Privacy Policy

1. Data Controller

This privacy policy informs you in accordance with the Turkish Personal Data Protection Law (KVKK, Law No. 6698) about the processing of your personal data. The company named above is the data controller and determines the purposes and means of processing.

2. Categories of Personal Data Processed

Identity Data

• First and last name

Contact Data

• Email address
• Phone number
• Delivery address

Order Data

• Order details (dishes, quantity, price, special requests)
• Order history

Financial Data

• Selected payment method
• Transaction IDs (complete credit card numbers are not stored)

Customer Account (optional)

• Username, encrypted password
• Saved addresses, favourites

Transaction Security Data

• IP address, browser type, operating system
• Access time, log records

3. Purposes of Data Processing (KVKK Article 5)

Your personal data is processed for the following purposes:

• Order processing and delivery
• Payment processing
• Customer account management (upon registration)
• Customer support and complaint management
• Information security processes
• Compliance with legal obligations (tax law, accounting)
• Fraud prevention and system security

4. Data Collection Methods and Legal Grounds (KVKK Article 5/2)

Your personal data is collected electronically via our website and mobile application, based on the following legal grounds:

• KVKK Art. 5(2)(c): Performance of contract – order processing, delivery, payment
• KVKK Art. 5(1): Explicit consent – customer account creation, analytics cookies
• KVKK Art. 5(2)(c): Legal obligation of the data controller – tax law, accounting records
• KVKK Art. 5(2)(f): Legitimate interest of the data controller – system security, fraud prevention

5. Disclosure Obligation (KVKK Article 10)

In accordance with Article 10 of the KVKK, we hereby inform you about the data controller, the collection method, the legal basis, the purpose of processing, the recipients and your rights under KVKK Article 11. This privacy policy has been prepared within the scope of this obligation.

6. Transfer of Personal Data (KVKK Articles 8-9)

Your personal data may be transferred to the following parties, limited to the purposes of processing:

• Restaurant: Order data for preparation and delivery (name, address, phone, order details)
• Payment service providers: Stripe, PayPal, Iyzico (as data processors under KVKK Art. 12, for payment processing)
• Delivery/courier companies: Address and contact details for delivery
• IT service providers: Hosting and technical maintenance
• Public authorities: When legally required (tax authorities, courts, etc.)

In the event of cross-border transfer, the provisions of KVKK Article 9 apply. For payment service providers with servers abroad, an adequate level of protection is ensured.

7. Data Retention Period

• Order data: 10 years (Turkish Commercial Code/TTK Article 82, Tax Procedure Law/VUK Article 253)
• Invoices and receipts: 10 years (VUK Article 253)
• Customer account: As long as active; automatic deletion after 36 months of inactivity
• Technical logs: 12 months
• Contact enquiries: 12 months after resolution

Upon expiry of the retention period, personal data is deleted, destroyed or anonymised in accordance with KVKK Article 7 and the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.

8. Rights of the Data Subject (KVKK Article 11)

Under KVKK Article 11, you have the following rights:

• a) Learn whether your personal data is processed
• b) Request information about the processing if your data has been processed
• c) Learn the purpose of processing and whether data is used accordingly
• d) Know the third parties to whom your data is transferred domestically or abroad
• e) Request correction of incomplete or incorrectly processed data
• f) Request deletion or destruction of data under KVKK Article 7
• g) Request notification of correction/deletion to third parties
• h) Object to outcomes arising from automated analysis of data
• i) Claim compensation for damages resulting from unlawful processing

To exercise your rights, please submit your request in writing to: info@market-demo.lezjet.com

9. Cookie Policy

For detailed information about cookies used on our website, please refer to our cookie policy at /cookies.

Essential Cookies

Technically essential cookies are used for session management, language preference and login functionality.

Analytics Cookies

Analytics cookies are only used with your explicit consent. You may withdraw your consent at any time.

10. Data Security

In order to ensure the security of your personal data, the necessary technical and administrative measures are taken in accordance with KVKK Article 12:

• SSL/TLS encryption for secure data transmission
• Encrypted password storage
• Access authorisation and controls
• Regular security updates

11. Application Procedure and Right to Complain (KVKK Articles 13-14)

Under KVKK Article 13, you may submit your requests in writing or by other methods determined by the Personal Data Protection Board.

Your request will be processed free of charge within 30 days at the latest. If the process incurs additional costs, a fee determined by the Board may apply.

If your request is rejected, the response is insufficient or no response is received within the deadline, you may file a complaint with the Personal Data Protection Board within 30 days of receiving the response or 60 days from the date of application.

12. Contact

For all questions and requests regarding your personal data, please contact us:

13. Changes

This privacy policy may be updated due to changes in legislation or data processing procedures. The current version will always be published on our website.

Last updated: February 2026