KVKK Disclosure

1. Data Controller

Tarpa Tactical ("the Company") acts as a data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"). Your personal data will be processed in accordance with the law and rules of good faith, accurately and when necessary kept up to date, for specific, explicit, and legitimate purposes described below.

Contact Information

• Entity: Tarpa Tactical
• Email: kvkk@tarpatactical.com
• Address: (current address on the Contact page)

2. Categories of Personal Data Processed

• Identity: first name, last name, Turkish national ID (where required for invoicing)
• Contact: email, phone, delivery and billing address
• Transaction: order history, invoices, payment information (card numbers are never stored on our servers)
• Security: IP address, cookie records, browser data
• Marketing: on-site behavior, preferences (with explicit consent)
• Law enforcement / military personnel: solely for identity verification on military discount applications

3. Purposes of Processing

• Order processing, fulfillment, and delivery
• Issuing invoices and maintaining accounting records
• Customer service, support, and communication
• Managing returns, exchanges, and warranty claims
• Fulfilling legal obligations (tax, commercial, consumer protection legislation)
• Site security and fraud prevention
• Marketing and promotional activities (subject to explicit consent)
• Statistical analysis and service quality improvement

4. Transfer of Personal Data

Your personal data may be transferred to the following recipient groups:

• Authorized public institutions: within the scope of legal obligations
• Shipping and logistics providers: for order delivery
• Payment service providers: licensed institutions such as PayTR and Iyzico
• Hosting and infrastructure providers: Vercel, Shopify (EU/US)
• Accounting and legal advisors: under professional confidentiality

5. Collection Method and Legal Basis

Your personal data is collected through site forms, account registration, orders, cookies, customer communications, and marketing activities, by automated and non-automated means.

Legal bases for processing:

• Performance of a contract (KVKK Art. 5/2-c)
• Compliance with legal obligations (KVKK Art. 5/2-ç)
• Legitimate interest (KVKK Art. 5/2-f)
• Explicit consent (KVKK Art. 5/1) — for marketing purposes

6. Your Rights (KVKK Article 11)

• Learn whether your personal data is processed
• Request information if it has been processed
• Learn the purpose of processing and whether it is used accordingly
• Learn the third parties to whom data is transferred
• Request correction of incomplete or incorrect data
• Request deletion/destruction within the legal conditions
• Request that correction/deletion be notified to third parties
• Object to automated analysis leading to adverse outcomes
• Claim compensation for damages arising from unlawful processing

7. How to Apply

To exercise your rights, please email kvkk@tarpatactical.com. Your request will be resolved within 30 (thirty) days. Your application should include identification documents, the subject of your request, and any supporting documents.

You may also file complaints with the Turkish Personal Data Protection Authority: www.kvkk.gov.tr

8. Retention Periods

Your personal data is retained for the periods stipulated by applicable legislation (5 years for tax, 10 years for commercial and consumer protection). Upon expiry, data is deleted, destroyed, or anonymized.