Free shipping on orders over 800 ₺.

Orders are processed in 2-5 days.*

Bestsellers Recently Added
Series
Sets Spaces Mugs Track your Order
English

Privacy policy

 

Last Updated: July 17, 2026

This Privacy Notice and Cookie Policy explains how İLLUSTRO TEKNOLOJİ TİCARET LİMİTED ŞİRKETİ collects, uses, shares, stores, and protects personal data in connection with illustroworks.com and the related services offered through the website.

This English version is provided for informational convenience. As illustro currently offers its products in Türkiye, the Turkish version has been prepared with reference to Turkish law. In the event of any inconsistency between the Turkish and English versions, the Turkish version shall prevail to the extent permitted by applicable law.

Reading this notice or using the website does not constitute consent to personal-data processing. Where consent is legally required, your consent will be requested separately.

1. Data Controller

For the purposes of Turkish Personal Data Protection Law No. 6698 (“KVKK”), the data controller is:

İLLUSTRO TEKNOLOJİ TİCARET LİMİTED ŞİRKETİ

Address: Ortabayır Mah., Çamlı Sok. No: 7/A, 34413 Kâğıthane, Istanbul, Türkiye
Istanbul Trade Registry Number: 362140-5
Website: illustroworks.com
Email: reach@illustroworks.com

2. Personal Data We Process

Depending on how you use the website and interact with us, we may process the following categories of personal data:

  • Identity and contact information: Your name, surname, telephone number, email address, billing address, and delivery address.

  • Account information: Your customer account, saved addresses, preferences, favourites, wish list, and account settings.

  • Order and transaction information: Products viewed, added to your cart, or purchased; order value; discounts; payment status; delivery; returns; cancellations; and exchanges.

  • Payment information: Payment method, transaction number, payment confirmation, refund information, and invoice details.

  • Communications: Messages, requests, complaints, reviews, and other information you provide through email, forms, social media, or customer support.

  • Technical and usage information: IP address, device and browser information, session and access records, security information, traffic source, pages viewed, and actions performed on the website.

  • Marketing information: Marketing communication permissions, campaign interactions, advertising preferences, and, where permission has been provided, advertising conversion information.

  • Legal and compliance information: Data-subject requests, disputes, legally authorised requests, and records required for compliance purposes.

Payments may be processed by banks or authorised payment-service providers. We do not view or store full payment-card numbers or card security codes where these details are not provided to us by the payment provider.

We do not ordinarily request sensitive personal data. Please do not send passwords, full payment-card details, health information, or other sensitive information through email, social media, or other unsecured communication channels.

3. Why We Process Personal Data

We may process personal data for the following purposes:

  • Creating and managing orders;

  • Processing payments and delivering products;

  • Managing customer accounts, favourites, and wish lists;

  • Processing returns, exchanges, cancellations, and customer-support requests;

  • Preparing invoices, accounting records, and legally required records;

  • Preventing fraud, misuse, and unauthorised transactions;

  • Maintaining the security and proper functioning of the website;

  • Improving website performance and the customer experience;

  • Responding to questions, requests, and complaints;

  • Meeting our legal and regulatory obligations;

  • Establishing, exercising, or protecting legal rights;

  • Sending marketing communications where the required permission has been obtained;

  • Conducting analytics, advertising measurement, retargeting, and conversion tracking where the required cookie consent has been provided.

4. Legal Grounds for Processing

Depending on the relevant processing activity, personal data may be processed on one or more of the following legal grounds under the KVKK:

  • Processing is necessary to enter into or perform a contract;

  • Processing is necessary for compliance with a legal obligation;

  • Processing is necessary for the establishment, exercise, or protection of a legal right;

  • Processing is necessary for our legitimate interests, provided that your fundamental rights and freedoms are not adversely affected;

  • The personal data has been made public by the data subject;

  • Your explicit consent, where no other legal ground applies and consent is required.

Non-essential analytics, advertising, retargeting, and marketing technologies are used only after you provide the relevant consent, where consent is required.

Permission to receive commercial electronic communications is separate from cookie consent and from this Privacy Notice. You may withdraw from marketing communications by using the unsubscribe option included in the communication or by contacting us.

