Privacy Policy

22 July, 2026

Privacy Policy

This Privacy Policy sets out the principles governing the collection, use, sharing, and protection of personal data belonging to natural and/or legal persons (“Users”) benefiting from the international shipping and label creation services we provide through our platform (the “Platform”), accessible at www.kargobaz.com (the “Site”) and via our mobile application. This Privacy Policy is an integral part of the Terms of Use entered into between the User and the Platform.

In its capacity as data controller, TURKISHIP Elektronik Ticaret Hizmetleri Limited Şirketi (in short, “Kargobaz”) undertakes to act in accordance with all relevant legislation, primarily Law No. 6698 on the Protection of Personal Data (“KVKK”), and in compliance with the data protection policies of the marketplace platforms with which it has integrated. For full legal details, you may also refer to the Information Notice on the Protection of Personal Data published on our Site.

1. What Data Do We Collect?

The following personal data may be collected during registration to the Platform, integrations, support requests, shipping label creation, shipment tracking, payment, and invoicing transactions:

Identity and contact information: Name and surname, email, telephone, address, Turkish ID number (for individual invoicing)
Corporate data: Company name, tax number / tax office, invoice information
Transaction data: Order details, shipment content, tracking numbers, payment and invoice data
Shipment and logistics data: Package weight and dimensions, customs declaration information, destination country
Marketplace integration data: Order and recipient information transmitted through Amazon, Etsy, Shopify, eBay, etc.
Technical data: IP address, device information, browser data, session records, API access logs

2. For What Purposes Do We Use This Data?

The collected data is used for the following purposes:

Creating shipping labels, initiating shipments, and tracking processes for shipments from Türkiye to other countries
Conducting customs declaration and import/export processes
Synchronizing order and tracking information with marketplaces and shopping platforms
Completing payment transactions, invoicing, and fulfilling legal obligations
Providing support services, customer relationship management, and complaint handling
System improvement, performance monitoring, and anonymized analytics
Information security, account security, and fraud prevention
Only with express consent: marketing communications, campaigns, and announcements

3. Marketplace Integrations

When you establish an integration with marketplace platforms such as Amazon, Etsy, Shopify, eBay, and the like, order and recipient (buyer/customer) information may be transmitted to Kargobaz by such platforms. Such data is processed in accordance with the following principles:

Use solely for fulfillment: Such data is used only for the purposes of creating shipping labels for the relevant shipment, conducting customs processes, tracking, delivery activities, and fulfilling legal obligations.
Not used for marketing: Such data shall not be used for marketing, profiling, campaigns, or sharing with affiliates without the express written consent of the relevant platform.
Not used for AI training: Such data shall not be used for the development, training, or improvement of artificial intelligence or machine learning models without the express written consent of the relevant platform or the explicit consent of the user.
Shorter retention period: Where required by the relevant platform's policy, such data is deleted within a period shorter than Kargobaz's general retention periods. For example, data obtained through the Amazon Selling Partner API is deleted no later than 30 days after the transaction is completed, in accordance with Amazon's Data Protection Policy (subject to legal retention obligations).
Compliance with platform policies: Kargobaz undertakes to comply with the developer/API terms of use, data protection policies, and acceptable use policies of each platform with which it has integrated.

4. Data Sharing

Unless otherwise stated and outside of legal exceptions, your data is not transferred to third parties without your express consent. Due to the nature of our service, data is shared with the following parties:

International carriers (such as UPS, FedEx, DHL) — mandatory for the shipment to be delivered
Customs authorities of destination countries and customs brokers — mandatory for customs declaration
Marketplace platforms — for synchronization of tracking numbers and order status
Payment infrastructure providers — for processing of payments
E-invoicing integrators and the Turkish Revenue Administration — for legal obligations
Cloud computing and cybersecurity service providers — for infrastructure
Marketing service providers (email/SMS) — only with express consent
Analytics service providers (Google Analytics, Meta Pixel, etc.) — for Site usage data
Authorized public institutions and bodies — where legally required

Such sharing is carried out within the scope of Articles 8 and 9 of the KVKK and with the necessary security measures in place.

5. Cross-Border Data Transfer

Due to the nature of our service — shipping from Türkiye to other countries — some of your personal data must necessarily be transferred abroad. For example, the recipient's name and address information is transferred to the international systems of the relevant carrier (UPS, FedEx, DHL, etc.) so that the shipment can be delivered.

In addition, Kargobaz may work with cloud infrastructure, software, and platform service providers based abroad for the continuity and quality of services. These providers undertake to act in accordance with international data protection standards, primarily the GDPR.

Cross-border transfers are carried out pursuant to Article 9 of the KVKK, either on the basis of your express consent or within the scope of the exceptions set out in Article 9/6 of the KVKK (such as performance of a contract).

6. Cookies and Similar Technologies

Cookies and similar technologies are used on the Site and Platform for purposes of session management, security, preference recall, analytics, and (with express consent) marketing. For detailed information about cookie types, purposes of use, and how to manage your preferences, please refer to the Cookie Policy on our Site.

7. Artificial Intelligence and Automated Decision-Making

Kargobaz does not use user, recipient, or shipment data for the development, training, or improvement of artificial intelligence or machine learning models without express consent or the express written permission of the relevant marketplace platform. In the event that automated decision-making processes are used, your right to be informed about such processes and your right to object under Article 11/g of the KVKK are reserved.

8. Data Security

The following technical and administrative measures are implemented to ensure the security of your personal data:

TLS/SSL encryption for data transmission
Encryption of sensitive data at rest
Role-based access control and authorization
Regular logging of access and changes
Training of personnel on data protection
Confidentiality and data processing agreements with third-party service providers
Regular monitoring and updates against security vulnerabilities

9. Data Retention

Your personal data is retained for the period required by the purpose of processing and within the retention periods stipulated in the relevant legislation. When such periods expire or upon your request, and subject to legal obligations, your data is securely deleted, destroyed, or anonymized.

For recipient information transmitted through marketplace platforms, shorter periods apply where required by the relevant platform's policy (for example, 30 days for data originating from Amazon).

10. Your Rights

Pursuant to Article 11 of the KVKK, in respect of your personal data, you have the right to: learn whether your data is being processed, learn the purpose of processing, learn about domestic/cross-border transfers, request the correction, deletion, or destruction of data processed incompletely or inaccurately, request that such actions be notified to third parties, object to results produced by automated analysis, and request compensation for damages suffered due to unlawful processing.

You may submit your requests via the Data Subject Application Form available on our Site or to [email protected]. Your applications will be concluded within 30 days at the latest. If the process requires a cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged. In the event that your application is rejected, or the response is delayed or insufficient, you have the right to file a complaint with the Personal Data Protection Board within 30 days from the date you become aware of the response and, in any case, within 60 days from the date of application.

11. Children's Data

Kargobaz Services are not directed to persons under the age of 18. We do not knowingly collect personal data from persons under 18. If you become aware that data of a child has been transmitted to us, please notify us at [email protected]; the relevant data will be deleted as soon as possible.

12. Policy Changes

Kargobaz may update this Privacy Policy from time to time. For material changes, Users will be informed via email or through an announcement on the Site. Changes take effect on the date they are published on the Site. You may access the current text of the policy at any time through the Site.

13. Contact

Data Controller: TURKISHIP Elektronik Ticaret Hizmetleri Limited Şirketi
Address: Giyim Sanatkarları Sitesi 4B No:19 İkitelli OSB Başakşehir 34490 İstanbul / TÜRKİYE
Email: [email protected]
KEP (Registered Electronic Mail): [email protected]