Privacy policy
Privacy Policy
This policy explains how we handle personal data of visitors and customers outside Türkiye, including in the European Union (EU), the European Economic Area and the United Kingdom, under the General Data Protection Regulation (GDPR) and the UK GDPR.
1. Who Is Responsible
The data controller is Hali Dot Net LLC, 8 The Green, Ste 14996, Dover, Delaware 19901, United States. Email: info@hali.net. Phone: +90 216 629 10 55. WhatsApp: +90 532 429 59 00.
2. Data We Collect
- Order data: name, delivery and billing address, email address, phone number, items ordered and order history.
- Payment data: payment is processed by our payment providers. We receive confirmation of payment, not your full card number.
- Communication data: messages you send us by email, WhatsApp, phone or forms, including photos of a delivered item.
- Technical data: IP address, device and browser information, pages visited, language and currency settings, collected through cookies and similar technologies.
- Marketing data: your email address and preferences if you subscribe to our newsletter.
3. Why We Use Your Data and Our Legal Basis
- To take, prepare, deliver and invoice your order, and to handle returns and warranty claims: performance of the contract (GDPR Art. 6(1)(b)).
- To keep accounting and tax records: legal obligation (Art. 6(1)(c)).
- To answer questions and complaints, keep the website secure and prevent fraud: legitimate interests (Art. 6(1)(f)).
- To send marketing email, and for analytics and personalised advertising cookies: your consent (Art. 6(1)(a)), which you can withdraw at any time.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who We Share Data With
We share data only as needed with: our e-commerce platform (Shopify); payment providers (such as iyzico); carriers (DHL, UPS, FedEx); email and marketing service providers (such as Klaviyo); analytics and advertising providers (such as Google and Meta) and Microsoft Clarity for usage analysis; accountants, legal advisers and public authorities where the law requires. These providers act on our instructions or under their own privacy terms. We do not sell your personal data.
5. Transfers Outside Your Country
We are based in the United States and run our warehouse and customer service from Türkiye, so your data is transferred to us (to the United States and Türkiye) outside the EU/EEA and the UK, and some of our providers are located in other countries. Where required, we protect these transfers with appropriate safeguards, in particular the Standard Contractual Clauses approved by the European Commission (and the UK Addendum or IDTA for UK data). You can request a copy of these safeguards at info@hali.net.
6. How Long We Keep Data
We keep order and invoice data for as long as accounting and tax law require (generally up to 10 years). Other data is kept only as long as needed for the purpose: for example, support messages for up to 3 years after the last contact and marketing data until you unsubscribe or withdraw consent. Cookie lifetimes are shown in the cookie settings.
7. Cookies
We use essential cookies (cart, checkout, security, language and currency), and, only with your consent where the law requires it, analytics and marketing cookies. You can change your choices at any time using the cookie banner or your browser settings. Blocking essential cookies may stop the cart and checkout from working.
8. Your Rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time, without affecting earlier processing. You may object at any time to direct marketing. To use a right, write to info@hali.net. We reply within one month (GDPR Art. 12). We may ask you to confirm your identity.
9. Complaints
You have the right to complain to a data protection authority, in particular in the EU member state where you live or work or where you think a breach took place. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to resolve your concern first.
10. Security
We use appropriate technical and organisational measures, such as encrypted connections (HTTPS), restricted access and trusted providers, to protect your data. If a breach is likely to put your rights at risk, we will notify you and the authorities as the law requires.
11. Children
Our website is not intended for children under 16, and we do not knowingly collect their data.
12. Changes
We may update this policy. The date below shows the latest version.
Last updated: 25 October 2026