Skip to content
EN

Privacy Notice

How we process your personal data when you write to us on noq.works, on WhatsApp or by email, order from the noq.works shop or use your NOQ account. This notice is for your information; it does not ask for your consent. For data processed while you browse, see the Privacy page; for processing based on your explicit consent, see the Explicit Consent Notice. For your NOQ Open posts, separate information is given under Account › Community.

Effective: 4 November 2026 (version 2026-11-04.3)

1. Data controller

Under Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is İçerikçi Medya Yazılım Pazarlama Sanayi ve Ticaret A.Ş. (Bahçelievler Mah. 7134 Sk. B No:2B, 48440 Bodrum / Muğla, Türkiye · hello@noq.works · KEP: icerikcimedya@hs01.kep.tr).

2. Data we process

  • Identity and contact: first and last name, email address, phone number.
  • Contact request: when you write to us via the contact form, email or WhatsApp, your message and any files you attach (photo, voice message, document), the topic you chose, the page you reached us from and the conversation history.
  • Delivery and billing: address, province, district, postcode; for business invoices, company name, tax office and tax number.
  • Order: products, amounts, order note, order and return history, the version and time of the contract texts you accepted (pre-contract information, distance sales agreement), and the version of the privacy notice shown to you.
  • Payment record: payment result, iyzico transaction number and instalment count. Your card number and other card details stay with iyzico; we never see or store them. If you save a card to your account, the card is stored by iyzico; we keep only iyzico's card key and the card's last four digits, brand and bank.
  • NOQ account: your account identifier, name, email address and, if you verified it, mobile number; sign-in code requests and session records; the addresses you save, the support requests you open (messages and attachments), your notification preferences and, if you add it to your profile, your date of birth (optional) in your account.
  • Survey answers: if you answer a short question shown on the site or in your account, your answers; with your account if you are signed in, and with your order if you answer on the order page.
  • Security: cart and session cookies; a one-way hash of your IP address to prevent abuse.

3. Purposes

To reply to your request and keep the conversation going; to verify your identity with a sign-in code, run your NOQ account and resolve your support requests; to take your order, collect payment, prepare and deliver it; issue invoices and keep accounting records; tell you about your order's status; if you added your date of birth, show a birthday greeting in your account; handle withdrawals, returns and complaints; meet our legal obligations; prevent fraud and abuse; and list your orders when you sign in.

When you write on WhatsApp, the first reply comes from Luma, our AI assistant, on our behalf: it works out what you need, asks a few questions and hands the conversation to our team. Luma does not sell, make promises or take decisions about you; our team sees the whole conversation and can take it over at any time.

If you answer a survey, we show a product or information matching your answer right away, and we review answers in aggregate when developing our products.

Analytics, and marketing and personalisation, happen only with your explicit consent; see the Explicit Consent Notice. Offers and announcements are sent only with a separate commercial electronic message permission, which is optional and never a condition of an order or an account.

4. Collection and legal basis

Data is collected electronically when you write to us via the contact form, email or WhatsApp, fill in the checkout form, sign in to and use your NOQ account, answer a survey, and use the site. The legal bases are in Article 5(2) KVKK: forming and performing the contract — your order, pre-sale questions, your NOQ account and support requests (c), our legal obligations under tax, commercial and consumer law (ç), establishing, exercising or defending a right (e), and our legitimate interest in replying to your request, greeting you on WhatsApp through our assistant, reviewing survey answers in aggregate and keeping transactions secure (f).

These purposes do not require and we do not ask for your explicit consent; on the contact form, at checkout, at sign-in and on support requests this notice is only presented for your information. Processing based on explicit consent (analytics, marketing and personalisation) is described separately in the Explicit Consent Notice.

5. Transfers

  • Payment: iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (iyzico) — name, contact details, address and order amount, to take and refund payment.
  • Shipping: the carrier delivering your parcel — recipient's name, phone and delivery address.
  • Invoicing: our e-invoice / e-archive provider and the Revenue Administration — invoice details.
  • Competent public authorities and courts — only where required by law.
  • Contact: if you choose to write on WhatsApp or to receive your sign-in code on WhatsApp, your phone number and messages travel over WhatsApp's (Meta) infrastructure abroad. Luma generates its replies with an AI model running on our own servers; form and email conversations also stay on our own servers.

Order notifications are sent by email through our own notification system. WhatsApp is not used for order notifications at present; if it is introduced, this notice will be updated beforehand.

6. Retention

Order, invoice and accounting records are kept for 10 years as required by tax and commercial law. Cart data is deleted 60 days after last use. IP hashes are kept only for short-term rate limiting and deleted soon after. Contact conversations (including WhatsApp and support requests) and survey answers are kept only as long as needed for their purpose. Your NOQ account details are kept while your account is open.

7. Your rights

Under Article 11 KVKK you may learn whether your data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties it is transferred to; ask for incomplete or incorrect data to be corrected, and for data to be deleted or destroyed where the conditions are met, with these actions notified to recipients; object to an outcome against you produced solely by automated analysis; and claim compensation for damage caused by unlawful processing.

8. How to apply

Send your request from the email address you wrote from or used for your order to hello@noq.works, to our registered electronic mail address, or in writing to our company address. We respond free of charge within 30 days.

Language

This English text is provided for convenience. In case of any difference, the Turkish version prevails.