The Turkish text is binding
This English version is a translation provided for convenience only. If there is any difference between the two, the Turkish text prevails.
Privacy and Personal Data Protection Policy
Privacy principles for our website and digital sales services
Version: 1.2 · Last updated: October 24, 2026
1. General
This Privacy and Personal Data Protection Policy (the "Policy") has been prepared to explain the basic principles on the protection of users' personal data within the website and digital sales services operated by PUU FU CLOUDS GIDA VE TATLICILIK A.Ş. (the "Company", "PUU FU CLOUDS", "we"). Our Company values the privacy of users' personal information and aims to protect personal data in accordance with the legislation in force. This Policy sets out the general principles on how the personal data of people who visit our website, create a membership, purchase digital materials or contact our Company is handled.
2. Scope
This Policy covers website visitors, members, customers who purchase digital products, users who benefit from customer support services, and people who contact us through the website. For detailed information on the purposes for which and the legal grounds on which your personal data is processed, you can review our Privacy Notice on the Protection and Processing of Personal Data.
3. Information Collected
When you use our website, depending on the nature of the transaction you carry out, your first name, last name, email address, telephone number, billing details, order details and technical usage information may be processed. Our Company aims not to collect personal data that is not necessary to provide the service and to keep processing activities limited to the stated purposes.
4. Sign in with Google
When you use the "Sign in with Google" option, Google shares with our Company, with your consent, the name, email address and profile photo link of your Google account. No access is requested to any other data in your Google account (emails, files, contacts, calendar, etc.). This information received from Google is used only to create your account, recognize you and let you sign in. It is not used in image generation, is not used for advertising, is not sold, is not used to train artificial intelligence models, and is not shared with third parties other than the infrastructure providers essential to providing the service. When you delete your account, the information received from Google is also deleted, subject to retention obligations prescribed by the legislation. You can remove the access your Google account has given to PUUFU POP at any time under "Third-party apps and services" in your Google account settings. PUUFU POP's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Payment Information
In online payment transactions, your credit or debit card details may be processed by the relevant bank or payment service provider, depending on the features of the payment infrastructure used. Our Company does not store card details in its own systems that the payment service does not technically require. The security and privacy rules of the third-party service providers used in payment transactions may also apply.
6. Delivery of Digital Products
The digital materials you purchase may be delivered by being assigned to your user account, by providing a download link, by email or by another electronic method appropriate to the nature of the product. The email address or user account information required to deliver the digital product may be processed to carry out the purchase and deliver the product.
7. Account Security
You are largely responsible for the security of your user account. We recommend that you do not share your password with third parties, do not use easy-to-guess passwords, and contact our Company if you notice any unusual activity in your account. Our Company may create technical log records and security records to ensure system security.
8. Use of Digital Materials
Digital materials purchased through our website may be used within the usage and licence terms stated on the product page. Reproducing purchased digital materials without permission, offering them for resale, distributing them to third parties for commercial purposes, sharing all or a significant part of the product on public platforms, or using them in a way that infringes the intellectual property rights of the Company or the content owner is prohibited. If a product has special licence terms, the licence terms stated on the product page also apply.
9. Third-Party Services
Third-party service providers may be used in areas such as payment, hosting, servers, cloud storage, email, analytics, security, customer service and similar to operate our website. These service providers can access data only to the extent required by the service provided to them. Our Company aims to act in accordance with the legislation in force in selecting service providers and in data security processes.
10. Cookies
Cookies may be used on our website to improve the user experience, for security, session management, site performance and, where necessary, for analytics or marketing purposes. The types, purposes of use and retention periods of cookies are explained in the Cookie Policy (www.puufu.com.tr/en/legal/cookies). No cookie that depends on your explicit consent is used on the site; visit statistics are measured with Vercel Web Analytics, which does not use cookies.
11. Data Security
Our Company takes reasonable and appropriate technical and administrative security measures to protect personal data against unauthorized access, unlawful use, loss, alteration or unauthorized disclosure. However, it should be accepted that no method of data transmission over the internet can be guaranteed to be completely risk-free.
12. Retention of Data
Personal data is stored for the periods prescribed by the relevant legislation and for as long as the purposes of processing require. When the retention period ends, the data is deleted, destroyed or anonymized in accordance with the legislation in force.
13. Marketing Communications
Our Company takes users' communication preferences into account. Sending commercial communications such as campaigns, advertisements, discounts and new products is subject to the permissions and conditions required by the relevant legislation. Users can change their preferences on commercial electronic messages through the methods offered in the relevant communication channel.
14. Children
Our website is not a service designed specifically for children; reasonable measures are applied so that children's personal data is not collected unknowingly. If you think a child's personal data has been processed without the knowledge and consent of their parent or legal guardian, you can contact us.
15. Links and Third-Party Sites
Our website may contain links to third-party websites or services. If you access these links, the privacy policies and terms of use of the third parties concerned will apply. Our Company is not responsible for the content or privacy practices of third-party websites.
16. Policy Changes
Our Company may update this Policy because of legislative changes, technical developments, service changes or operational requirements. The current Policy is valid from the date it is published on our website. If significant changes are made, users may be informed separately to the extent required by the legislation.
17. Contact
For questions about privacy, personal data or this Policy: PUU FU CLOUDS GIDA VE TATLICILIK A.Ş. Address: Çengelköy Mh. Şehit Kader Sivri Sk. NO:4 ÜSKÜDAR İSTANBUL Email: info@puufu.com.tr Telephone: 0 551 664 74 49 Website: www.puufu.com.tr
18. KVKK Rights
For detailed information on your rights regarding the processing of your personal data and how you can apply to our Company, you can review our Privacy Notice on the Protection and Processing of Personal Data. PUU FU CLOUDS GIDA VE TATLICILIK A.Ş.