Privacy policy

This policy briefly summarises how your personal data is processed on this site. The detailed information required by the Law — which data, for which purpose, on which legal basis and for how long — is set out in the KVKK information notice; everything described here is set out there in detail.

What information we collect

We collect only the information that the service requires. You do not need to open an account to browse the site, and you can also continue as a guest when placing an order. The main information collected is: your contact and delivery details, records relating to your order, records relating to account security, and measurements of how the site is used.

We never see your card details. Payment is completed on the payment institution’s own page; only the result of the payment, together with the card programme and the last four digits of the card, reaches us.

Cookies

Necessary cookies are required for the site to work. Optional cookies are used only if you give your consent, and you can withdraw your consent at any time. The full list of cookies used on the site — with their name, purpose and lifetime — is on the cookie policy page.

Who we share your information with

We do not sell your data and we do not transfer it to third parties for marketing purposes. Sharing is limited to what the service requires: the providers whose payment, invoicing, shipping, email and hosting services we use. Some of these providers are established outside Türkiye; the details are in the information notice.

Security of information

• Passwords are not stored as plain text; they are kept as an irreversible hash.
• The card number is not stored in full anywhere.
• Fields such as passwords, card numbers and identity numbers are masked before they are written to system logs, error reports and transaction logs.
• Site traffic is carried over an encrypted connection.

How long your data is kept

Each type of data is kept only for as long as the purpose for which it is held continues; a record whose period has expired is automatically deleted or anonymised. How long each record is kept is set out as a table in the retention periods section of the information notice.

Your rights

All of your legal rights, including the right to access your data and to request its correction and deletion, and how to exercise these rights are set out in the information notice. If you have an account, you can submit your deletion request from your account settings.

Age

The site is not intended for persons under 18. Every order requires a declaration that you are aged 18 or over, and no order is created without this declaration.

Changes to this policy

When the policy changes, this page is updated and the effective date at the top of the page is revised. Changes apply from the date they are published; the text in force when an earlier order was completed applies to that order.

Contact

For questions about privacy and requests concerning your personal data, you can write to us at info@beherlabs.com or through the contact page. Your application is concluded within thirty days at the latest; the details are in the application section of the information notice.