Privacy and Security Policy

1PURPOSE AND SCOPE

This Privacy and Security Policy has been prepared to explain the general principles regarding the confidentiality, protection, processing, storage, transfer of personal data, payment security, order security, and website usage of users, members, and customers who shop on the website www.trio-gold.com.

As TRIO GOLD / [Trade Name to be Added], we prioritize the privacy of our customers' personal data and the security of shopping. Information shared during orders placed on our website, membership procedures, contact forms, customer service communications, and payment processes are protected in accordance with relevant legislation and processed only for necessary purposes.

This policy is applied together with the Distance Sales Agreement, Preliminary Information Form, Cancellation and Return Conditions, Cookie Policy, and if any, the KVKK Clarification Text.

2DATA CONTROLLER

Data Controller:

3COLLECTED PERSONAL DATA

Name, surname, phone number, e-mail address, delivery address, billing address, order information, product preferences, return and exchange requests, invoice and payment transaction information, customer service correspondence, request and complaint records, IP address, cookie records, site usage and transaction security records, membership information, campaign and communication preferences, and in personalized product orders, information such as name, date, letters, symbols, special text, measurements, model, color, stone preference, and similar production details provided by the customer.

TRIO GOLD strives not to request unnecessary personal data beyond what is required for shopping and services from its customers.

4PURPOSES OF PROCESSING PERSONAL DATA

Personal data may be processed for the following purposes:

Receiving and processing orders, preparing, packaging, and delivering products, preparing personalized products according to customer requests, issuing invoices, executing payment transactions, managing cargo and delivery processes, evaluating cancellation, return, and exchange requests, conducting customer service processes, resolving requests, suggestions, and complaints, providing after-sales support, improving product and service quality, ensuring website security, conducting fraud, misuse, and suspicious transaction controls, fulfilling legal obligations, managing accounting and finance processes, responding to requests from authorized public institutions and organizations, improving user experience, sending campaigns, announcements, advertisements, and marketing communications if explicit consent is given.

5LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

Personal data is processed based on legal grounds specified in relevant legislation. Within this scope, data may be processed under the grounds of;

Being necessary for the establishment or fulfillment of the contract, fulfilling SELLER's legal obligations, the necessity of data processing for the establishment, use, or protection of a right, processing for the legitimate interest of the SELLER without harming the fundamental rights and freedoms of the concerned individual, clear provision in laws, obtaining the explicit consent of the BUYER when necessary.

these legal grounds.

6PAYMENT SECURITY

Payments made through www.trio-gold.com prioritize the security of customers' payment information.

Transactions made by credit card, debit card, or other payment methods are conducted via the payment infrastructure used on the website, banks, or authorized payment institutions.

SELLER does not store customers' card information on its systems based on the technical structure of the payment infrastructure. Card information is processed through secure systems of the bank or authorized payment institutions that perform the payment.

Security measures such as 3D Secure, SMS verification, bank approval, payment institution security checks, and similar methods used during payment may vary according to the respective bank or payment institution's practices.

The customer agrees not to use cards, accounts, or payment instruments that do not belong to them during payment processes and not to share payment information with third parties.

In case of suspicious transactions, unauthorized payments, fraud risks, payment security issues, or lack of transaction approval by the bank/payment institution, SELLER reserves the right to suspend the order, request additional verification, or cancel the order.

7WEBSITE AND TRANSACTION SECURITY

TRIO GOLD strives to take the necessary technical and administrative measures to ensure the secure use of the website.

Within this context;

Preventing unauthorized access, protecting order records, ensuring the security of user information, conducting payment processes through secure infrastructures, recording system security logs, performing misusage and suspicious transaction checks, applying technical security updates when needed

these measures are taken.

However, absolute security on the internet cannot be guaranteed. Users are responsible for protecting the security of their devices, connections, passwords, and accounts.

8MEMBERSHIP AND PASSWORD SECURITY

When a user creates a membership on www.trio-gold.com, they are obliged to keep their membership information accurate and up to date.

The confidentiality of the membership password belongs to the user. The user should not share their password with third parties and should immediately contact the SELLER if unauthorized access to their account is suspected.

SELLER is not responsible for damages resulting from users sharing their passwords with third parties, leaving sessions open on shared devices, or failing to secure their devices.

If SELLER detects suspicious membership activities, fake account usage, payment security risks, misuse, or illegal transactions, it reserves the right to suspend membership, halt orders, or perform necessary security checks.

