Privacy Policy

Effective Date: 01/08/2025

VARS Aquaculture (“Company”, “we”, “our” or “VARS”) values your privacy and data security. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Turkish Personal Data Protection Law (KVKK - Law No. 6698), the General Data Protection Regulation (GDPR), and applicable international commercial regulations when you visit our website varsco.com, use our B2B services, or purchase our products.

1. Information We Collect

A. Personal Data

• Full name and corporate position
• Corporate email address and telephone / WhatsApp numbers
• Company name, Tax Office, Tax ID (for B2B invoicing)
• Shipping and billing addresses for cold-chain and dry cargo delivery
• Payment transaction data (processed securely via iyzico PCI-DSS certified infrastructure, never stored on our servers)

B. Non-Personal & Technical Data

• IP address, browser type, operating system
• Device information and session telemetry
• Cookies and site usage data (pages visited, referral sources)

2. How We Use Your Information

• To process, verify, and dispatch B2B purchase orders and quote requests
• To provide customer service, technical hatchery support, and SLA tracking
• To issue legal E-fatura / E-arşiv invoices under Turkish tax and commerce laws
• To comply with customs, veterinary export certificates, and regulatory requirements
• To send technical updates and promotional bulletins (with explicit opt-in consent)

3. Sharing of Information

We only share your personal data in strict compliance with applicable laws:

• With cold-chain logistics and air-cargo carriers for order fulfillment
• With payment service providers (iyzico) for PCI-DSS secure card processing
• With authorized regional sales desks and distribution partners
• With tax offices, veterinary directors, and legal authorities when mandated by law

We NEVER sell, rent, or lease your personal data to third parties.

4. Data Security

• 256-Bit SSL encryption for all web transmission
• Strict administrative and technical measures against unauthorized access
• Online payment transactions are processed via PCI-DSS Level 1 certified iyzico infrastructure
• Data stored in compliance with KVKK (Law No. 6698) and GDPR retention standards

5. Cookies and Analytics

We store only what the site needs to function — your language choice, session and cart — which requires no consent and cannot be declined while you use the site.

Analytics is separate and runs only if you allow it. Nothing is collected before you choose, and declining is the default. When enabled, we record the pages you visit, the language the site is displayed in, the country your connection resolves to, and a randomly generated identifier that lets us count one visitor's pages as a single visit. That identifier is not linked to your name or email, and we do not track you across other websites.

Your choice is stored in your browser, not in a cookie, so browser cookie settings do not control it. To change or withdraw it at any time, use the Cookie preferences link in the footer of any page. Withdrawing takes effect immediately and also deletes the identifier described above.

Analytics records are deleted automatically after 60 days of inactivity. If you send us an enquiry while analytics is enabled, the pages you viewed are attached to that enquiry and are then kept for as long as we keep the enquiry itself, as part of our record of your request.

6. Your Rights

Under KVKK and GDPR, you have the right to:

• Learn whether your personal data is processed and request access
• Request correction of inaccurate or incomplete personal data
• Request deletion or destruction of data (subject to statutory tax retention rules)
• Object to automated processing or withdraw marketing consent

To exercise your rights, email our data controller at privacy@varsco.com.

7. Updates

This policy may be updated periodically. The latest version will always be accessible on our portal with an updated effective date.