Privacy Policy

This Privacy Policy explains the principles and rules regarding the protection of the privacy of users within the scope of services provided through the ventushair.com website ("Site") operated by Gold Parts Dış Ticaret Limited Şirketi (Brand: Ventus Hair System).

By visiting our site, creating an account, or making a purchase, you accept this Privacy Policy.

Contact:
• Email: support@ventushair.com
• Address: Merkez Mah. Abide-i Hürriyet Cad. BlackOut (Bolkan Center) A Blok No:211 D.No:64 PK:34384 Şişli / İstanbul, Turkey

The following categories of information may be collected through our website:

2.1. Information You Provide Directly
Information you provide when creating an account, placing an order, or filling out a contact form:

• • Full name, email, phone number


• • Shipping and billing address


• • National ID or tax ID number (for invoicing)


• • Company information (for corporate accounts)

2.2. Automatically Collected Information
Technical information collected automatically when you use our site:

• • IP address and geographic location (country/city level)


• • Browser type, device information, operating system


• • Page views, clicks, session duration data


• • Cookie and session identifiers

2.3. Payment Information
Your credit/debit card information is NOT stored by our company. All payment transactions are processed in an encrypted manner through PCI-DSS certified iyzico infrastructure.

The collected information is used for the following purposes:

• • Order processing: Receiving orders, processing payments, shipping, and delivery tracking


• • Account management: Membership registration, profile management, order history


• • Invoicing and accounting: Issuing e-invoices/e-archives as required by law


• • Customer service: Responding to support requests, managing returns/exchanges


• • Loyalty program: Point earning, redemption, and balance tracking


• • Security: Fraud prevention, unauthorized access detection


• • Communications: Order notifications, shipping updates, and (with your consent) promotional announcements


• • Analytics: Site performance improvement, anonymous statistical analysis

We work with the following trusted third-party service providers to deliver our services:

• iyzico (Payment): Secure credit/debit card payment processing. PCI-DSS Level 1 certified. → Privacy Policy


• Yurtiçi Kargo (Delivery): Order shipping and delivery management.


• Paraşüt (Accounting): Automated invoice generation and processing. → Privacy Policy


• Supabase (Database): Secure storage of user and order data. SOC 2 Type II certified.


• Vercel (Hosting): Website hosting and delivery.


• Google Analytics (Analytics): Anonymous site usage statistics collection (with your cookie consent).


• Resend (Email): Order notifications and transactional email delivery.

These service providers process only the minimum data necessary for service delivery and are subject to their own privacy policies. Your data is never shared with third parties for advertising purposes.

5.1. Essential Cookies
Required for basic site functions: session management, shopping cart, language preference. These cookies cannot be disabled.

5.2. Analytics Cookies
Collect visitor statistics through Google Analytics: page views, session duration, device type. Data is anonymized. Activated with your consent through the cookie banner.

5.3. Cookie Management
A cookie preference banner is displayed on your first visit to our site. You can change your preferences at any time. You can also delete or block cookies through your browser settings.

5.4. "Do Not Track" & Global Privacy Control
If your browser sends a "Do Not Track" (DNT) or Global Privacy Control (GPC) signal, non-essential cookies are automatically disabled.

The security of your personal data is our highest priority. We implement the following security measures:

• • SSL/TLS Encryption: All data communication between the site and your browser is encrypted with a 256-bit SSL certificate.


• • 3D Secure: Online payments have an additional security layer through 3D Secure verification.


• • Access Control: Database access is protected by Row Level Security (RLS) policies. Each user can only access their own data.


• • Password Security: User passwords are stored using one-way hash algorithms, never kept in plain text.


• • Data Breach Protocol: In case of a data breach, affected individuals and relevant authorities are notified within legal timeframes (72 hours for GDPR).

No internet communication is 100% secure. We strongly recommend that you do not share your password with anyone and change it regularly.

7.1. Account Security
You are responsible for the security of your account. We recommend using a strong password, not sharing it with third parties, and immediately notifying support@ventushair.com in case of suspected unauthorized access.

7.2. Account Deletion
You have the right to delete your account at any time. You can request account deletion:

• • Through the "Delete Account" option in your profile


• • By emailing support@ventushair.com

After account deletion, your personal data will be permanently deleted or anonymized from our systems within 30 days at the latest, except for legal retention obligations (such as 10 years for invoice and order records).

Our site is not designed for individuals under 18 years of age. Individuals under 18 are not expected to register or make purchases on our site without the consent of their parents/guardians.

If we become aware that personal data of an individual under 18 has been collected without our knowledge, such data will be immediately deleted. If you become aware of such a situation, please notify us at support@ventushair.com.

9.1. Consent Requirement
Commercial electronic messages containing campaigns, discounts, and announcements are sent only with your explicit consent in accordance with applicable laws.

9.2. Transactional Messages
Order confirmation, shipping, delivery notification, return status notifications, or one-time transaction recovery reminders to complete orders that were interrupted at the payment step are not considered commercial messages and are sent without requiring consent.

9.3. Withdrawing Consent
You can withdraw your commercial message consent at any time:

• • Through the "Unsubscribe" link in emails


• • By emailing support@ventushair.com

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.


• Right to Delete: You have the right to request the deletion of your personal information, subject to certain exceptions.


• Right to Opt-Out of Sale/Sharing: We do NOT sell or share your personal information for cross-context behavioral advertising. You may exercise this right via the "Do Not Sell or Share My Personal Information" link in our site footer.


• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.


• Right to Correct: You may request correction of inaccurate personal information.


• Right to Limit Use of Sensitive PI: You may limit the use and disclosure of sensitive personal information.

To exercise these rights, contact us at support@ventushair.com with the subject "CCPA Request." We will verify your identity and respond within 45 days.

Global Privacy Control (GPC): Our site respects the GPC signal. When detected, we treat it as a valid opt-out of sale/sharing request.

This Privacy Policy may be revised from time to time due to legal developments, technological changes, or updates to our services.

Registered members will be notified by email of significant changes. The updated policy takes effect on the date it is published on this page.

Your continued use of our site constitutes acceptance of the current Privacy Policy.

Last Updated: March 26, 2026

For any questions, requests, or complaints regarding our privacy policy or your personal data, you can reach us:

• • Email: support@ventushair.com


• • Address: Merkez Mah. Abide-i Hürriyet Cad. BlackOut (Bolkan Center) A Blok No:211 D.No:64 PK:34384 Şişli / İstanbul, Turkey

For detailed information about your personal data rights, please review our Personal Data Protection Notice.

Pursuant to Article 27 of the General Data Protection Regulation (GDPR), Gold Parts Dış Ticaret Limited Şirketi (operating under the brand Ventus Hair System) has appointed its designated EU Representative for all data privacy inquiries originating from data subjects or supervisory authorities within the European Union (EU) and the European Economic Area (EEA):

• • EU Representative: Sezai Mengilli


• • Email: gdpr-rep@ventushair.com


• • Representative Location: Frankfurt, Germany (Full physical address available upon request for regulatory entities)

Inquiries concerning our processing of personal data of EU/EEA residents may be directed to our EU Representative or directly to support@ventushair.com.