Last updated: 3 October 2026
This Privacy Policy explains how Merli's Kitchen ("we", "us") collects, uses and protects your personal data when you visit our website, join our launch waitlist, or place an order. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable Turkish data protection law (KVKK).
1. Who is responsible for your data
Merli's Kitchen
Zübeyde Hanım Caddesi
09600 Aydın, Türkiye
Email: altineremre94@gmail.com
If you have any question about this policy or your data, contact us at the email address above.
2. What data we collect
Data you give us directly. When you join our waitlist we collect your email address and your consent. When you place an order we also collect your name, delivery and billing address, phone number and order details.
Payment data. Payments are processed by our payment provider. We never see or store your full card number.
Data collected automatically. When you visit our site we may collect your IP address, device and browser type, pages viewed, referring website and similar technical information, through cookies and similar technologies.
3. Why we use your data, and our legal basis
- To send you launch and marketing emails — based on your consent. You can withdraw consent at any time.
- To process and deliver your order and handle returns — necessary to perform our contract with you.
- To operate, secure and improve our website, and to measure our advertising — based on our legitimate interest in running and improving our business, and on your consent where cookies require it.
- To meet accounting, tax and other legal obligations — necessary for compliance with the law.
4. Cookies and advertising
We use necessary cookies to make the site work, and analytics and advertising cookies to understand how our site is used and to measure our advertising campaigns. Advertising partners, including Meta Platforms (Facebook and Instagram), may set cookies or similar identifiers that allow them to measure the performance of our ads and show you relevant advertising.
Non-essential cookies are only set where you have given consent, and you can change or withdraw that consent at any time through the cookie settings on our site or your browser settings.
5. Who we share your data with
We share personal data only with service providers who help us run our business, and only as far as they need it:
- Shopify — our e-commerce platform, which hosts this store and processes orders
- Payment providers — to process payments securely
- Shipping and logistics companies — to deliver your order
- Email and marketing providers — to send the emails you have signed up for
- Advertising and analytics providers, including Meta Platforms — to measure and improve our advertising
We do not sell your personal data.
6. International transfers
We are based in Turkey, and some of our service providers are located in other countries. When personal data is transferred outside the UK, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or on UK adequacy regulations where they apply.
7. How long we keep your data
- Waitlist and marketing data: until you unsubscribe or withdraw consent, and for a short period afterwards to record that withdrawal.
- Order and invoice data: for as long as required by tax and commercial law.
- Website analytics data: typically for a period of up to 24 months.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict or object to how we process your data
- receive your data in a portable format
- withdraw your consent at any time, without affecting processing carried out before you withdrew it
To exercise any of these rights, email us at altineremre94@gmail.com. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
9. Marketing emails
You can unsubscribe from our emails at any time using the unsubscribe link at the bottom of every email, or by emailing us. We will stop sending you marketing email as soon as we receive your request.
10. Children
Our store is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, please contact us and we will delete it.
11. Security
We use appropriate technical and organisational measures to protect your personal data, including encrypted connections and access controls. No method of transmission over the internet is completely secure, but we work to protect your data at all times.
12. Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with the date it was last updated shown at the top.