Privacy Policy
Last updated 5 September 2026
This policy explains what personal data Mikkyō Studio collects, why, who it is shared with, and how long it is kept. It covers customers in Türkiye under the Turkish Personal Data Protection Law No. 6698 (KVKK) and customers in the European Union and United Kingdom under the GDPR and UK GDPR.
1. WHO WE ARE
Mikkyō Studio, operated by Gizem Tahmiscioğlu, is the data controller for the personal data described here.
Contact: info@mikkyostudio.com
[Registered address and tax details to be completed.]2. WHAT WE COLLECT
When you order. Name, email address, telephone number, billing address, delivery address, order contents, size or length requested, notes you add at checkout, order value and currency, and the date and status of your order.
When you pay. We do not see or store your card number. Payment is processed by our payment provider, which returns to us only a confirmation of success or failure and a transaction reference.
When you report a problem. Order number, email address, the type of request, your description and any photographs you upload.
When you subscribe to our newsletter. First name and email address.
When you write to us. Your message and contact details.
Automatically, when you visit. IP address, browser and device type, pages viewed, referring page, and cookie identifiers. See section 7.
We do not knowingly collect data from children, and we do not collect special categories of data.
3. WHY WE USE IT, AND ON WHAT BASIS
To make and deliver your order, and to deal with problems, resizing and repairs. Basis: performance of our contract with you.
To keep accounting, tax and commercial records. Basis: legal obligation.
To send you our newsletter. Basis: your consent. You can withdraw it at any time using the unsubscribe link in any email, or by writing to us.
To measure and advertise, including through the Meta pixel. Basis: your consent where consent is required in your country.
To keep the website secure and working, and to prevent fraud. Basis: our legitimate interests.
4. WHO WE SHARE IT WITH
We do not sell your data. We share it only with the service providers we need in order to run the studio:
Hosting. Our web host stores the website and its database, including your order records.
Payments. iyzico processes card payments and holds the card data we never see.
Delivery. Yurtiçi Kargo within Türkiye, and DHL Express internationally, receive the name, address and telephone number needed to deliver your parcel, and the customs information required for international shipments.
Email. Our outgoing mail provider transmits order confirmations, dispatch notices and replies.
Advertising and measurement. Meta Platforms Ireland Limited receives website activity data through the Meta pixel where you have consented.
We may also disclose data where the law requires it, or to establish or defend a legal claim.
5. INTERNATIONAL TRANSFERS
Our studio and our website infrastructure are based in Türkiye. If you order from the European Union or the United Kingdom, your data is transferred to Türkiye, which is not the subject of a European Commission adequacy decision.
Where such a transfer takes place, it is necessary for the performance of the contract you have entered into with us, and we apply appropriate safeguards with our providers. You may ask us for details.
6. HOW LONG WE KEEP IT
Order and invoice records: ten years from the end of the financial year in which the order was placed, as required by Turkish commercial and tax legislation.
Requests submitted through our request form, including photographs: three years from the date the request is closed.
Newsletter subscription: until you unsubscribe, and a suppression record afterwards so that we do not contact you again.
General correspondence: three years.
Website and security logs: normally no longer than twelve months.
When a period ends, data is deleted or irreversibly anonymised.
7. COOKIES AND TRACKING
The website uses cookies that are necessary for it to work — keeping your basket, your chosen currency, your session at checkout, and caching.
It also uses the Meta pixel, which sets cookies and sends Meta information about your visit and, where relevant, purchases. This is used for advertising and measurement.
You can block or delete cookies in your browser settings; necessary cookies cannot be turned off without the website ceasing to work properly. You can also manage advertising preferences in your Meta account settings.
8. YOUR RIGHTS
You have the right to ask us whether we hold data about you, to obtain a copy, to have inaccurate data corrected, to have data deleted, to restrict or object to certain processing, to receive your data in a portable form, and to withdraw consent at any time.
Write to info@mikkyostudio.com. We reply within 30 days.
If you are not satisfied, you may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu), or, if you are in the European Union or United Kingdom, to the supervisory authority of your country.
9. SECURITY
The website is served over an encrypted connection. Access to order data is limited to the studio. No system is completely secure, but we take reasonable technical and organisational measures to protect your data.
10. CHANGES
We may update this policy. The date at the top shows when it was last changed.