Privacy Policy

Introduction

Instabom attaches the utmost importance to the protection of its users’ personal data. This Privacy Policy sets forth the principles governing the collection, processing, and protection of the personal data of individuals who visit our website and/or use our services, including payments carried out through the Iyzico infrastructure.

Categories of Data Collected

In the course of providing our services, we may collect and process the following categories of personal data:

• Identification and contact data (full name, email address, telephone number)
• Billing and delivery address details
• Payment-related information required to execute transactions (card details are processed exclusively by Iyzico and are never stored by Instabom)
• Technical data such as IP address, browser type, and device information

Purposes of Processing

Personal data collected is processed for the following purposes, in accordance with applicable legislation:

• To ensure the secure execution of payment transactions
• To process orders and deliver products/services
• To establish and maintain communication with users
• To comply with legal and regulatory obligations
• To improve service quality and enhance the user experience

Payment Security

All payment transactions on our website are conducted through the Iyzico infrastructure. Instabom does not store your card details; such information is processed solely through Iyzico’s secure payment systems. Iyzico operates in compliance with internationally recognized security standards, including PCI DSS.

Cookies

Our website uses cookies to enhance the user experience. You may configure your cookie preferences through your browser settings or choose to reject cookies. Please note, however, that rejecting cookies may limit the availability and functionality of certain services.

Data Retention and Disclosure

• Personal data is processed exclusively for the purposes outlined above.
• Data shall not be disclosed to third parties except where required by law or competent authorities.
• Your personal data is securely stored on servers located in Germany.

Your Rights

Pursuant to the Law on the Protection of Personal Data No. 6698 ("KVKK"), you, as a data subject, are entitled to exercise the following rights:

• To obtain confirmation as to whether or not your personal data is being processed
• To request information regarding the processing of your data
• To be informed of the purpose of the processing and whether it is being used in line with such purpose
• To request rectification of inaccurate or incomplete data
• To request erasure or destruction of your data in accordance with applicable legislation
• To claim compensation for damages incurred as a result of unlawful processing