Privacy Policy
Effective from October 9, 2026 · Version 1
This English text is provided for convenience; the Turkish version is binding.
Privacy Policy
Effective date: 09/10/2026
This English translation is provided for convenience. If there is any difference between the two versions, the Turkish version prevails.
At ByDipa — Didem Parlakyiğit Art & Design Studio (“ByDipa”, “we”), we care about your privacy on https://bydipa.com, where we present our handmade works. This policy explains in plain language what information we collect and why, how we protect it and what choices you have.
The legal details (the legal ground for each activity, transfers, retention periods and how to apply) are in our Personal Data Protection Notice, and cookie details are in our Cookie Policy.
Who we are
The website is run by designer Didem Parlakyiğit Görücü in her own name under the ByDipa brand; she is also the data controller responsible for your personal data.
Address: Güvenevler Mah. Şair Nedim Cad. No: 54 A, Merkez, Afyonkarahisar
Email: didemnisaparlakyigit@gmail.com
Phone: +90 553 060 58 13
KEP (registered electronic mail), if any:
What we collect
We ask only for what we need to serve you:
When you order: Full name, email, phone, delivery and billing address; company name, tax office and tax number for corporate invoices.
When you report a payment: Name of the account holder who sent it, amount and date; the bank receipt if you choose to upload it; your IBAN if a refund is needed.
When you create an account: Your email address and password. We store your password in an irreversibly hashed form; no one, including us, can see it.
When you send a form: What you write in the contact, commission or product inquiry forms and any images you share.
When you use the website: Strictly necessary cookies and security logs (IP address, browser type, time of visit). Analytics and marketing cookies only if you allow them.
We do not ask for or store card details on our website. The only payment method on the website is bank transfer (havale/EFT). If you choose to pay by card through our brand’s store on Shopier, the payment takes place on the Shopier platform under Shopier’s own terms and privacy policy.
What we use it for
To take your order, prepare or make your piece and deliver it to you,
To match your payment to your order, issue an invoice and make refunds when needed,
To email you about order, payment and shipping status,
To answer your questions and prepare commission quotes,
To keep your account and the website secure and prevent abuse,
To meet our legal obligations,
Only if you allow it: to measure how the website is used and see how our ads perform.
We do not sell your information or rent it to others for advertising. We do not leave decisions to automated systems alone; payments and orders are checked by a person.
Who we share it with
We share your information only as far as the task requires, with: cargo companies, our accountant and e-invoice provider, the hosting provider whose servers run the website, Resend, Inc. (USA) which sends our transactional emails, banks for refunds, Google and Meta if you allow it, and competent authorities when the law requires. Some of our providers are located abroad, so we make these transfers with the safeguards in Article 9 of the Personal Data Protection Law. Details are in our Personal Data Protection Notice.
How we protect it
All traffic between the website and your browser travels over an encrypted connection (HTTPS/TLS).
Passwords are stored hashed with a strong, irreversible algorithm.
Bank receipts are kept in non-public storage and can be viewed only by authorised people through time-limited access links.
The page of a guest order can be reached only through the private, unguessable link emailed to you.
Only authorised people can access the admin panel, and actions taken there are logged.
Servers are kept up to date, backed up regularly and monitored for unusual access attempts.
Forms use measures that block automated submissions (spam).
No system is completely free of risk. If a security breach affects your data, we will inform you and the Personal Data Protection Board as soon as possible, as required by Article 12 of the Law.
You can help protect your account by not reusing your password on other websites and not sharing it with anyone. We will never ask for your password by email or phone.
Cookies
Strictly necessary cookies always run to keep your cart and session. Analytics (Google Analytics 4) and marketing (Meta Pixel) cookies load only after you allow them. You can change your choice at any time through the “Cookie preferences” link at the bottom of the page. See our Cookie Policy for details.
Emails
Order, payment, shipping and password reset emails are part of the service and are sent with every order. We do not currently send promotional emails or newsletters; if we start, we will send them only with your separate approval, in line with the Message Management System (İYS) rules, and every message will include an easy way to opt out.
Children’s privacy
Our website is not directed at people under 18. You must be at least 18 to create an account or place an order. If we learn that someone under 18 has sent us information, we will delete it unless we are legally required to keep it. Parents who notice this can write to us at didemnisaparlakyigit@gmail.com.
How long we keep it
We keep information only as long as needed. For example, order and invoice records are kept for 10 years under tax law and statutory limitation periods, form messages for 2 years and security logs for up to 2 years. When you close your account, account information we are not legally required to keep is deleted within 6 months at the latest. All periods are listed in our Personal Data Protection Notice.
Your choices and rights
You can update your account details and addresses in your account.
You can ask us to close your account from your account page or by writing to didemnisaparlakyigit@gmail.com.
You can change your cookie choices through the “Cookie preferences” link.
If you have approved commercial messages, you can withdraw that approval at any time.
You can exercise your rights under Article 11 of the Personal Data Protection Law using the methods described in our Personal Data Protection Notice.
Other websites
Our website may link to other websites such as Shopier and Instagram. They have their own privacy practices, and this policy does not cover them.
Changes
We update this policy when our services or the law change. The current version is on this page with its effective date. If we make an important change, we will also email account holders.
Contact us
For privacy questions, write to didemnisaparlakyigit@gmail.com or call +90 553 060 58 13.