Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains what data the Navizon Elektronik Ticaret Ltd. Şti. ("Yedepa", "we")-operated yedepa.com website and the software Yedepa uses in its own business processes (e.g. advertising and analytics reporting applications) collect, how this data is used, with whom it is shared and your rights. Detailed information on the protection of personal data is also provided in the KVKK Privacy Notice, and cookies are covered in the Cookie Policy.

1. Data controller and contact

Navizon Elektronik Ticaret Ltd. Şti. — Cennet Mah. Yavuz Selim Cad. No:68, Küçükçekmece / İstanbul · Phone: 0850 305 36 95 · E-mail: yedepa@yedepa.com

2. Data we collect on the website

Account and order data: name and surname, company name, e-mail, phone, delivery and billing address, tax information, order contents and payment status (card details are not stored by us; payment is taken through a licensed payment institution). For international deliveries, the recipient's identification number (e.g. Azerbaijani FIN code) and postal code for the customs declaration.
Communication data: Messages and attachments you send us via WhatsApp, e-mail and the contact form.
Technical data: IP address, browser and device information, pages visited, referring address; measurement data collected with cookies and similar technologies (Google Analytics, Google Ads and Meta pixel conversion measurement).

3. Purposes for which we use data

Receiving, preparing, dispatching and invoicing orders, and legal retention obligations (customs declarations, including micro-export/ETGB).
Customer support, order and shipping notifications (SMS, e-mail, WhatsApp).
Site security, debugging and performance measurement.
Measuring and improving our advertising campaigns; marketing communications if you have given explicit consent.

4. Our internal reporting applications working with Google and Meta APIs

To manage its own advertising and analytics accounts, Yedepa operates internal-use software working with the Google Ads API, Google Analytics Data API and Meta Marketing API (the "Yedepa" application; it appears under the same name on the Google OAuth consent screen).

Whose data: These applications access only Yedepa's own advertising accounts and website analytics property, with permission granted by a Yedepa authorized person through their own Google account. The Google account data of our visitors or third parties is not accessed; the application is not public.
Data accessed: campaign, ad group and keyword performance metrics (impressions, clicks, cost, conversions), campaign settings and Google Analytics aggregate session/conversion reports. The Google account's e-mail address is used only for authorization (OAuth).
Purpose of use: advertising budget and bidding decisions, weekly/monthly performance reports, campaign creation and editing — entirely for Yedepa's own commercial activity.
Storage and security: API access keys and retrieved reports are stored only on Yedepa's own server, in files with access restricted to authorized personnel; an encrypted connection (HTTPS) is used. Reports are kept for a maximum of 24 months.
Sharing: This data is not sold, rented, or transferred to advertising networks or third parties; it is shared with competent authorities only where legally required.
Google API Services User Data Policy: The use and transfer of information received from Google APIs complies with the Google API Services User Data Policy and the Limited Use requirements.
Revoking permission: The authorized user can remove the application's access at any time from the Google account security settings (myaccount.google.com/permissions) or by writing to us; in this case, the stored access keys are deleted.

5. With whom we share data

Shipping companies (Yurtiçi Kargo, Aras Kargo, Aras Global and international carriers) — name, address, phone, ID/FIN and product information for delivery and customs declarations.
Payment institution (Paynkolay) and banks — for payment processing.
E-invoicing/pre-accounting service (Paraşüt) — for legal invoicing.
Communication infrastructure providers (SendPulse — WhatsApp/SMS/e-mail notifications).
Analytics and advertising platforms (Google, Meta) — for measurement only, depending on your cookie preferences.
Competent public authorities where legally required.

6. Retention periods

Order and invoice data are kept for 10 years under tax legislation; account data until the account is deleted; communication records for 3 years; analytics/advertising reports for a maximum of 24 months; server access logs for 2 years.

7. Your rights

You can exercise your rights to access, correct and delete your data, object to processing and data portability by writing to yedepa@yedepa.com. Applications are answered within 30 days at the latest. For details, see the KVKK Privacy Notice.