Privacy policy

This English translation is provided for convenience. The Turkish version is legally binding.

PRIVACY POLICY AND KVKK INFORMATION NOTICE

Last updated: 13 October 2026

This notice has been prepared to inform persons who visit the soilandoil.com website (the "Site"), create a customer account, make a purchase or contact us about the purposes and legal grounds for which their personal data are processed, to whom their personal data may be transferred, and their rights concerning their personal data.

Your personal data are processed within the framework of Law No. 6698 on the Protection of Personal Data ("KVKK") and the related legislation.

1. Data Controller

The data controller under the KVKK is:

Trade Name: Four Interactive Bilişim Limited Şirketi

Brand: Soil & Oil

Address: Altındağ Mah. 100. Yıl Blv. No: 12 İç Kapı No: 501, Muratpaşa / Antalya, Türkiye

Tax Office: Antalya Kurumlar

Tax Identification Number: 3881402779

Email: info@soilandoil.com

Phone: +90 541 575 77 77

Website: https://soilandoil.com

2. Personal Data Processed

Depending on your use of the services offered, the following categories of personal data may be processed.

Identity and Contact Information: First name, surname, phone number, email address, delivery and billing addresses.

Customer Account Information: If you create an account, your account ID, login and authentication information, account security and customer preferences.

Order and Transaction Information: Products purchased, order date, amount, payment status, delivery records, order history, cancellation and return requests.

Customer Communication Information: Email correspondence, support requests and the messages you share with us.

Marketing Preferences: Commercial message permissions, subscription status and interaction information relating to the marketing activities you have permitted.

Transaction Security and Technical Data: IP address, device and browser information, session records, security logs and usage data that may be obtained through cookies.

Payments are made through payment services integrated with our Shopify store. Card information is processed within the security procedures of the relevant payment service provider. Soil & Oil does not store full card numbers or security codes in its own customer database.

3. Methods of Collecting Personal Data

Your personal data may be collected through the following methods:

Order and payment transactions
Customer account and contact forms
Email correspondence and customer support processes
The Shopify store infrastructure and integrated services
Cookies and similar technologies
Marketing and analytics applications you have permitted

Your data may be obtained by automated or partly automated means or, in cases provided for in the relevant legislation, by non-automated means.

4. Purposes of Processing and Legal Grounds

Your personal data may be processed for the following purposes on the basis of the processing conditions set out in Article 5 of the KVKK.

Order and Sales Transactions

Receiving orders, carrying out payment processes, delivering products, managing customer accounts and providing after-sales support.

Legal ground: The processing is necessary, provided that it is directly related to the establishment or performance of a contract.

Legal Obligations

Issuing invoices, keeping accounting records, assessing consumer applications and providing information to the competent authorities as required by the legislation.

Legal ground: It is expressly provided for by law, or it is mandatory for the data controller to fulfil its legal obligation.

Security and Operations

Ensuring the security of the Site and of payments, preventing fraud attempts, resolving technical problems and maintaining service quality.

Legal ground: Depending on the processing activity, a legal obligation, or the legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Marketing and Analytics

If you give permission, sending campaign and product announcements, managing newsletter subscriptions, analysing user behaviour and personalised advertising activities.

Legal ground: Explicit consent where required for the relevant activity, and valid message permissions obtained under the legislation on commercial electronic messages.

Placing an order or opening a customer account does not, by itself, mean that you agree to receive marketing communications.

5. Transfer of Personal Data

Your personal data may be transferred, to the extent necessary, to the following groups of recipients for the purposes of providing the service and fulfilling legal obligations:

Shopify: Providing e-commerce infrastructure, customer account and order management services.

Payment Service Providers: Carrying out, verifying and securing payment transactions.

Shipping and Logistics Companies: Carrying out deliveries through Hepsijet, DHL or other carriers providing services in connection with the order.

Shopify Email: Sending email marketing messages to customers who have given valid message permission and managing subscription preferences.

Analytics and Advertising Providers: Within the scope of the Google and Meta services used, analytics, advertising performance measurement and marketing activities, where the applicable legal conditions and the necessary permissions are in place.

