Privacy Policy
Last updated: 4 September 2026 · Version: 1.1
The Turkish text prevails. This is a translation.
1. What this covers
This page explains which personal data we collect when you use the marketplace, why we collect it and who we share it with.
2. Data we collect
- Account: name, e-mail, phone number, password (stored hashed).
- Phone verification: the code is stored hashed, never in plain text; we also keep your IP and attempt count to prevent abuse. Your number is sent to KKTC Telsim to deliver the SMS.
- Orders: delivery and billing address, phone, order contents and totals. We never see or store your card details.
- Agreement acceptance: when you tick a consent box we record the time, the document and its version, your IP and browser.
- Browsing: cart, language, currency and theme preferences, plus recently viewed products (cookie only).
3. Why
To create and deliver your order, to keep your account secure, to meet legal and accounting obligations, and — only if you asked for it — to send our newsletter.
4. Who we share it with
The seller (only what is needed to fulfil your order), the courier, the payment provider, the SMS provider and the e-mail provider. We do not sell your data.
5. Where your data is processed and cross-border transfer
The marketplace runs on cloud infrastructure. Your personal data is therefore processed and stored on servers outside Northern Cyprus.
| Data | Where | Provider |
|---|---|---|
| Account details, orders, addresses, messages | Germany (Frankfurt) — European Union | Laravel Cloud |
| Product and store images | European Union | Cloudflare R2 |
| Carrier documents such as tax certificates | European Union — private storage | Cloudflare R2 |
| Notification e-mails | Türkiye / TRNC | Turhost |
| Traffic and attack protection | Global distributed network | Cloudflare |
Why abroad: these providers keep the system running, backed up and protected against attacks. No equivalent service with the same level of security and continuity is available in the TRNC.
What is never transferred: your card details are not held in any of these systems. They are entered on the payment provider's own screen and never reach us.
Providers process your data solely to deliver this service. Using it for their own purposes or selling it to third parties is contractually prohibited.
6. Retention
| Record | Period | Reason |
|---|---|---|
| Orders and invoices | For the statutory retention period | Accounting and tax duties |
| Agreement acceptances | Kept even after the account closes | To evidence a past consent |
| Phone verification records | Short period, enough to detect abuse | Security |
| Profile details | Deleted when you delete your account | On your request |
| Cookie preferences | End when you clear your browser | Held on your device |
When you delete your account your profile details are deleted; order records remain where the law requires, with their link to your identity minimised.
7. Your rights and how to use them
You may access, correct, request deletion of, object to the processing of and request a copy of your data.
You can correct profile details yourself under My Account. For anything else write to destek@trendyada.com. We answer within thirty days at the latest and may ask for further information to verify your identity.
If you are not satisfied with the outcome, you retain the right to complain to the competent data protection authority.
8. Cookies
Without essential cookies the cart, session and language preference do not work. Beyond those we use no advertising or tracking cookies and send no data to third party ad networks.
9. Security
- Passwords and verification codes are stored irreversibly hashed; we do not hold them in plain form.
- The site and panels run over encrypted connections (HTTPS).
- Two-factor authentication is mandatory in the admin panel (authenticator app). Seller and carrier panels can use e-mail as the second step.
- Carrier documents such as tax certificates are held in private storage and served only to authorised requests.
- Panel access is limited by role; a store sees only its own data.
No system is 100% secure. If you notice anything suspicious on your account, write to destek@trendyada.com.
10. Data breach
If a breach affects the security of your personal data, we notify the competent authority without undue delay after becoming aware of it and inform affected users. The notice states what happened, which data were affected and what you should do.
11. Controller
Trendyada Marketplace Ltd.
Girne, Northern Cyprus
E-mail: destek@trendyada.com
Phone: 0546 999 4000
12. Changes
When this text changes the version number is raised and the update date is shown at the top. For a material change we ask users to accept it again.