Personal Data Protection Policy and E-Commerce Communication Consent

Purpose of the Personal Data Protection Policy
The purpose of this Personal Data Protection Policy is to inform our valued customers about the types of personal data collected by LALİMA JEWELRY, how this personal data is used, with whom LALİMA JEWELRY may share your personal data, your rights regarding the personal data processed by LALİMA JEWELRY, how you can exercise these rights, and how you can change your preferences regarding the receipt of electronic commercial communications.

Processed Personal Data, Purpose, and Legal Basis

LALİMA JEWELRY collects personal data to provide better services to its members in accordance with the Law on the Regulation of Electronic Commerce No. 6563, the Turkish Penal Code No. 5237, the Personal Data Protection Law No. 6698, and other relevant legislation. The personal data collected includes name, surname, date of birth, mobile phone number, email, gender, address, profession, education, shopping location and time, payment amount, campaign benefits, discount amounts, product information, browsing and clicking information on the app, and location data when opening the app. This personal data is collected based on your explicit consent and is processed and stored in accordance with the purposes and scope outlined in this Personal Data Protection Policy and Communication Consent.

#### Your Rights Regarding Personal Data

You have the right to know what personal data is processed, whether it is used in accordance with the processing purpose, the third parties to whom personal data is transferred domestically or abroad, to request correction of incomplete or inaccurate personal data, to update and change your personal data in case of any changes, to notify third parties to whom personal data is transferred about these updates, and to withdraw your consent. To exercise these rights under Article 11 of the Personal Data Protection Law No. 6698, you can contact LALİMA JEWELRY at 0552 374 5800 or via email at lalimajewelry@gmail.com.

Retention Period of Personal Data

In accordance with the Law on the Regulation of Electronic Commerce No. 6563, records of approval, withdrawal of approval, the content of commercial electronic messages, and other related records are kept for submission to the Ministry when necessary and are retained for 5 years from the date of expiration of the approval. After this period, your personal data will be deleted, destroyed, or anonymized by our company or upon your request.

Cancelling Communication Consent

If you wish to withdraw your consent and no longer want to receive promotional or informational messages, you can notify LALİMA JEWELRY at any time using the method you used to give consent (SMS, email, push notification, website, and other methods). You can also send an email to lalimajewelry@gmail.com at any time.

Sharing Personal Data with Official Authorities

LALİMA JEWELRY may share your personal data and traffic information such as browsing information related to your membership with public institutions and organizations legally authorized to request this information for your security and to fulfill LALİMA JEWELRY’s legal obligations.

Measures for the Protection of Personal Data

The protection of personal data is important to LALİMA JEWELRY. LALİMA JEWELRY takes necessary measures to protect personal data from unauthorized access, loss, misuse, disclosure, alteration, or destruction. LALİMA JEWELRY uses security technologies such as firewalls and Secure Socket Layer (SSL) encryption when storing personal data. Additionally, when you transmit personal data to LALİMA JEWELRY via the website/mobile application, this data is transferred using SSL encryption. LALİMA JEWELRY commits to keeping your personal data confidential and taking all necessary technical and administrative measures to ensure privacy and security. In case personal data is damaged or falls into the hands of third parties as a result of attacks on the website and the system despite the necessary information security measures taken by LALİMA JEWELRY, LALİMA JEWELRY will immediately inform you and the Personal Data Protection Board.

Changes to the Privacy/Personal Data Protection Policy and Communication Consent

LALİMA JEWELRY may make changes to this Privacy/Personal Data Protection Policy and Communication Consent at any time. These changes will become effective immediately upon the posting of the revised Privacy/Personal Data Protection Policy and Communication Consent on the "www.lalimajewelry.co/kvkk" website. Members will be notified about changes to the Privacy/Personal Data Protection Policy and Communication Consent to keep them informed.