PRIVACY POLICY

Effective Date: 11 February 2026
Last Updated: 11 February 2026

We value the protection of your privacy and take all necessary measures to ensure the security of your personal data. This Privacy Policy (“Policy”) explains how we collect, use, share, and protect your data. Our commercial activities are carried out within a strong commitment to maintaining the confidentiality and security of your personal data.

This Policy explains how your personal data is collected, processed, shared, and protected when you use the Altemurorman platform (“Platform”). By accessing the Platform, you acknowledge that you have read and accepted this Policy. If you do not agree with this Policy, please refrain from using the Platform.

You may also review our KVKK Statement and Cookie Policy available on our website.

1. Scope of the Privacy Policy

• Who we are
• Purposes and legal bases of data processing
• Rights of data subjects
• How we collect your data
• What data we collect
• Payment processes
• How we use cookies and other tracking technologies
• Data sharing
• Advertising activities
• Data retention methods and periods
• Security measures
• Children’s privacy
• Policy changes
• Data breach notification
• Right to lodge complaints
• How to contact us and competent authorities

2. Who We Are

Data Controller	Registered Address	DPO / Privacy Contact
Altemur Orman Gıda ve Danışmanlık Ltd.Şti.	Mutlukent Mh. 2037 Cd. No:16 Çankaya/ANKARA, Türkiye	http://altemurorman.com/

In this document, “Altemurorman”, “we”, or “the Company” refers to the legal entity stated above.

3. Purposes of Processing and Legal Bases

Our legal bases for processing personal data include our statutory obligations, our legitimate interests, your lawfully obtained explicit consent, and the contracts we enter into with you regarding the services purchased and/or provided to you.

We process your personal data to operate, provide, develop, and improve our services. Your personal data is processed when:

• Explicitly stipulated by law,
• Necessary for the establishment or performance of a contract,
• Necessary to comply with our legal obligations,
• Necessary for the establishment, exercise, or protection of a right,
• Made public by you in a lawful manner,
• Necessary for our legitimate interests, provided that this does not harm your fundamental rights and freedoms.

Accordingly, your personal data processed in compliance with applicable laws and/or made public by you may be used for:

• Processing orders, providing and performing services, managing payments, and communicating regarding your purchases,
• Carrying out payment processes and collections,
• Detecting and preventing fraud and other criminal activities, enhancing security, and managing financial risk,
• Operating the Platform, analyzing performance, resolving technical issues, and improving user experience,
• Promoting our services.

4. Data Subject Rights

We aim to fully inform you about your data protection rights. You may choose not to provide certain information or to update your existing information. Subject to applicable law, you have the right to request access to or deletion of your personal data. Your rights may vary depending on your jurisdiction.

Your rights under KVKK (Law No. 6698):

1. To learn whether your personal data is processed,
2. To request information if it has been processed,
3. To learn the purpose of processing and whether data is used in accordance with such purpose,
4. To know third parties to whom your personal data is transferred domestically or abroad,
5. To request correction of incomplete or inaccurate data,
6. To request deletion or destruction of personal data under Article 7 of KVKK,
7. To request notification of third parties to whom data has been transferred,
8. To object to a result arising to your detriment through solely automated processing,
9. To claim compensation for damages arising from unlawful processing.

Your rights under GDPR / UK GDPR:

1. Right of Access: You may request copies of your personal data (a reasonable fee may apply depending on the request).
2. Right to Rectification: You may request correction of inaccurate or incomplete data.
3. Right to Erasure (Right to be Forgotten): You may request deletion of your data under certain conditions.
4. Right to Restriction of Processing: You may request restriction of processing in certain cases.
5. Right to Object: You may object to processing under certain conditions.
6. Right to Data Portability: You may request transfer of your data to another controller or to yourself under certain conditions.
7. Automated Decision-Making: We do not carry out automated decision-making or profiling that produces legal or similarly significant effects. If this changes, you will be informed.

You may submit your requests by indicating your region and the nature of your request via our website: http://altemurorman.com/. Identity verification will be required.

5. Methods of Data Collection

Most data is provided directly by you. Your data may be collected through:

• Registering on our Platform, placing orders, or contacting us,
• Placing orders via intermediary e-commerce service providers,
• Completing surveys or providing feedback,
• Using the website via cookies.

Additionally, data may be collected indirectly through cookies and similar identifiers during your interaction with the Platform. For details, please review our Cookie Policy.

6. Categories of Data We Collect

We collect data you provide and data collected automatically. Categories include: identity data, contact data, financial transaction data, content data, technical and usage data, cookie data, and marketing preferences. We do not knowingly collect special categories of personal data and do not knowingly process data of persons under 18 years of age.

7. Payment Processing

All payments are processed via _____________, which complies with PCI-DSS v4.0. We do not store full credit/debit card numbers.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to recognize your browser or device and to provide, maintain, and improve our services. For details, please refer to our Cookie Policy.

9. Data Sharing

We do not sell personal data. We may share data with trusted service providers for service delivery, legal compliance, and security, subject to strict data protection obligations.

10. Advertising

We may display third-party advertisements and links. Ad partners may collect certain information through cookies or identifiers; direct identifiers are not shared.

11. Data Retention

Personal data is retained only as long as necessary for the purposes collected or as required by law. Upon expiry, data is anonymized, deleted, or destroyed.

12. Security Measures

We implement physical, technical, and administrative measures to protect personal data, including HTTPS/TLS, encryption, role-based access controls, regular security testing, and staff training.

13. Children’s Privacy

The Platform is not intended for persons under 18. If data of minors is identified, it will be promptly deleted.

14. Policy Changes

We may update this Policy from time to time. Significant changes will be announced on the website and, where feasible, via email.

15. Data Breach Notification

In the event of a data breach affecting your personal data, notifications will be made to data subjects and authorities in accordance with applicable law.

16. Right to Lodge a Complaint

If you believe your rights have been violated, you may lodge a complaint with the competent data protection authority in your jurisdiction.

17. Contact

If you no longer wish to receive marketing communications, you may opt out at any time. For privacy-related inquiries, please contact our Data Protection Officer.

Contact Email: _____________________