VCDPA Compliance
VCDPA Compliance — Virginia Consumer Data Protection Act / Hali.net
Effective Date: May 2026 — Last Reviewed: May 2026
At Hali.net, we comply with our responsibilities under the Virginia Consumer Data Protection Act ("VCDPA"). This page explains the rights and our data processing practices for users accessing our services from the state of Virginia.
1. Data Controller
Hali.net
Address: Bağlarbaşı Mahallesi, Halı Sokak No: 12, Üsküdar / Istanbul, Türkiye
E-mail: privacy@hali.net
Phone: +90 850 200 00 00
2. Personal Data Categories
- Identifiers: Name, e-mail, phone, IP address.
- Commercial Information: Order history.
- Internet Activity: Browsing data on hali.net.
- Geolocation: Approximate location via IP.
3. Your Rights Under VCDPA
- Right to Access: The right to know which data is being processed.
- Right to Correct: The right to request correction of inaccurate data.
- Right to Delete: The right to request deletion of data.
- Right to Data Portability: The right to obtain your data in a portable format.
- Right to Opt-Out: The right to object to targeted advertising, profiling, and the sale of data.
4. Sale of Personal Data
Hali.net does not sell personal data for monetary consideration. Sharing for marketing purposes is only done with explicit consent.
5. How to Exercise Your Rights
To exercise your VCDPA rights, you can contact privacy@hali.net. Requests will be evaluated within 45 days; an additional 45 days may be used if necessary.
6. Appeal Process
If your request is denied, you have the right to appeal the decision. Your appeal will be evaluated within 60 days. If you are not satisfied with the outcome, you can file a complaint with the Virginia Attorney General's Office.
7. Sensitive Data
Separate explicit consent is obtained for sensitive data categories (race, health, religious beliefs, etc.). Hali.net does not collect sensitive data within the framework of standard e-commerce transactions.
8. Data Protection Impact Assessment
A Data Protection Impact Assessment (DPIA) is conducted before data processing activities involving high risk.