Privacy Policy
Privacy Policy
Last Updated: 13 September 2026
This Privacy Policy explains how personal data is collected, used, stored and protected when you visit the website of the Tobchik brand operated by OZDSystems, use our products or services, place an order or otherwise communicate with us.
OZDSystems processes personal data in accordance with applicable data protection legislation, including Turkish Personal Data Protection Law No. 6698 (“KVKK”).
1. Data Controller
For the purposes of the KVKK, the data controller responsible for your personal data is:
OZDSystems
Brand: Tobchik
Address: Ş. Turan Selvi Sk. 7/4, Maltepe, Istanbul, Turkey
2. Scope
This Privacy Policy applies to personal data processing activities relating to visits to the Tobchik website, account registrations, orders, personalised product requests, payment and delivery processes, customer support, communications, marketing activities and the general use of the Website.
3. Personal Data We May Process
3.1. Identity Information
We may process your first name, last name and other identification information that may be necessary for order processing, invoicing or customer relationship purposes.
3.2. Contact Information
We may process your email address, telephone number, delivery address, billing address and other contact information that you provide when communicating with us.
3.3. Order and Customer Transaction Information
We may process information including your order number, products purchased, product selections, order date, order value, delivery information, return or exchange requests, customer service communications and order history.
3.4. Personalisation Information
Where you purchase a personalised Tobchik product, we may process information you provide such as a name, pet name, text, measurements, colour, product selection, design preference, instructions or other information necessary to create the personalised product.
When providing information for personalisation, we recommend that you submit only the information necessary to manufacture the relevant product, particularly where the information relates to another person.
3.5. Payment and Financial Transaction Information
We may process payment method, payment status, transaction number, order value, billing information, refund amount and similar financial transaction information.
Payments made using credit or debit cards may be processed through secure systems operated by authorised payment service providers depending on the payment infrastructure used. The scope and retention of payment information may therefore vary according to the payment provider and its systems and policies.
3.6. Website and Technical Usage Information
We may process technical information including IP address, device type, browser information, operating system, session data, pages visited, access times, traffic source, error logs and security records.
3.7. Marketing and Communication Preferences
Where you have provided the required permission, we may process your preferences relating to promotions, product announcements, advertising, offers and other marketing communications, together with information about your interactions with such communications.
3.8. Requests, Complaints and Communications
When you contact us, we may process the messages, questions, requests, complaints and related correspondence that you provide.
4. Purposes for Processing Personal Data
We may process your personal data to receive and manage orders, manufacture personalised products, process payments, package and deliver products, issue invoices, carry out accounting activities, manage returns and exchanges, provide customer support and respond to your requests.
Personal data may also be processed to maintain the security of the Website, prevent fraud and misuse, diagnose technical problems, improve our services, comply with legal obligations, manage legal disputes and establish, exercise or protect our legal rights.
Where the required permission has been provided, personal data may also be processed to conduct campaigns, advertising, promotions, new product announcements and other marketing activities and to measure the performance of those activities.
5. Legal Bases for Processing
Your personal data is processed on the applicable legal grounds set out under Article 5 of the KVKK, depending on the nature of the processing activity.
For activities including placing and fulfilling orders, manufacturing personalised products, processing payments, delivering products, managing returns and providing customer service, personal data may be processed where processing is directly related to the establishment or performance of a contract.
For activities such as issuing invoices, maintaining accounting records and providing information to competent public authorities, personal data may be processed where necessary for OZDSystems to comply with its legal obligations.
Personal data may be processed where necessary for the establishment, exercise or protection of a legal right, including the management of legal claims or disputes.
For purposes such as Website security, fraud prevention, service improvement and secure operation of our business, personal data may be processed on the basis of OZDSystems' legitimate interests, provided that such processing does not prejudice your fundamental rights and freedoms.
Where explicit consent is legally required for marketing, advertising, certain analytics activities or similar processing, the relevant processing will only be carried out after the required consent has been obtained.
6. How We Collect Personal Data
Personal data may be collected electronically or, where necessary, physically through order, account, payment and contact forms on the Website; cookies and similar technologies; customer service and communication channels; order and delivery processes; payment service providers; shipping and logistics providers; and other systems used to provide our services.
7. Sharing of Personal Data
Your personal data may be shared with third parties only to the extent necessary to provide the relevant services and in accordance with applicable law.
