Petkatalog KVKK Privacy Notice

Last Updated: 25.08.2026

Notice Version: 2026.08.25.v3

1. Data Controller

The data controller under the Personal Data Protection Law No. 6698 (“KVKK”) is:

PETKATALOG EVCIL HAYVAN ÜRÜNLERI VE ELEKTRONIK MARKET SANAYI TICARET LIMITED SIRKETI
Address: ÖRNEK MAH. FIKRI SÖNMEZ CAD. AGENA PARK EVLERI B3 BLOK NO: 2 B IÇ KAPI NO: 45 ESENYURT/ ISTANBUL
MERSİS No.: 0729-1173-1660-0001
Tax No.: 7291173166
Tax Office: ESENYURT
KEP (Registered Electronic Mail): petkatalog@hs01.kep.tr
Email: info@petkatalog.com
Telephone: 0850 500 5 150

This Privacy Notice covers www.petkatalog.com, Petkatalog mobile applications, membership, orders, payments, delivery, customer services, promotions and other related Petkatalog processes.

2. Categories of Personal Data Processed

2.1. Identity and Membership Data

First name, surname, user account details, individual or business membership information and account verification records.

2.2. Contact Data

Telephone number, email address, delivery and billing addresses, and communication preferences.

2.3. Business Customer Information

Business name, tax office, tax number and other information necessary for business invoicing.

2.4. Customer Transaction Data

Transaction records relating to baskets, orders, order history, returns, cancellations, invoices, deliveries, product preferences, and the use of coupons and points.

2.5. Payment and Financial Transaction Data

Payment method, payment status, transaction reference, collection and refund records.

The principle is that card security information, such as full card numbers and CVV codes, is not stored in Petkatalog systems. Card payments may be processed through the infrastructure of the relevant bank and/or authorised payment service provider.

2.6. Delivery and Location Data

The delivery address provided by the user and, with the user's permission, location information used to determine eligibility for express delivery.

2.7. Pet Profile and Preference Data

Names, species, breeds, ages or dates of birth, weights, product preferences and similar information relating to pet profiles voluntarily created by users.

2.8. User Content

Product comments, ratings, uploaded images, support requests and other content shared by the user through the Platform.

2.9. Transaction Security Data

IP addresses, dates and times, session and login records, device and browser information, verification records and anti-fraud records.

2.10. Marketing and Consent Data

Records of consent or refusal for SMS, email and similar communication channels, and marketing preferences.

2.11. Customer Service Data

Email, support records, messaging channels and, where used, call recordings made after the necessary prior information has been provided.

3. Purposes of Processing Personal Data

Personal data may be processed for the following purposes:

Creating and managing membership accounts,
Verifying telephone numbers or email addresses,
Taking orders and concluding sales agreements,
Processing payments and refunds,
Preparing and delivering products,
Providing express courier, shipping or store collection services,
Managing invoicing, accounting and financial processes,
Sending order and delivery notifications,
Managing returns, cancellations and customer support,
Managing coupons, points and membership benefits,
Providing pet profiles and personalisation features requested by the user,
Preventing fraud and misuse,
Ensuring information and transaction security,
Complying with legal obligations,
Establishing, exercising or protecting a right,
Improving the quality of the Platform and services,
Conducting promotional, advertising and marketing activities where the necessary legal conditions are met.

4. Legal Grounds for Processing Personal Data

Depending on the nature of the processing activity, personal data are processed on the appropriate legal ground specified in Article 5 of the KVKK.

These legal grounds include, in particular:

Processing directly related to the conclusion or performance of a contract,
Processing necessary for Petkatalog to comply with a legal obligation,
Processing necessary for the establishment, exercise or protection of a right,
Processing necessary for Petkatalog's legitimate interests, provided that the data subject's fundamental rights and freedoms are not harmed.

For processing activities requiring explicit consent, reliance is placed on explicit consent obtained separately and given freely by the user.

Explicit consent is not made a mandatory condition for membership or access to ordinary shopping services.

5. Methods of Collecting Personal Data

Personal data may be obtained through the following channels:

Website and mobile application forms,
Registration and login screens,
Order and payment processes,
SMS/OTP verification,
Address and delivery processes,
Customer services,
Email and messaging channels,
Cookies and similar technologies,
Transaction and security logs,
Mobile device functions authorised by the user.

6. Transfer of Personal Data

Personal data may be shared with the following recipient groups only as necessary and within the limits of the processing purpose:

Shipping, transport and logistics service providers,
Banks and payment service providers,
Invoicing, electronic archiving, accounting and financial process service providers,
Hosting, cloud, software and cybersecurity service providers,
SMS, email and notification infrastructure providers,
Customer support service providers,
Analytics and advertising service providers where the necessary legal conditions are met,
Legal, accounting advisory and auditing service providers,
Legally authorised public bodies and judicial and administrative authorities.

Transfers are carried out in accordance with the conditions specified in Article 8 and, where applicable, Article 9 of the KVKK.

7. Transfer of Data Abroad

If cloud, analytics, communications, application infrastructure or other technology providers are located abroad or process data abroad, personal data are transferred abroad in accordance with the current legal mechanisms prescribed by Article 9 of the KVKK.

Where appropriate, adequacy decisions, appropriate safeguards, standard contracts or other transfer mechanisms prescribed by law may be used.

8. Retention Periods

Personal data are retained for the period required by the relevant processing purpose and prescribed by the applicable legislation.

Business, transaction, order, agreement and related electronic records created in the course of electronic commerce are retained in accordance with statutory retention periods.

Closure of a user account does not require the immediate deletion of order, invoice, payment or legal transaction records that must be retained by law.

After the retention obligation and processing purpose end, personal data are deleted, destroyed or anonymised in accordance with the legislation.

9. Rights of the Data Subject Under the KVKK

Under Article 11 of the KVKK, the data subject has the following rights:

To learn whether their personal data are being processed,
To request information if their personal data have been processed,
To learn the purpose of processing and whether the data are being used in accordance with that purpose,
To know the third parties to whom personal data are transferred within the country or abroad,
To request correction of incomplete or incorrectly processed personal data,
To request deletion or destruction where the statutory conditions are met,
To request that correction, deletion or destruction be notified to third parties to whom the data have been transferred,
To object to an adverse outcome arising from analysis exclusively by automated systems,
To claim compensation for damage caused by unlawful processing of personal data.

10. Requests Under the KVKK

Requests under the KVKK may be submitted to Petkatalog through the following channels using the methods prescribed by the legislation:

KEP (Registered Electronic Mail): petkatalog@hs01.kep.tr
Email: info@petkatalog.com
Address: ÖRNEK MAH. FIKRI SÖNMEZ CAD. AGENA PARK EVLERI B3 BLOK NO: 2 B IÇ KAPI NO: 45 ESENYURT/ ISTANBUL

The application must include sufficient information to verify identity and state the request clearly and understandably.