Privacy & Security Policy

Elif Akman İnan (“we”, the data controller) places great importance on protecting the personal data collected through www.justhang.com.tr. This notice explains how we process the personal data of our visitors and customers. It is written to meet the requirements of the GDPR (European Union), applicable US state privacy laws, and Law No. 6698 (KVKK, Türkiye).

Data controller: Elif Akman İnan (justhang)

Address: Güzelyurt Mah. Çınar Sk. Hisar Evleri Koop. B Blok No: 4, Apt. 9, Merkez/Nevşehir, Türkiye

Email: [email protected]

Phone: +90 545 585 49 96

VERBİS registration: As the data controller, we are exempt from registration with the Data Controllers' Registry (VERBİS) under Article 16 of Law No. 6698.

    • Identity data: first and last name.

    • Contact data: email, phone, delivery address, billing address.

    • Transaction data: order history, cart data, payment details. (Card details are not stored on our servers; they are processed in a PCI DSS-compliant environment by PayTR.)

    • Marketing/usage data: cookie data, device/browser information, IP address, and on-site behaviour.

    • Legal/record data: invoice information, return and complaint records.

    • to receive, process, and deliver orders;

    • to issue invoices and carry out accounting;

    • to meet legal obligations (tax and consumer law);

    • to provide customer service and support;

    • to handle returns, exchanges, and complaints;

    • with your consent: marketing, campaigns, and commercial electronic messages;

    • to analyse and improve website performance.

We process your data on one or more of the following legal bases: the performance of a contract with you; compliance with a legal obligation; our legitimate interests; and your consent (for example, for marketing).

We do not sell your personal information. We share data only as necessary, with: courier/logistics companies (for delivery); PayTR (for payment); our accountant/financial adviser; competent public authorities where legally required; and, with your consent, digital-marketing service providers (such as Meta and Google).

Where your data is transferred outside your country (for example, to marketing providers based abroad), we ensure appropriate safeguards are in place — such as standard contractual clauses, an adequacy decision, or your explicit consent — as required by applicable law.

We keep your data only as long as necessary for the purposes above and as required by law: invoice/accounting records for 5 years (Tax Procedure Law); commercial books for 10 years (Turkish Commercial Code); e-commerce records for 10 years (Law No. 6563); and marketing data until you withdraw your consent.

Subject to applicable law, you have the right to: learn whether your data is processed and request access to it; request rectification of inaccurate data; request erasure (the “right to be forgotten”); restrict or object to processing, including for direct marketing; data portability; withdraw consent at any time; not be subject to solely automated decisions; and lodge a complaint with a supervisory authority.

To exercise your rights, contact us in writing at [email protected]. We respond within 30 days (or sooner where required by law). EU residents may also complain to their local Data Protection Authority; in Türkiye, to the Personal Data Protection Authority (KVKK).

Cookies are small text files placed on your browser when you visit our site. We use:

    • Strictly necessary cookies: required for core functions (cart, session). No consent needed.

    • Performance cookies: anonymous statistics (e.g., Google Analytics). Subject to your consent.

    • Functionality cookies: remembering language/region preferences.

    • Targeting/advertising cookies: interest-based ads (e.g., Meta Pixel). Subject to your consent.

You can refuse or delete cookies through your browser settings, and set your preferences via the cookie banner shown on your first visit.

Legal basis — EU: ePrivacy Directive 2002/58/EC and GDPR (consent). Türkiye: Law No. 6698 and Board guidance on cookies. US: cookie/tracking disclosure under applicable state law.

Our payment infrastructure is secured by PayTR:

    • all data transmission is protected with 256-bit SSL encryption;

    • card data is processed in a secure, PCI DSS-compliant environment;

    • 3D Secure adds bank verification for each transaction;

    • firewall protection is in place;

    • card details are never stored on our servers;

    • advanced filters and monitoring provide protection against fraud.

Our site may contain links to third-party websites. Elif Akman İnan is not responsible for the content, privacy policies, or practices of those sites.

If personal data is damaged or accessed by unauthorized third parties as a result of an attack on our systems, we will notify the affected individuals and the competent authority without undue delay, as required by law.

We reserve the right to amend this Privacy & Security Policy. Changes take effect on the date they are published on the site.

Service provider: Elif Akman İnan

Address: Güzelyurt Mah. Çınar Sk. Hisar Evleri Koop. B Blok No: 4, Apt. 9, Merkez/Nevşehir, Türkiye

Phone: +90 545 585 49 96

Email: [email protected]

Registered e-mail (KEP): [email protected]

Tax office / no.: Nevşehir / 0310690485

ETBİS registration: Registered