Privacy Notice
Version: 2026-10-01
Data controller
Under Turkish Law No. 6698 on the Protection of Personal Data (KVKK), the data controller is: [Seller name], [Address], [Tax office / tax or ID number], [MERSIS number, if a company], phone: [Phone], email: merhaba@patiliportre.com. This English text is provided for convenience; the Turkish version is the binding one.
Data we process
Your email address; the photos of people and pets you upload; the names you give in your portraits; order, invoice and delivery details (full name, phone, address); a one-way hash of your IP address; your cookie preferences and consent records.
Purposes and legal grounds
Creating and delivering portraits, fulfilling your order, payment and shipping (performance of a contract, KVKK art. 5/2-c); legal retention obligations (art. 5/2-ç); service security and abuse prevention (legitimate interest, art. 5/2-f); marketing emails and transferring photos abroad (explicit consent, art. 5/1 and art. 9).
Transfers and processing abroad
To create your portrait, your photos are transferred to AI providers (OpenAI and, when needed, Google) and cloud infrastructure (Cloudflare) on servers abroad, only with your explicit consent. Only the data strictly needed is shared with payment, email (Resend) and shipping providers. Your photos are never used to train any AI model.
Retention periods
Draft sessions are deleted after 7 days, photos of unpaid sessions 30 days after submission, and photos of paid sessions 90 days after the last payment, automatically. Portraits are kept until you ask us to delete them. Order and invoice records are kept for the legally required period.
Your rights
You can exercise your rights under KVKK art. 11 (information, correction, deletion, objection and more) by writing to merhaba@patiliportre.com. When you request deletion, your photos, portraits and personal details are permanently deleted.