Privacy and Cookie Policy

1. Controller

KazelB2B is the controller of your personal data. For any question about this policy or your data, please contact us using the details below.

Contact:

KazelB2B

[email protected]

2. Data we process

• Account and company data: name, company name, email, phone, tax number, address, business type, and the email addresses of people you invite to your company team.
• Order data: order contents, delivery address, contact details, invoices and shipping documents, tracking information.
• Payment data: payments are processed by our payment provider Stripe; your card details are never stored on our servers. We only receive the payment status and transaction ID.
• Requests and communication: text, images, PDFs and other files you attach to custom sourcing requests, and your correspondence with us.
• Photo search: the photo you upload is analysed by an AI service to find similar products and is deleted within 1 hour at the latest.
• Technical data: IP address, browser and device information, pages visited, error and security logs, session and preference cookies.
• Analytics data (only with your consent): statistics on how the site is used (Google Analytics).

3. Purposes and legal bases

• Creating your account, approving your company registration, taking orders, managing payment, shipping and documents: performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• Keeping invoices, accounting and customs records: legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
• Site security, fraud prevention, debugging and improving the service: legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• Analytics and marketing cookies: your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)). You can withdraw your consent at any time.

4. Recipients

We do not sell your data. We share only the data needed to provide the service, with the following providers and only for the stated purpose:

• Stripe (payment processing).
• Easyship and shipping/logistics companies (name, address, phone and shipment contents for shipping, customs and delivery).
• Suppliers and manufacturers (only the ordered product and quantity; customer identity and address are not shared).
• Hosting, content delivery and security services (e.g. Cloudflare) and our email delivery service.
• Anthropic (analysis of images uploaded for photo search).
• Google (only analytics/marketing cookies you consent to).
• Competent public authorities (upon request and as required by law).

5. International transfers

Some of our providers are located outside Türkiye and the European Economic Area (e.g. in the USA); because goods ship from China, shipping details are passed to the relevant logistics partners. These transfers are necessary to perform the contract and rely on appropriate safeguards such as standard contractual clauses.

6. Retention

• Account and company data: while your account is open; after closure, for the applicable statutory limitation periods.
• Orders, invoices and accounting records: for the period required by tax and commercial law (usually 10 years).
• Custom sourcing requests and attachments: for a reasonable period after the request is closed, at the latest until your account is closed.
• Photo search images: at most 1 hour.
• Security and activity logs: 365 days.
• Cookies: see the durations in the table below.

7. Your rights

Under the GDPR (Arts. 15-22) and the KVKK (Art. 11) you have the right to access your data, to request rectification, erasure or restriction of processing, to object, to data portability and to withdraw your consent. Send your request to the contact below; we reply within 30 days. You may also lodge a complaint with the Turkish Personal Data Protection Authority or the data protection authority in your country.

8. Security

We protect your data with technical and organisational measures such as encrypted connections (HTTPS), access control, file content validation and activity logging. Uploaded documents are stored in non-public storage.

10. Changes

We may update this policy when necessary. The current version is always published on this page with its last updated date.