Wholesale TR

Privacy policy

We use your data only to deliver your order and answer your questions. The details are below.

Privacy notice

Protection of your personal data

Last updated: September 2026

Data controller

Çankaya Kahve Gıda Sanayi ve Ticaret Limited Şirketi ("Roaster Lab", "we"; MERSİS no. 0229090726800001; address: Abidinpaşa Mah. Şadırvan Cad. Tolga Apt. No: 16B, Mamak / Ankara), is the data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"). This notice explains how your personal data is processed when you use the roasterlab.com.tr website, place an order, sign up to our newsletter or contact us.

What we collect

  • Order data: name, delivery address, phone number, email address, order contents and invoicing details.
  • Contact data: what you write in the contact and wholesale forms, and messages you send us by email.
  • Newsletter data: your email address and sign-up date.
  • Account data: if you create an account, your email address, name and order history. You sign in with a one-time code sent to your email; we keep no passwords.
  • Technical data: the limited log records needed to run the website (IP address, browser type, pages visited). Your cart is stored only in your own browser (localStorage) and is not sent to us.
  • Analytics data (only if you allow it): through Google Analytics, the pages you visit, where you came to the site from, your device and browser type, your approximate location (city, country), the products you add to the cart and the amount of completed orders. Your name, email address, phone number and address are never sent to Google.

We do not collect or store payment card details. Card payments are processed by PayTR, a licensed payment institution; your card details go directly to PayTR and never reach us.

Why we process it and on what legal basis

  • To prepare, deliver and invoice your order (performance of a contract, KVKK art. 5/2-c; legal obligation, art. 5/2-ç).
  • To answer your questions and follow up your request (legitimate interest, art. 5/2-f).
  • To send the newsletter with your explicit consent (art. 5/1). You can opt out at any time using the link at the bottom of every email.
  • To keep the website secure and fix errors (legitimate interest, art. 5/2-f).
  • With your explicit consent, to measure and improve how the site is used (Google Analytics; art. 5/1). The transfer of this data to servers abroad is also based on your explicit consent (art. 9).

Who we share it with

We share your data only with parties strictly needed to provide the service: the courier delivering your parcel, PayTR, which processes your card payment, the accounting and e-invoicing provider issuing your invoice, the infrastructure provider hosting our website, and the newsletter delivery service. Some of these providers may have servers abroad; in that case the transfer is made in line with KVKK art. 9. If you allow it, analytics data is shared with Google, which provides Google Analytics, and may be processed on servers abroad, including in the United States. We never sell your data to third parties.

How long we keep it

Order and invoice data for 10 years as required by tax law; contact form messages for 2 years; your newsletter record until you opt out; technical logs for no more than 6 months. Google Analytics data is kept for no more than 14 months.

Cookies

We use your browser's local storage to remember your language, your cart and your cookie choice; this is needed for the site to work and is not sent to us. We use no advertising cookies.

Google Analytics cookies (_ga, _ga_2FXPP9FXFC) are only used if you allow them with the "Accept" button in the cookie notice, and are kept for 13 months. If you do not, Google Analytics is not loaded at all. You can change your choice at any time with the "Cookie settings" link at the bottom of every page; when you withdraw consent, these cookies are deleted.

We also count overall visits with Cloudflare Web Analytics, which uses no cookies and does not identify you.

Your rights

Under KVKK art. 11 you have the right to learn whether your personal data is processed, to request information if it is, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred in Türkiye or abroad, to request correction if it is incomplete or inaccurate, to request deletion or destruction, to request that these actions be notified to third parties, to object to a result that is to your detriment arising from analysis by automated systems, and to claim compensation if you suffer damage.

To exercise these rights, write to [email protected] or to the postal address above. We resolve requests free of charge within 30 days at the latest. If you are not satisfied with our answer, you may lodge a complaint with the Personal Data Protection Board.

Changes

We update this notice when needed; the current version is always published on this page.