Privacy and KVKK information — draft

Updated 14 October 2026

Legal draft: business details remain incomplete. The business must supply the data controller’s formal legal name and confirm the legal bases and international data transfer arrangements. Contact: azracocukgiyimcom@outlook.com. This page describes the current service; it does not certify legal compliance.

The website and contact

This is a product showcase for AZRA ÇOCUK GİYİM, Kale Mahallesi, Yabancılar Çarşısı I Blok 19–21, Samsun, Türkiye. Telephone / WhatsApp: +90 505 406 57 45. The formal data controller’s legal name has not been provided. Send privacy requests to azracocukgiyimcom@outlook.com.

Data and purposes

You do not need an account or personal details to browse. With optional analytics consent, the application records event type, page path, relevant product reference and event time to measure site use and product interest. Search text, IP addresses and personal identifiers are not stored in the analytics table. Analytics events are retained for up to 90 days. A visit is a browser-tab session, not a unique person or a sale.

Questions and recent chat history are sent to Cloudflare Workers AI when the assistant is available. Site chat messages and AI/team replies are stored in Cloudflare D1 so the AZRA team can take over and the AI can resume the same conversation. Chat access lasts seven days using an essential secure HttpOnly support cookie; expired records are removed during subsequent service cleanup, not guaranteed at the exact expiry instant. Requesting live support shares the conversation with the AZRA team. If an approved WhatsApp notification connection is enabled, it sends a generic support request notification to the authorized operator, not the customer message text. Do not include passwords, verification codes, identity documents or payment details. Ordinary WhatsApp links still open a draft that you choose to send. WhatsApp/Meta terms and privacy practices apply to their service.

Optional accounts and management

Cloudflare D1 stores account email, salted password hashes strengthened with a server secret, optional display name, favourite product IDs and recovery-code hashes. Plaintext passwords are not stored. A recovery code is shown once. Email delivery and email verification are not available yet. Accounts do not import Trendyol order history. Account data is kept while needed for the account service; deletion requests can be sent to the contact email.

Customer sessions use the mandatory secure HttpOnly __Host-azra_account cookie for up to seven days. Management usernames, roles and password hashes are stored separately; mandatory __Host-azra_panel sessions last up to eight hours. Signing out revokes the relevant session. The initial management setup requires verification of the existing owner identity. Editors submit drafts for administrator approval; draft data, author, status and review time are stored. Customer accounts have no management privileges.

To limit abuse, secret-keyed temporary hashes of network addresses are retained for up to an hour. Invisible spam-trap fields reject automated submissions before account or AI actions. These fields do not request information from normal visitors.

Optional delivery addresses are stored in Cloudflare D1 for your account. They are accessible only after signing in to that account. Saving an address does not create an order or enable payment. Address data is kept while needed for this account service; you can edit or remove saved addresses in My account.

Hosting, storage and rights

Cloudflare hosts this website. D1 stores product records, accounts and permitted usage events; R2 stores uploaded images. Cloudflare may process its own technical network and security logs. Its infrastructure may involve processing or transfers outside Türkiye. The business still needs to complete the applicable legal bases and transfer arrangements. Analytics consent can be withdrawn through Privacy preferences. Consent here does not replace the required legal information for other processing. Information, correction, deletion and other rights under Article 11 of KVKK can be raised using the contact email; formal controller information remains pending.

External purchases

This website does not collect payment or order details. Purchases are completed on Trendyol, under the relevant seller and platform terms. Off-site orders and sales amounts are not measured here.