Competent Public Authorities: Fulfilling obligations provided for in the legislation.

The sharing of personal data with third parties is limited to the stated purposes and legal conditions.

6. Transfer of Personal Data Abroad

Because our e-commerce infrastructure and some integrated services are provided by providers established abroad, personal data may be transferred abroad.

These transfers are carried out where a valid transfer mechanism exists under Article 9 of the KVKK and the relevant legal conditions are met.

The categories of data that may be transferred abroad, the purposes of transfer and the safeguards to be applied are determined according to the nature of the relevant services.

7. Cookies and Similar Technologies

Cookies and similar technologies may be used on our website.

Strictly Necessary Cookies: Used to provide basic functions such as site security, the cart, session management and payment.

Functional Cookies: May be used to remember preferences and improve the user experience.

Analytics Cookies: May be used to understand site usage and performance.

Advertising and Marketing Cookies: May be used to measure advertising performance and for personalised advertising activities.

Non-essential cookies are used on the basis of the visitor's prior explicit consent, where no other valid legal ground for processing exists.

Visitors can manage and withdraw their permissions through the cookie preferences provided.

Detailed information on the types, providers, purposes and retention periods of cookies is provided through the cookie information mechanism.

8. Commercial Electronic Messages

Soil & Oil may send campaign, new product and brand announcements via Shopify Email.

Commercial electronic messages are sent to persons who have given valid message consent, subject to the exceptions permitted in the relevant legislation.

Even if you have agreed to receive messages, you may withdraw your permissions at any time by using the unsubscribe link in our emails or by contacting us at info@soilandoil.com.

Withdrawing commercial message permissions does not prevent us from sending order confirmations, invoices, shipment tracking or mandatory customer service notifications.

9. Retention of Personal Data

Your personal data are kept only for as long as necessary for the purpose for which they are processed, or within the statutory retention periods provided for in the relevant legislation.

Invoices, accounting and commercial transaction records are kept in accordance with the relevant tax, commercial and other legislative provisions.

Customer support records, account information and records relating to marketing permissions are kept taking into account the purpose of processing, the relevant legal obligations and data retention policies.

When the retention period ends and there is no other legal ground requiring the processing of the data, personal data are erased, destroyed or anonymised.

10. Data Security

Soil & Oil takes as a principle the adoption of appropriate technical and administrative measures to prevent the unlawful processing of personal data and unauthorised access.

The security features of the service providers used in e-commerce and payment processes are utilised.

As no method of data transfer over the internet carries an absolute guarantee of security, security measures are assessed in light of existing risks and technological developments.

11. Rights of Data Subjects

Under Article 11 of the KVKK, with regard to your personal data, you have the following rights:

To learn whether they are processed and, if so, request information about this,
To learn the purpose of processing and whether they are used in accordance with that purpose,
To know the third parties to whom they are transferred,
To request the correction of incomplete or inaccurately processed data,
To request their erasure or destruction where the legal conditions are met,
To request that correction or erasure operations be notified to the relevant third parties,
To object to a result against you arising from analysis carried out exclusively through automated systems,
To claim compensation for damage if you suffer damage due to unlawful processing

These rights are yours under the law.

12. How to Apply

You may submit your requests concerning your personal data to us by the methods set out in the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller.

Address for Written Applications:

Four Interactive Bilişim Limited Şirketi

Altındağ Mah. 100. Yıl Blv. No: 12 İç Kapı No: 501, Muratpaşa / Antalya, Türkiye

Electronic Communication:

info@soilandoil.com

For formal KVKK applications made by email, the data subject must use the email address previously notified to the data controller and registered in the system, or choose one of the other electronic application methods accepted in the legislation.

Applications are concluded as soon as possible depending on their nature, and within 30 days at the latest.

13. Policy Updates

This notice may be updated due to changes in legislation, developments in business processes or changes in the services used.

The current version is made available on soilandoil.com.

14. Contact

For questions about the protection of personal data, our privacy practices or the exercise of your rights:

Soil & Oil