Legal information

GDPR & Privacy Policy

At Noendy, we value the security and privacy of your data. This page explains what information we collect, how we use it, and your rights under the Personal Data Protection Law (Law No. 6698).

GDPR & Privacy Policy

At Noendy, we attach importance to the security and privacy of your data. This page explains your rights under Law No. 6698 on the Protection of Personal Data (KVKK).

📜 GDPR

Policy details

1. What personal data do we collect?

Membership information: Name, surname, email address, phone number.

Order information: Delivery address, billing address, payment method (card details are stored with iyzico, not with us).

Child information: Child's name/nickname, age range, English level (for course curriculum only).

Technical information: IP address, browser type, device information, cookie data (for analytics).

2. How do we use this data?

  • To process and ship your orders
  • To personalize the courses according to your child's age and level
  • To prepare progress reports
  • To respond to parent support requests
  • To send product and service announcements, if you have given your permission
  • To fulfill legal obligations (invoicing, tax)

3. With whom do we share your data?

We share your data only in the following situations:

  • Shipping companies (Yurtiçi, MNG, Aras): only the delivery address
  • iyzico: for payment processing, only essential card information
  • Email service provider: for newsletter and order confirmation emails
  • Legal authorities: only if legally required

Your data will under no circumstances be shared with or sold to 3rd party marketing companies.

4. Your rights under the KVKK

Pursuant to Article 11 of the KVKK, you have the following rights:

  • To learn whether your personal data is being processed
  • To request information if it is being processed
  • To learn the purpose of processing and whether it is used in accordance with this purpose
  • To know the third parties to whom it is transferred domestically/abroad
  • To request correction if it is incomplete/incorrectly processed
  • To request its erasure/destruction within the framework of the conditions in Article 7 of the KVKK
  • To object to a result obtained to your detriment by the exclusive analysis of processed data through automatic systems
  • To request compensation if you have suffered damage due to unlawful processing

To exercise your rights: destek@noendy.com

5. Cookie policy

We use 3 types of cookies on our site:

  • Mandatory cookies: Necessary for the site to function (cart, session, language preference). Cannot be disabled.
  • Analytical cookies: To understand which pages are visited and for how long (Google Analytics). Activated with your consent.
  • Marketing cookies: To show you more relevant ads. Activated with your consent.

You can change your cookie preferences at any time from the banner at the bottom of the page.

6. Data retention period

Your personal data is stored as long as your account is active and for the period necessary to provide our services. When you delete your account, your data will be deleted within 30 days (excluding legal retention obligations — e.g., invoice records for 10 years).

7. Security measures

Measures we take to protect your data:

  • SSL encrypted site (https)
  • Encrypted database
  • Two-factor authentication (for admin accounts)
  • Regular security audits
  • ETBIS registered vendor status

8. Communication and data request

For your questions or requests under the KVKK:

Email: destek@noendy.com
Address: Istanbul, Turkey
Data Controller: Noendy Eğitim ve Yayıncılık

Your requests will be answered within 30 days at the latest.