This English version is provided for information. In case of any discrepancy, the Turkish version prevails.
At REGAS CRAFT we care about your privacy and the security of your data. This policy explains how we protect your data and manage your communication preferences. The purposes and legal bases of processing, recipients and your rights are set out in our Privacy Notice; cookies are covered in our Cookie Policy.
1. Payment security
- Card payments are taken with 3D Secure on the secure payment page of the payment institution ([to be set in settings]), authorised by the Central Bank of the Republic of Türkiye under Law No. 6493.
- Your card number, expiry date and security code never reach REGAS CRAFT’s servers — they are never seen or stored by us. We only receive the payment result and a transaction reference.
- All pages of our site are served over an encrypted SSL/TLS connection.
2. Account security
- Your password is stored with a strong one-way hashing algorithm; nobody, including our staff, can see it.
- Session cookies cannot be read by page scripts and are sent only over secure connections. Password reset links are short-lived and single-use.
- We never ask for your password or card details by phone, email or message. Please report any such request to us.
- Choose a strong password you do not use elsewhere and sign out on shared devices.
3. Data security measures
Under article 12 of the KVKK we take technical and organisational measures: role-based access, two-step verification for the admin panel, encrypted storage of integration keys, regular backups, access logging and confidentiality obligations in contracts with our providers. Personal data is not written to system logs.
If we learn that your data has been unlawfully obtained by others, we notify the Personal Data Protection Board and you as soon as possible — within 72 hours at the latest, in line with the Board’s decision.
4. Marketing messages
- We send newsletters and offers by email or SMS only with your consent under Law No. 6563 and the Regulation on Commercial Communication and Commercial Electronic Messages. Consent boxes are never pre-ticked, and consent is not a condition for ordering or creating an account.
- Consents are recorded in the Commercial Message Management System (İYS). You can opt out free of charge at any time via the link in each message, through İYS, in your account or by writing to info@regascraft.com; opt-outs take effect within three business days.
- Transactional messages such as order confirmations and shipping or delivery notices are not marketing messages and do not require consent.
5. Product reviews
Only the display name you choose, your rating and your review text are published; your email and contact details are never shown. Reviews are not removed for being negative; reviews containing insults, personal data or advertising are not published. You can ask us to remove your review at any time.
6. Children’s privacy
Our site is not intended for anyone under 18 and we do not knowingly collect children’s personal data.
7. Third-party links and social media
Our site may link to our social media accounts and other websites. REGAS CRAFT is not responsible for their privacy practices; please read their policies.
8. Changes
This policy is updated when needed; the current version is always published on this page. We announce significant changes on the site.
9. Contact
- Legal name: REGAS CRAFT Deri Ürünleri
- Brand / trading name: REGAS CRAFT
- Address: Esentepe Mah. Antalya Sk. No: 6/A, Melikgazi / Kayseri
- Phone: +90 505 818 86 88
- Email: info@regascraft.com
- Registered e-mail (KEP): [to be set in settings]
- MERSIS number: [to be set in settings]
- Tax office / tax number: [to be set in settings] / [to be set in settings]
- Website: https://regascraft.com
Last updated: 31 October 2026 · Version 2