5. How We Collect Personal Data

Personal data may be collected through:

  • The website and Shopify infrastructure;

  • Customer account, order, checkout, and payment pages;

  • Contact forms, email, and social-media communications;

  • Cookies, pixels, and similar technologies;

  • Payment and shipping providers;

  • Social sign-in providers;

  • Applications and integrations used on the website;

  • Legally authorised public authorities and other authorised parties.

Personal data may be collected by automated or partially automated means or through non-automated means where the data forms part of a data-recording system.

Where you provide another person’s contact or delivery details, you confirm that you are authorised to provide that information and that you have informed the person where reasonably necessary.

6. Sharing Personal Data

Where necessary and proportionate for the relevant purpose, personal data may be shared with:

  • Shopify and its related service providers;

  • Banks and payment-service providers;

  • Shipping, courier, logistics, and delivery providers;

  • Information technology, hosting, cloud, software, and security providers;

  • Customer-account, wish-list, social sign-in, and customer-support providers;

  • Email and commercial-communication service providers;

  • Advertising and analytics providers, including Meta and TikTok;

  • Accountants, lawyers, auditors, and other professional advisers;

  • Public authorities, courts, enforcement authorities, and other legally authorised bodies;

  • Authorised parties involved in a merger, acquisition, restructuring, financing, or transfer of all or part of the company or its assets.

Personal data is shared on the basis of the performance of a contract, compliance with legal obligations, establishment or protection of legal rights, legitimate interests, or explicit consent where consent is required.

We seek to limit service providers’ access to personal data to what is reasonably necessary for the services they provide.

7. Shopify, Meta, and TikTok

The website operates using Shopify infrastructure. Shopify may process personal data to provide services such as website hosting, customer accounts, cart functions, checkout, payments, order management, security, and e-commerce analytics.

Where you consent to advertising and marketing cookies, we may use technologies such as:

  • Meta Pixel;

  • Meta Conversions API;

  • TikTok Pixel;

  • TikTok Events API.

These technologies may measure activities including:

  • Page and product views;

  • Products added to the cart;

  • Checkout initiation;

  • Purchases;

  • Order value and currency;

  • Advertising and campaign interactions.

Depending on the integration settings, information such as IP address, browser and device information, advertising identifiers, and limited contact information converted into a one-way encrypted form may be transmitted to the relevant provider for conversion matching.

Meta and TikTok may also process information they receive as independent data controllers under their own privacy notices and terms.

Refusing advertising and marketing cookies does not prevent you from accessing the website or purchasing products.

8. International Transfers

Shopify, Meta, TikTok, cloud providers, hosting providers, social sign-in services, and certain other service providers may operate servers or group companies outside Türkiye.

Personal data may therefore be transferred abroad, stored abroad, or accessed from outside Türkiye in accordance with Article 9 of the KVKK and applicable secondary legislation.

Depending on the circumstances, international transfers may rely on:

  • An adequacy decision;

  • Appropriate safeguards, including standard contractual clauses;

  • Binding corporate rules;

  • Another legally recognised transfer mechanism;

  • Explicit consent where it is applicable and legally sufficient.

9. Retention and Security

We retain personal data only for as long as reasonably necessary for the relevant processing purpose and for any period required under applicable law.

When determining retention periods, we may consider:

  • The duration of the customer and contractual relationship;

  • Tax, accounting, consumer, and commercial-law obligations;

  • Returns, refunds, disputes, and limitation periods;

  • Fraud prevention and information-security requirements;

  • The establishment, exercise, or protection of legal rights.

When there is no longer a valid purpose or legal basis for retaining personal data, it is deleted, destroyed, or anonymised in accordance with applicable law.

We take appropriate technical and organisational measures intended to protect personal data against unlawful access, use, alteration, loss, or disclosure. However, no electronic storage or transmission method can be guaranteed to be completely secure.

You are responsible for keeping your account credentials confidential and should inform us promptly if you suspect unauthorised use of your account.

10. Your Rights Under the KVKK

Under Article 11 of the KVKK, you may have the right to:

  • Learn whether your personal data is being processed;

  • Request information about the processing of your personal data;

  • Learn the purpose of processing and whether the data is used consistently with that purpose;

  • Learn the third parties to whom your personal data has been transferred in Türkiye or abroad;

  • Request correction of incomplete or inaccurate personal data;

  • Request deletion or destruction where the applicable legal conditions are met;

  • Request that correction, deletion, or destruction be communicated to third parties to whom the data has been transferred;

  • Object to a result against you arising exclusively from automated analysis;

  • Request compensation where you suffer damage because personal data has been processed unlawfully.