9CONFIDENTIALITY OF PERSONALIZED PRODUCT INFORMATION

When a personalized product order is placed through TRIO GOLD, the information such as name, date, special text, letters, symbols, measurements, model, color, stone preference, and similar details provided by the BUYER are processed solely for order preparation, production process, quality control, delivery, and after-sales support purposes.

Personalized product information may only be shared with personnel, production units, suppliers, or service providers necessary for product preparation.

The BUYER agrees that the information provided for personalized products is accurate and may be processed for the purpose of order preparation.

10TRANSFER OF PERSONAL DATA

Personal data may only be shared with third parties when necessary and in compliance with relevant legislation.

Within this scope, personal data may be shared with;

Cargo and logistics companies, banks and payment institutions, e-invoice and e-archive service providers, accounting and finance service providers, technical infrastructure and software service providers, customer service and support units, legal consultants, authorized public institutions and organizations, official authorities requesting data within legal obligations.

Personal data is not sold, rented, or shared without permission for commercial purposes.

11COMMERCIAL ELECTRONIC MESSAGES

With the explicit consent of the BUYER, commercial electronic messages such as campaigns, discounts, product announcements, special offers, promotions, and marketing content may be sent.

The BUYER may withdraw consent for receiving commercial electronic messages at any time.

Withdrawal of consent for commercial electronic messages does not prevent sending mandatory messages related to order, delivery, payment, returns, membership, security, and essential notifications.

12COOKIES AND SIMILAR TECHNOLOGIES

www.trio-gold.com may use cookies to enhance user experience, analyze site traffic, ensure security, remember preferences, and improve service quality.

Cookies are classified as;

Necessary cookies, performance and analytics cookies, functional cookies, advertising and marketing cookies.

Users can change cookie preferences or delete cookies via browser settings. However, disabling necessary cookies may affect the proper functioning of some parts of the website.

Details regarding cookie usage may also be regulated separately under the Cookie Policy.

13DATA RETENTION PERIOD

Personal data is retained for the period required by the processing purpose and within the legal retention periods stipulated in the relevant legislation.

Records related to orders, invoices, payments, deliveries, returns, accounting, customer service, and legal processes may be kept for the legally required duration.

Upon expiry of the retention period or cessation of the processing purpose, personal data is deleted, destroyed, or anonymized in accordance with legislation.

14USER RESPONSIBILITIES

The user;

agrees that the information shared on the website is accurate and up-to-date, that they will not share others' personal data without permission, that they will use only payment instruments belonging to them or authorized by them during payment processes, that they will not share their membership password and account information with third parties, that they will not provide false information during order, payment, and delivery processes, and that they will use the website in accordance with the law and principles of honesty.

SELLER is not responsible for damages arising from users sharing incorrect, incomplete, misleading, or third-party information.

15THIRD-PARTY LINKS

The website www.trio-gold.com may contain links directing users to payment institutions, cargo companies, social media platforms, or other third-party sites.

SELLER is not responsible for the privacy, security, and data processing practices of third-party websites accessed through these links.

Users are advised to review the privacy and security policies of third-party sites before using them.

16DATA SUBJECT RIGHTS

Under relevant legislation, personal data subjects have the following rights;

To learn whether their personal data is processed, to request information if their personal data has been processed, to learn the purpose of processing and whether it is used accordingly, to know third parties to whom personal data is transferred domestically or abroad, to request correction if personal data is incomplete or inaccurate, to request deletion or destruction under prescribed conditions, to request notification of correction, deletion, or destruction to third parties to whom data is transferred, to object to results against themselves obtained by automatic systems, to demand compensation for damages resulting from unlawful processing.

these rights.

17APPLICATION METHOD

Requests related to personal data can be sent to the SELLER via the following communication channels:

Applications must include name, surname, contact information, subject of request, and necessary identity verification information.

SELLER evaluates and concludes applications within the periods stipulated by the relevant legislation.

18CHANGES TO THE PRIVACY POLICY

TRIO GOLD reserves the right to update this Privacy and Security Policy in line with legislative changes, technical requirements, service processes, or website infrastructure changes.

The updated policy comes into effect on the date it is published on the website www.trio-gold.com.

Users are advised to regularly check the policy text.

19ENFORCEMENT

This Privacy and Security Policy enters into force on the date of publication on the website www.trio-gold.com.

By visiting the website, creating a membership, or placing an order, the user agrees that they have read and understood the information provided within this policy.