This may include sharing personal data with shipping and logistics providers for delivery of orders; payment and financial service providers for payment processing; hosting, software, IT and security service providers for the operation of the Website; and accounting or financial advisers for accounting and compliance purposes.
Personal data may also be disclosed to lawyers and professional advisers where legal assistance is required and to courts, enforcement authorities, tax authorities and other competent public bodies where disclosure is required by law.
Where the sharing of personal data with advertising, analytics or marketing service providers requires consent, such sharing will only take place after the required permission has been provided.
8. International Transfers of Personal Data
Some hosting, cloud computing, email, analytics, software, payment, security or other technology service providers used by Tobchik may operate servers or provide services outside Turkey.
As a result, certain personal data may be transferred outside Turkey. International transfers of personal data are carried out only where one of the conditions set out under Article 9 of the KVKK and applicable legislation is satisfied.
Where necessary, applicable transfer mechanisms such as an adequacy decision, appropriate safeguards including standard contracts, or other mechanisms permitted under applicable legislation may be used.
9. Cookies and Similar Technologies
The Tobchik Website may use cookies and similar technologies to enable the Website to function properly, remember preferences, maintain security, measure performance and, where the required consent has been provided, conduct analytics or marketing activities.
For further information about the types of cookies we use, their purposes and how you can manage your preferences, please refer to the Tobchik Cookie Policy.
10. Marketing and Commercial Electronic Communications
Where promotional emails, messages or other commercial electronic communications concerning campaigns, discounts, new products, promotions or similar activities require prior permission under applicable law, such communications will only be sent after the necessary permission has been obtained.
You may withdraw your marketing permission at any time. Opting out of marketing communications will not affect service-related messages that may be necessary in connection with your order, payment, delivery or customer support request.
11. Retention of Personal Data
Personal data is retained only for as long as necessary for the purposes for which it was processed and for any applicable statutory retention period.
Retention periods for order, payment, invoice, accounting, customer service and legal transaction records may vary depending on applicable legislation and limitation periods for potential legal claims.
When the purposes requiring processing cease to exist and applicable legal retention obligations have expired, personal data is deleted, destroyed or anonymised in accordance with applicable law.
12. Security of Personal Data
OZDSystems implements reasonable technical and organisational measures appropriate to the nature of the personal data processed in order to prevent unauthorised processing of or access to personal data and to ensure its secure storage.
However, no method of transmission or storage over the internet can be guaranteed to be entirely free from risk.
13. Third-Party Websites and Services
The Tobchik Website may contain links to third-party websites, payment systems, social media platforms or other services.
Such third parties have their own privacy practices and personal data processing policies. OZDSystems is not responsible for the independent privacy practices of third parties. We recommend reviewing the relevant service provider's privacy policy before providing personal data to them.
14. Your Rights Under the KVKK
Under Article 11 of the KVKK, you have the right to learn whether your personal data has been processed; request information if it has been processed; learn the purpose of processing and whether the data has been used in accordance with that purpose; and learn the third parties in Turkey or abroad to whom your personal data has been transferred.
You may also request the correction of incomplete or inaccurate personal data; request the deletion or destruction of personal data where the conditions prescribed by law are satisfied; and request that correction, deletion or destruction operations be notified to third parties to whom the personal data has been transferred.
You also have the right to object to a result arising against you as a result of analysis of processed data exclusively through automated systems and to claim compensation where you suffer damage as a result of unlawful processing of your personal data.
15. How to Exercise Your Rights
You may submit requests relating to your rights under the KVKK to OZDSystems using one of the methods permitted under applicable legislation, clearly identifying yourself and specifying your request.
Written applications may be sent to:
OZDSystems
Brand: Tobchik
Ş. Turan Selvi Sk. 7/4
Maltepe, Istanbul, Turkey
Depending on the nature of your request, we may request additional information to verify your identity or properly respond to your application.
16. Changes to This Privacy Policy
OZDSystems may update this Privacy Policy from time to time as a result of changes to applicable legislation, our services, technologies used or our personal data processing activities.
The most recent version of the Privacy Policy becomes effective when published on the Website. Where material changes are made, users may be notified through appropriate means.
17. Contact
If you have any questions about this Privacy Policy or the processing of your personal data, you may contact us through the communication channels available on the Tobchik Website or at the following address:
OZDSystems
Brand: Tobchik
Ş. Turan Selvi Sk. 7/4
Maltepe, Istanbul, Turkey