Privacy policy

Privacy Clarification Text and Privacy Policy of XO Kids

Last updated: April 21, 2026

As XO Kids (hereinafter referred to as the "Data Controller"), we attach the utmost importance to the security of your personal data. XO Kids operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you with a curated shopping experience (the "Services"). XO Kids is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy (Clarification Text) describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction, or otherwise communicate with us. In the event of a conflict between our "Terms of Service" and this Policy, this Policy shall prevail regarding the processing of your personal data.

1. Identity of the Data Controller (Veri Sorumlusu)

In accordance with the Turkish Personal Data Protection Law (KVKK), the Data Controller is:

Trade Name: XO Kids
Address: Fevzi Paşa Caddesi, Fatih, Bolu, 34083, TR
Email: iletisim@xokids.com.tr

2. Personal Information We Collect or Process

When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you or another person. We will process the following categories of personal information (including inferences drawn from them) based on your interaction with the Services:

Contact details: including your name, address, billing address, shipping address, phone number, and email address.
Financial information: including credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, payment confirmation, and other payment details.
Account information: including your username, password, security questions, preferences, and settings.
Transaction information: including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.
Communications with us: including the information you include in communications with us, such as customer support inquiries.
Device information: including information about your device, browser, or network connection, your IP address, and other unique identifiers.
Usage information: including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

3. Sources and Methods of Collecting Personal Information

Your data is collected through automated and non-automated means from the following sources:

Directly from you: When you create an account, visit the Services, or communicate with us.
Automatically: From your device via Cookies and similar technologies when you use our products.
From our service providers: Who provide us with the necessary technology and process data on our behalf.
From partners: or other third parties.

4. Purposes of Data Processing and Legal Bases (Under KVKK)

We use your personal information for the following purposes based on the mentioned legal grounds:

Providing and Improving Services: (Basis: Performance of Contract / Legal Obligation). Includes processing payments, fulfilling orders, managing your account, shipping, returns, and customizing the shopping experience.
Marketing and Advertising: (Basis: Your Explicit Consent). To send promotional messages and display targeted advertisements based on your previous purchases.
Security and Fraud Prevention: (Basis: Legitimate Interest / Legal Obligation). To verify accounts and detect suspicious or illegal activities.
Communicating with You: (Basis: Performance of Contract). To provide customer support and respond to your requests.
Legal Reasons: (Basis: Legal Obligation). To comply with applicable laws or respond to requests from government agencies or legal investigations.

5. Disclosure of Personal Information (Transfer)

We may transfer your personal information to third parties for the following purposes:

With Shopify, vendors, and service providers (IT management, payment processing, shipping, cloud storage).
With business and marketing partners to provide personalized advertisements. These partners are subject to independent privacy policies.
When you direct us or consent, such as transferring data to shipping companies or via social media tools.
With affiliates within our corporate group.
In cases of merger or bankruptcy, or to comply with legal obligations (such as search warrants or subpoenas).

6. Relationship with Shopify and International Data Transfer

The Services are hosted by Shopify. Your data is transferred to and processed in other countries (outside of Turkey) to provide and improve the Services. According to Article 9 of the Turkish Law (KVKK), this transfer is based on:

Explicit consent granted by you when using the website.
Or the existence of recognized transfer mechanisms that ensure adequate data protection. Shopify uses advanced features that integrate your data from our store with other stores to improve services; in such cases, Shopify is responsible for data processing and responding to your rights-related requests.

7. Your Rights and Choices (Under Article 11 of the KVKK)

As a data subject, under the Turkish KVKK and other applicable laws, you have the right to:

Learn whether your personal data is being processed.
Request information if your personal data has been processed.
Learn the purpose of the processing and whether the data is used in accordance with that purpose.
Know the third parties to whom personal data is transferred (domestically or abroad).
Request rectification of personal data if it is incomplete or inaccurate.
Request the deletion or destruction of personal data under legal conditions.
Request notification of the rectification or deletion to third parties to whom the data has been transferred.
Object to any negative result arising from the analysis of data exclusively through automated systems.
Claim compensation for damages in the event that you suffer a loss due to the unlawful processing of data.

You may exercise these rights by contacting us at: iletisim@xokids.com.tr. You will not be discriminated against for exercising your rights, and we may require verification of your identity before processing the request.

8. Third-Party Websites and Links

Our website may contain links to external sites. We are not responsible for the privacy policies of these sites nor do we guarantee their accuracy. Information you share in public venues or social media platforms may be visible to others without restriction.

9. Children's Data

The Services are not intended for children, and we do not knowingly collect data from children under the age of majority. If you are a parent and discover your child has provided us with data, you may contact us to delete it. To date, we do not sell or share data of individuals under 16 years of age.

10. Security and Retention of Data

No 100% protection exists; therefore, we cannot guarantee "absolute security." We recommend not sending sensitive information via insecure channels. We follow legal destruction policies to determine the retention period based on the need for service, legal obligations, or dispute resolution.

11. Managing Communication Preferences

You may opt out of promotional emails via the "unsubscribe" link. We may continue to send non-promotional messages regarding your account or orders.

12. European Union 14-Day Cooling-Off Period

Notwithstanding the above, if the merchandise is being shipped into the European Union, you have the right to cancel the order within 14 days for any reason, provided the item is in its original condition with proof of purchase.

13. Complaints and Contact

For any inquiries or complaints, you may contact us:

Email: iletisim@xokids.com.tr
Address: Fevzi Paşa Caddesi, Fatih, Bolu, 34083, TR

Products