payments
- Arranging delivery and shipment tracking
- Providing customer service
- Managing returns, exchanges, cancellations and refunds
- Communicating about orders or customer requests
- Creating and managing customer accounts
- Detecting and preventing fraud, abuse and security incidents
- Protecting our legal rights and business operations
- Complying with accounting, taxation, consumer protection and other legal obligations
- Improving our website, products and customer experience
- Measuring website performance and customer engagement
- Personalising website content and product recommendations
- Sending marketing communications where legally permitted
- Displaying or measuring relevant advertising
- Responding to requests from courts, regulators and authorised public institutions
- Establishing, exercising or defending legal claims
We will not use your personal information for purposes that are incompatible with the purposes described in this policy unless permitted or required by applicable law.
4. Legal Grounds for Processing
Depending on the circumstances and applicable legislation, we may process your personal information on one or more of the following grounds:
- Processing is necessary to enter into or perform a contract with you.
- Processing is necessary to fulfil a legal obligation.
- Processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.
- You have provided your explicit consent.
- Processing is necessary for the establishment, exercise or defence of a legal claim.
- Processing is otherwise permitted under applicable data protection legislation.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Shopify
Our online store is operated using Shopify.
Shopify may process personal information to provide hosting, checkout, transaction, store-management, security and related e-commerce services. Depending on the relevant service, Shopify may process information on our behalf or for its own stated purposes.
Shopify provides merchants with privacy-policy, cookie-banner and data-sharing preference tools through its customer privacy settings.
6. How We Share Personal Information
We may disclose personal information only where reasonably necessary for the purposes described in this policy.
Recipients may include:
E-commerce and Technology Providers
This includes Shopify and providers that support website hosting, store functionality, databases, cybersecurity, email delivery and customer support.
Payment Providers
Payment processors, banks and financial institutions may process information required to authorise payments, prevent fraud and issue refunds.
Delivery and Logistics Providers
We may share your name, contact information, delivery address and order details with shipping carriers, fulfilment partners and customs authorities where necessary to deliver your order.
Analytics and Advertising Providers
Subject to applicable consent requirements, we may work with analytics, social-media and advertising providers to understand website activity, measure campaigns and show relevant advertisements.
Professional Advisers
Personal information may be shared with accountants, auditors, lawyers, insurers and other professional advisers where necessary.
Public Authorities
We may disclose information where required by law, court order, regulatory request or another binding legal process.
Business Transfers
If Octobubble is involved in a merger, restructuring, financing, acquisition, sale or transfer of business assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality and legal protections.
We do not disclose personal information to unrelated third parties for their own independent purposes unless we have a lawful basis to do so.
7. Cookies and Similar Technologies
Our website may use cookies, pixels, tags, local storage and similar technologies.
These technologies may be used for:
- Keeping the website and checkout functioning
- Remembering your cart and preferences
- Maintaining security and preventing fraud
- Analysing website traffic and performance
- Understanding how visitors use the website
- Measuring advertising campaigns
- Personalising content and advertisements
Cookies may be classified as:
Strictly Necessary Cookies: Required for essential website and checkout functions.
Functional Cookies: Used to remember your selections and preferences.
Analytics Cookies: Used to understand website performance and visitor behaviour.
Advertising Cookies: Used to measure campaigns and provide relevant advertising.
Where required by law, non-essential cookies will only be activated after you provide consent.
You may manage your cookie choices through our cookie banner or your browser settings. Disabling certain cookies may affect the availability or functionality of parts of the website.
8. Marketing Communications
Where permitted by applicable law, we may send promotional emails or messages about products, offers and updates.
You may unsubscribe at any time by:
- Clicking the unsubscribe link contained in a marketing email
- Using the preference options provided in the message
- Contacting us at info@octobubble.com
Unsubscribing from marketing communications will not prevent us from sending essential service messages, such as order confirmations, delivery updates, security notices or responses to customer-support requests.
9. International Data Transfers
Some of our service providers may process or store personal information outside Türkiye or outside the country in which you reside.
Where personal information is transferred internationally, we will take reasonable steps to ensure that the transfer is carried out using a lawful transfer mechanism and appropriate safeguards required by applicable legislation.
