Privacy Policy

Effective Date: 01/08/2025

VARS SU ÜRÜNLERİ İTHALAT İHRACAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“Company”, “we”, “our” or “VARS”) values your privacy and data security. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Turkish Personal Data Protection Law (KVKK - Law No. 6698), the General Data Protection Regulation (GDPR), and applicable international commercial regulations when you visit our website varsco.com, use our B2B services, or purchase our products.

1. Information We Collect

A. Personal Data

• Full name and corporate position
• Corporate email address and telephone / WhatsApp numbers
• Company name, Tax Office, Tax ID (for B2B invoicing)
• Shipping and billing addresses for cold-chain and dry cargo delivery
• Payment transaction data (processed securely via iyzico PCI-DSS certified infrastructure, never stored on our servers)

B. Non-Personal & Technical Data

• IP address, browser type, operating system
• Device information and session telemetry
• Cookies and site usage data (pages visited, referral sources)

2. How We Use Your Information

• To process, verify, and dispatch B2B purchase orders and quote requests
• To provide customer service, technical hatchery support, and SLA tracking
• To issue legal E-fatura / E-arşiv invoices under Turkish tax and commerce laws
• To comply with customs, veterinary export certificates, and regulatory requirements
• To send technical updates and promotional bulletins (with explicit opt-in consent)

3. Sharing of Information

We only share your personal data in strict compliance with applicable laws:

• With cold-chain logistics and air-cargo carriers for order fulfillment
• With payment service providers (iyzico) for PCI-DSS secure card processing
• With authorized regional sales desks and distribution partners
• With tax offices, veterinary directors, and legal authorities when mandated by law

We NEVER sell, rent, or lease your personal data to third parties.

4. Data Security

• 256-Bit SSL encryption for all web transmission
• Strict administrative and technical measures against unauthorized access
• Online payment transactions are processed via PCI-DSS Level 1 certified iyzico infrastructure
• Data stored in compliance with KVKK (Law No. 6698) and GDPR retention standards

5. Cookies, Analytics and Advertising

We store only what the site needs to function — your language choice, session and cart — which requires no consent and cannot be declined while you use the site.

Visitor statistics. We count visits on our own server at stats.varsco.com, using self-hosted software (Umami) that sets no cookie and stores nothing on your device. It records the page you opened, the site that linked you to it, the country your connection resolves to, and your browser and device type. Visits are grouped into a single session by a one-way code that is regenerated every day, so a visit yesterday cannot be matched to a visit today, and you cannot be recognised on any other website. This never receives your name, your email address, or anything you type into a form. Because nothing is stored on your device and none of it leaves our own systems, it runs for every visitor and is not one of the choices below.

Beyond that there are two separate choices, and you can accept either without the other. Nothing in either category is collected before you choose, and declining is the default.

Analytics. When enabled, we record the pages you visit, the language the site is displayed in, the country your connection resolves to, and a randomly generated identifier that lets us count one visitor's pages as a single visit. That identifier is not linked to your name or email, and we do not track you across other websites.

Advertising. When enabled, Google and Meta may set identifiers in your browser so they can tell us which of our advertisements brought you here, and so that our advertisements can be shown to you on other websites and services. These identifiers are set by those companies under their own privacy policies, and this is the only category under which any information about you leaves this site for advertising purposes. Declining it stops all of it; the site works identically either way.

If you arrive from an advertisement, the link you followed carries a click reference created by the advertising network. We keep that reference in your browser for the duration of your visit and attach it to an enquiry only if you choose to send us one, so that we can tell which advertisement produced a genuine enquiry. It is stored with that enquiry, kept for as long as we keep the enquiry itself, and is not used to build a profile of you.

Your choices are stored in your browser, not in a cookie, so browser cookie settings do not control them. To change or withdraw them at any time, use the Cookie preferences link in the footer of any page. Withdrawing takes effect immediately and also deletes the identifiers described above, including those set for advertising.

Analytics records are deleted automatically after 60 days of inactivity. If you send us an enquiry while analytics is enabled, the pages you viewed are attached to that enquiry and are then kept for as long as we keep the enquiry itself, as part of our record of your request.

6. Your Rights

Under KVKK and GDPR, you have the right to:

• Learn whether your personal data is processed and request access
• Request correction of inaccurate or incomplete personal data
• Request deletion or destruction of data (subject to statutory tax retention rules)
• Object to automated processing or withdraw marketing consent

To exercise your rights, email our data controller at privacy@varsco.com.

7. Updates

This policy may be updated periodically. The latest version will always be accessible on our portal with an updated effective date.