Data Protection Notice (KVKK)

Under Turkish Law No. 6698 on the Protection of Personal Data ('KVKK'), MANİFEST AYAKKABI PAZARLAMA VE TİCARET LTD. ŞTİ., trading as TopukTrend (address: Atatürk Mah. Alemdağ Cad. No: 140-144 İç Kapı No: 19 Ümraniye/İstanbul; email: info@manifestpazarlama.com), processes your personal data as described below in its capacity as data controller.

Name, address, phone, email, order and payment information (card details are not stored by us; they are processed by the payment provider).

If you sign in with Google, the name and e-mail address of your Google account; if you have consented to marketing communication, the record of your consent (date, source and the IP address at the time of consent).

Questions you ask on product pages and our answers (question text and date; linked to your account), any discount code you enter, and the contract acceptance time in your order records.

Transaction security data: to prevent abuse (repeated failed logins, automated requests) your IP address is processed only in server memory for a short time and is not recorded.

Product view and add-to-bag counts are kept only as daily totals without cookies, IP addresses or device identifiers; they cannot identify you and are not personal data.

Your data is processed to carry out order fulfillment, arrange delivery, manage customer relations and meet legal obligations, based on the establishment/performance of a contract and legal obligation as legal grounds.

With your explicit consent, your name and e-mail address are processed to inform you about campaigns, discounts and news (KVKK Art. 5/1; commercial electronic message consent under Law No. 6563). You may withdraw your consent at any time; withdrawal does not affect the lawfulness of prior processing.

Your product questions are processed to answer your information request (directly related to concluding a contract, KVKK Art. 5/2-c) and to publish answered questions on the product page to inform other customers (legitimate interest, KVKK Art. 5/2-f). Only the question, the answer and the date are published; your name, e-mail or any other identifier is never shown. Questions containing personal data, contact details or inappropriate content are not published. You may ask us to remove your question at any time.

Transaction security data such as IP addresses are processed for information security and legal obligations (Law No. 5651, KVKK Art. 12); the IP address in the consent record is processed to prove consent (KVKK Art. 5/2-e).

Your personal data is kept for as long as the purpose of processing requires and for the retention periods set by law (e.g. 10 years for commercial books and records under the Turkish Commercial Code No. 6102; 3 years for distance contract records under the Distance Contracts Regulation; 3 years after withdrawal for commercial electronic message consent records). At the end of the period it is deleted, destroyed or anonymised.

When you delete your account, your addresses and account data are deleted; order records subject to legal retention are kept with the link to your account removed. Published product questions remain without any link to your identity and are deleted on request.

Your personal data may be shared with courier companies for delivery, payment providers for transactions, and competent public authorities where legally required.

To send e-mails, your name and e-mail address are transferred to our e-mail service provider Google (Google Ireland Ltd. / Google LLC); this transfer is made under standard contractual clauses pursuant to KVKK Art. 9.

Our website and database run on the infrastructure of our hosting provider Fly.io, Inc. (USA) on servers in the European Union (Frankfurt, Germany), where your order, account and question data is stored. This transfer is also made under standard contractual clauses pursuant to KVKK Art. 9.

You have the right to learn whether your data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, know third parties to whom it is transferred domestically/abroad, request correction of incomplete/inaccurate data, request deletion/destruction, request notification of these operations to third parties, object to a result arising against you, and request compensation for damages arising from unlawful processing.

You can reach us via the email address listed on our Contact page to exercise your rights.