Privacy Policy
Introduction
Medicinist (“we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you visit www.medicinist.com or make a purchase from us. It has been prepared in accordance with the Turkish Personal Data Protection Law (KVKK — Law No. 6698) and the EU General Data Protection Regulation (GDPR).
Data Controller
The data controller responsible for your personal data is Medicinist, operating at the address registered with the relevant Turkish authorities.
What Data We Collect
- Identity & Contact: Name, surname, email address, phone number, billing and shipping address.
- Order & Transaction: Purchase history, payment method type (no full card data is stored), invoice details.
- Usage Data: IP address, browser type, pages visited, time spent on site, referral source.
- Communication: Messages sent via contact forms or email.
How We Use Your Data
- To process and fulfill your orders.
- To send order confirmations, shipping updates, and invoices.
- To respond to your inquiries and provide customer support.
- To improve our website, products, and services.
- To send marketing communications (only with your explicit consent).
- To comply with legal obligations under Turkish and EU law.
Legal Basis for Processing
- Contract performance: Processing necessary to fulfill your order.
- Legal obligation: Compliance with tax, customs, and consumer protection laws.
- Legitimate interest: Fraud prevention, website security, and analytics.
- Consent: Marketing emails and cookies (where applicable).
Data Sharing
We do not sell your personal data. We may share it with trusted third parties solely to operate our business:
- Shipping carriers to deliver your orders.
- Payment processors to handle transactions securely.
- Email & marketing platforms (e.g., Klaviyo) under data processing agreements.
- Legal authorities when required by law.
Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable law (e.g., 10 years for financial records under Turkish tax law).
Your Rights
Under KVKK and GDPR, you have the right to:
- Learn whether your personal data is being processed.
- Request access to your personal data.
- Request correction of inaccurate data.
- Request deletion of your data (“right to be forgotten”).
- Object to processing based on legitimate interest.
- Request data portability.
- Withdraw consent at any time.
To exercise your rights, please contact us via our Contact page.
Cookies
We use cookies to enhance your browsing experience, analyze site traffic, and support marketing efforts. You can manage your cookie preferences through your browser settings or our cookie consent tool.
Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with the effective date noted below.
Last updated: August 2026