Privacy Policy | Oriento

Last updated: 8 March 2026

1. Who We Are

Controller: ORİENTO TURİZM İÇ VE DIŞ TİCARET LİMİTED ŞİRKETİ (Oriento)
Address: Aksaray Mah., İnkılap Cd., ÖZHAN ÇELİK İş Hanı No:12, İç Kapı No:304, Fatih, İstanbul, Türkiye
E-mail: support@oriento.store •
IDs: VKN 6470714391 • Ticaret Sicil 377856-5
Website: oriento.store

2. Scope

This Policy explains how we collect, use, share, store, and protect personal information when you visit oriento.store, create an account, place an order, contact support, or interact with our marketing.

3. Information We Collect

Information you provide: name, email, phone, billing and shipping addresses, account credentials, messages to support, marketing preferences, and survey responses.
Order & delivery data: products purchased, order ID, invoice and tax details, delivery status, and tracking information.
Payment data: limited payment details needed to process transactions (e.g., method type, authorization result, fraud-screening outcome). We do not store full card numbers or CVV.
Automatically collected: IP address, device/browser type, pages viewed, clicks, timestamps, referrer/UTM data, and error logs.
Cookies & similar tech: cookies, pixels, tags, and SDKs for essential functions, analytics, and advertising (see “Cookies & Tracking”).
From third parties: payment processor (iyzico), delivery partners, and anti-fraud services may share limited information related to your transaction or delivery.

4. Contact Forms & Comments

If you leave a comment or use a contact form, we may store your name, email and message. If you have an account and log in, we set temporary and login cookies (e.g. two days for login, one year for screen options; “Remember Me” persists two weeks). Editing or publishing content may set a short-lived cookie with no personal data.

5. Purposes of Processing

Provide and operate the Services (account, checkout, shipping, returns, customer support).
Communicate with you about orders, accounts, updates, and policy changes.
Personalize content/offers; measure and improve our Services and marketing.
Prevent fraud and secure the Services (monitoring, detection, and incident response).
Comply with legal obligations (tax, accounting, consumer protection) and enforce our terms.
With your consent where required, send marketing (you can unsubscribe anytime).

6. Legal Bases (EEA/UK & Türkiye)

Contract: to provide the Services you request (orders, account, support).
Legitimate interests: secure and improve our platform, prevent fraud, and market to existing customers (balanced against your rights).
Consent: for certain cookies/analytics/marketing (withdraw any time).
Legal obligation (e.g., tax/accounting) and vital interests where applicable.
Türkiye (KVKK 6698): we rely on the Turkish legal bases equivalent to the above (explicit consent where required).

7. Sharing & Processors

Payments: iyzico authenticates and processes payments and refunds (they may act as independent controller for parts of processing).
Carriers & logistics: delivery partners for shipping, returns and claims.
Hosting & security: infrastructure, backup, monitoring and fraud-prevention providers.
Professional advisers & authorities: when required by law or to protect rights, property and safety.
We do not sell personal data.

8. Payments (Important)

Card details are entered on pages protected by TLS/SSL and are handled by iyzico.
We receive only limited information (e.g., last 4 digits, token/transaction ID, status) to confirm and fulfill your order.
Strong Customer Authentication/3-D Secure may be required by your bank or the processor.

9. Cookies & Tracking

Necessary: cart, checkout, account and security cookies.
Performance/analytics: to understand usage and improve the site.
Functionality: to remember choices (e.g., language, region).
Advertising: to measure campaigns and show relevant offers (only with consent where required).

Manage cookies via our consent banner and your browser/device settings.

10. International Transfers

Your data may be stored or accessed outside your country. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) and ensure a level of protection consistent with applicable law.

11. Retention

Orders & invoices: kept as required by commercial/tax laws (often up to 10 years).
Account data: kept while your account is active; we delete or anonymize after inactivity or request, subject to legal holds.
Marketing data: kept until you opt out or your consent is withdrawn.
Security logs: kept for a reasonable period to investigate incidents.

12. Your Rights

Depending on your location, you may have the right to:

Access, correct or delete your personal data.
Object to or restrict processing; withdraw consent.
Data portability (receive data in a structured, commonly used format).
Complain to your local data protection authority.

13. How to Exercise Your Rights

Contact us at support@oriento.store with “Privacy Request” in the subject. We may ask for information to verify your identity before acting on your request.

14. Security

We use administrative, technical and physical safeguards appropriate to the nature of the data (e.g., access controls, encryption in transit, monitoring, backups).
No method of transmission or storage is 100% secure; please protect your account credentials.

15. Children

Our Services are not directed to children under 13 (or the age defined by local law). We do not knowingly collect such data. If you believe a child has provided data to us, contact us to request deletion.

16. Third-Party Links & Social

Our site may include links or integrations to third-party services (e.g., social networks, messaging tools). Their privacy practices are governed by their own policies.

17. Changes

We may update this Policy from time to time. Significant changes will be highlighted on this page, and the latest version will apply to your information.

18. Contact

E-mail: support@oriento.store
Address: Fatih, İstanbul, Türkiye