Personal Data Protection Policy


Last Updated: September 25, 2025
Applies To: All visitors and customers worldwide

Controller / Company:

Buy Fragrance Oil (Owner: İbrahim Halil Çakmaktaşı)
Registered Office: Istanbul, Turkey (full legal address available upon request)
Contact for Privacy Requests: support@buyfragranceoil.com (Subject line: “Privacy Request”)

This Policy explains how we collect, use, disclose, secure, and retain personal data. Read together with our Privacy Policy (/privacy-policy/) and Cookies Policy (/cookies-policy/). If there is a conflict, the most protective document applies.

1) What We Collect (Categories of Personal Data)

  • Identifiers & Contact: name, email, phone, billing/shipping address.

  • Commercial Data: items viewed/purchased, order IDs, invoices, support tickets.

  • Payment Data: tokenized/truncated card info via processors (we do not store full card numbers or CVV).

  • Technical & Usage: IP, device/browser, pages visited, referral/UTM, cookie IDs, approximate location.

  • Communications: messages to support/billing/help.

  • B2B/Wholesale: company, tax/VAT details, purchase history.

  • UGC: reviews/ratings/questions.
    We do not intentionally collect sensitive personal data. If submitted in error, contact us for deletion.

2) Why We Use Your Data (Purposes & Legal Bases)

Order processing & support (contract/legitimate interests); payments & fraud (legitimate interests/legal obligation); shipping (contract); account & comms (legitimate interests/consent where required); analytics (legitimate interests; consent for non-essential cookies); marketing (consent where required); legal/tax/compliance (legal obligation/legitimate interests).

3) Cookies & Similar Technologies

Essential cookies for core functions; optional cookies for analytics/ads. Manage via banner or browser. See Cookies Policy.

4) Retention

Orders/tax records up to 10 years; support up to 3 years; marketing until opt-out or 24 months inactivity; analytics cookies ≤ 24 months.

5) Sharing & Processors

Payment processors (Stripe/iyzico/PayPal); logistics (DHL/FedEx/UPS/PTT); analytics/ads (consented); IT/security vendors. We do not sell personal data; SCCs or lawful transfer tools used where needed.

6) Security

SSL/TLS, least-privilege access, fraud screening, no full card storage on our systems. No method is 100% secure; keep your credentials safe.

7) Your Rights

Access/port, correct, delete, object/restrict, withdraw consent, opt-out (marketing and—where applicable—sale/share), appeal (US states).
How: Email support@buyfragranceoil.com with subject “Privacy Request”. We respond in 30 days (GDPR/UK) or 45 days (CCPA/CPRA) where applicable.

8) International Users

Processing may occur outside your country (e.g., TR/EU/US). SCCs or equivalent mechanisms are used where required.

9) Children’s Privacy

Not directed to children under 13 (or local equivalent). Contact us for deletion if data was submitted.

10) Automated Decision-Making

We do not use automated decision-making producing legal/similar significant effects without human review.

11) Changes to This Policy

Updates take effect upon posting with a revised “Last Updated.”

12) Contact

Privacy questions/requests: support@buyfragranceoil.com
Billing data issues: billing@buyfragranceoil.com

Addendum A — GDPR / UK GDPR: legal bases (Art. 6), controller: Buy Fragrance Oil (Istanbul), data subject rights, SCCs, marketing opt-in where required.
Addendum B — CCPA/CPRA: we do not sell PI; opt-out rights, correction/deletion, portability, limit sensitive PI (not purposefully processed), non-discrimination; appeals within 45 days.
Addendum C — Türkiye (KVKK): Veri Sorumlusu: Buy Fragrance Oil; KVKK m.11 hakları; başvuru: support@buyfragranceoil.com .

Helpful Links: Privacy Policy /privacy-policy/ · Cookies Policy /cookies-policy/ · Customer Service Policy /customer-service-policy/ · Delivery Terms /delivery-terms/