Türkiye’s rules regarding international transfers were amended in 2024, and the Turkish Data Protection Authority has published implementing regulations and standard contractual texts for transfers abroad.
Where the GDPR applies, international transfers will be handled in accordance with applicable GDPR transfer requirements and safeguards. The GDPR may apply to businesses outside the European Union when they offer goods or services to people located in the European Union or monitor their behaviour there.
10. Data Retention
We retain personal information only for as long as reasonably necessary to:
- Fulfil the purposes described in this policy
- Complete and document transactions
- Provide customer support
- Comply with accounting, taxation, consumer protection and other legal obligations
- Prevent fraud and protect our services
- Resolve disputes
- Establish, exercise or defend legal claims
Retention periods may vary depending on the nature of the information, the purpose for which it was collected and applicable legal requirements.
When personal information is no longer required, it may be securely deleted, destroyed or anonymised in accordance with applicable law.
11. Information Security
We use reasonable administrative, organisational and technical measures designed to protect personal information against:
- Unauthorised access
- Unlawful processing
- Accidental loss
- Disclosure
- Alteration
- Destruction
- Misuse
These measures may include access controls, secure connections, service-provider assessments, password protections and operational security procedures.
However, no internet transmission, electronic storage system or security method can be guaranteed to be completely secure.
12. Your Privacy Rights
Your rights depend on where you reside and which data protection laws apply.
Rights Under KVKK
Under Article 11 of Türkiye’s Personal Data Protection Law No. 6698, you may have the right to:
- Learn whether your personal data is being processed
- Request information about the processing
- Learn the purpose of processing and whether the data is used consistently with that purpose
- Learn the third parties to whom personal data has been transferred domestically or abroad
- Request correction of incomplete or inaccurate information
- Request deletion or destruction where the applicable legal conditions are satisfied
- Request notification of corrections, deletions or destruction to relevant recipients
- Object to a result arising against you through the exclusive analysis of personal data by automated systems
- Request compensation where you suffer damage due to unlawful processing
These rights are set out in the official English translation of Law No. 6698.
Rights Under the GDPR
Where the GDPR applies, you may have the right to:
- Access your personal information
- Correct inaccurate or incomplete information
- Request deletion of your information
- Restrict certain processing
- Object to certain processing
- Receive certain information in a portable format
- Withdraw consent
- Object to direct marketing
- Lodge a complaint with an applicable supervisory authority
- Request information about safeguards used for international transfers
These rights may be subject to lawful limitations and exceptions.
13. Exercising Your Rights
To exercise a privacy right, contact us at:
Email: info@octobubble.com
Email Subject: Privacy Request
Address: [Full business address]
Please include:
- Your full name
- The email address associated with your account or order
- Your order number, where relevant
- A clear description of your request
We may request additional information where reasonably necessary to verify your identity and protect personal information from unauthorised disclosure.
Requests will be reviewed and answered within the period required by applicable law.
14. Children’s Privacy
Our website is intended for adults purchasing products for themselves or for children under their care.
We do not knowingly request or collect personal information directly from children who are not legally permitted to provide such information.
Orders should be placed by a parent, legal guardian or another authorised adult. If we become aware that personal information has been collected directly from a child contrary to applicable law, we will take reasonable steps to delete or otherwise handle the information appropriately.
15. Third-Party Websites
Our website may contain links to websites, applications or services operated by third parties.
We are not responsible for the privacy, security or content practices of third-party services. We recommend reviewing the privacy policy of each third-party website before providing personal information.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our business operations
- Changes to the services and technologies we use
- Changes to legal or regulatory requirements
- Improvements to our privacy practices
The revised policy will be published on this page with an updated “Last Updated” date.
Where required by law, we may provide additional notice or request renewed consent before applying material changes.
17. Contact Us
For questions, complaints or requests regarding this Privacy Policy or the processing of your personal information, please contact:
Octobubble
Legal Business Name: [Company or sole proprietorship name]
Address: [Full business address]
Email: info@octobubble.com
Telephone: [Telephone number]