Privacy and Personal Data Policy

Rainbo processes the personal data needed for accounts, orders, delivery, payment verification, support, security and separately permitted communications. Card data is processed by iyzico; Rainbo does not store card numbers or security codes. Data categories Identity and contact details, delivery/billing addresses, order and customer-transaction records, security logs, consent preferences and support correspondence may be processed. Purposes and legal grounds Data is processed for contract performance, legal obligations, establishing/exercising/defending rights, legitimate interests and, where required, separate consent; including fulfilment, payment verification, fraud prevention, support, accounting and permitted marketing. Recipients Necessary data may be shared with iyzico, carriers, hosting, email and technical providers, and competent authorities. Providers receive only the data required for their service. Retention and security Data is retained for the transaction and statutory periods, then deleted, destroyed or anonymised. Appropriate access, encryption and logging safeguards are applied. See the KVKK Privacy Notice and Cookie Policy .