These rights are not absolute. A request may be restricted or refused where continued processing is required by law, necessary to protect the rights of another person, required for information security, or necessary for the establishment, exercise, or protection of a legal right. Where a request is refused, the reason will be explained.

11. How to Submit a Request

You may submit a request concerning your rights:

  • In writing and with your signature to our registered address;

  • Through our registered electronic mail address, where available;

  • Using a secure electronic signature or mobile signature;

  • By emailing reach@illustroworks.com from an email address that you previously provided to us and that is registered in our systems;

  • Through another method permitted by applicable legislation.

Your request should contain your name, contact information, the subject of your request, and information reasonably necessary to verify your identity.

We may request proportionate additional information to verify your identity and prevent unauthorised access to personal data.

Requests will be answered as soon as possible and no later than 30 days, depending on the nature of the request. A fee may be charged where permitted under the tariff issued by the Turkish Personal Data Protection Board.

12. Children’s Privacy

The website is not designed specifically for children, and we do not knowingly seek to collect personal data directly from children who do not have the legal capacity to use the services independently.

Where you believe that a child’s personal data has been provided to us without proper authority, please contact us at reach@illustroworks.com.

13. Third-Party Services and Links

The website may contain links to third-party websites, social-media platforms, payment services, or other external services.

Personal-data processing carried out through services that we do not control is governed by the relevant third party’s own privacy notice and terms. The presence of a third-party link on the website does not mean that we control or endorse all activities of that third party.

14. Cookie Policy

14.1 What Are Cookies?

Cookies are small data files stored on your browser or device when you visit a website.

Cookies and similar technologies may be used to operate the website, preserve cart and session information, remember preferences, provide security, measure website usage, and, where permission has been provided, conduct advertising and marketing activities.

14.2 Cookie Categories

Strictly Necessary Cookies

These cookies are required to operate the website, preserve your cart and session, process orders and payments, maintain security, and record your cookie preferences.

They may be used without consent where they are necessary to provide the service or rely on another applicable legal ground. Blocking them through your browser may prevent parts of the website from working correctly.

Functionality Cookies

These cookies remember preferences such as language, country, currency, and interface selections.

Functionality cookies that require consent are used only after you provide that consent.

Analytics and Performance Cookies

These cookies help us understand website traffic, performance, errors, and how visitors interact with the website.

Where consent is required, these cookies are activated only after you accept analytics cookies.

Advertising and Marketing Cookies

These cookies and similar technologies are used by providers such as Meta and TikTok to measure advertising performance, track conversions, and conduct retargeting.

They are activated only after you consent to advertising and marketing cookies, where consent is required.

14.3 Cookie Providers

Category Providers Purpose
Strictly necessary illustro and Shopify Cart, session, checkout, order, security, and consent-preference functions
Functionality Shopify and active store applications Remembering language, region, and user preferences
Analytics and performance Shopify and active analytics providers Measuring website use and performance
Advertising and marketing Meta and TikTok Advertising measurement, conversion tracking, and retargeting

The services and technologies used on the website may change over time. Current consent categories are shown through the cookie-preference panel.

14.4 Managing Cookie Preferences

Through the cookie-preference panel, you may:

  • Accept non-essential cookies;

  • Reject non-essential cookies;

  • Select your preferences separately by cookie category.

Non-essential cookies are not activated before you provide the relevant permission.

You may change or withdraw your preferences at any time using the Cookie Preferences link available on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You may also delete or block cookies through your browser settings. Blocking strictly necessary cookies may affect the operation of the website.

15. Changes to This Notice

We may update this notice to reflect changes in applicable law, our services, our providers, the technologies we use, or our personal-data processing activities.

The updated version will be published on the website and the “Last Updated” date will be revised. Where required by law, we will also provide an additional notice.

Updating this notice alone does not constitute consent to a new processing activity. Where new consent is required, it will be requested separately.

16. Contact

For questions concerning this notice, your personal data, or your cookie preferences, you may contact:

İLLUSTRO TEKNOLOJİ TİCARET LİMİTED ŞİRKETİ
Address: Ortabayır Mah., Çamlı Sok. No: 7/A, 34413 Kâğıthane, Istanbul, Türkiye
Istanbul Trade Registry Number: 362140-5
Website: illustroworks.com
Email: reach@illustroworks.com