Privacy Policy

Last updated: July 2026  ·  All Legal Pages

1. About This Policy

This Privacy Policy explains how Mooseloom ("we," "us," or "our") collects, uses, stores, and protects personal data when you visit mooseloom.com or submit an inquiry through our website. We are a private label textile and manufacturing company registered in Bursa, Turkey.

We process personal data in accordance with the Turkish Law on the Protection of Personal Data No. 6698 ("KVKK") and, where applicable, the European Union General Data Protection Regulation ("GDPR") for visitors from EU/EEA countries.

2. Data Controller

Company: Mooseloom
Address: Bursa, Turkey
Email: [email protected]
Website: mooseloom.com

3. What Personal Data We Collect

We collect only the data you voluntarily provide to us. Depending on which form you use, this may include:

Category	Data Fields	Purpose
Identity	Legal first name, legal last name	To identify the applicant and personalize correspondence
Contact	Email address, phone number, country	To respond to your inquiry or application
Business	Brand or company name, website, Instagram handle	To evaluate your production project
Project Details	Product category, quantity, timeline, budget, materials, packaging, tech pack status, project description	To assess feasibility and provide accurate production information
Technical	IP address, browser type, pages visited, timestamps	Security, fraud prevention, and analytics

4. Legal Basis for Processing

We process your personal data on the following legal grounds under KVKK Article 5:

• Explicit consent (KVKK Art. 5/1): where you have given clear consent, such as subscribing to updates
• Performance of a contract or pre-contractual steps (KVKK Art. 5/2-c): when you submit a project application, processing your data is necessary to evaluate and respond to your request
• Legitimate interest (KVKK Art. 5/2-f): for security, fraud prevention, and improving our services
• Legal obligation (KVKK Art. 5/2-a): where required by Turkish law

5. How We Use Your Data

• To review and respond to project applications and general inquiries
• To evaluate production feasibility, sampling, MOQ, pricing, and timelines
• To communicate with you about your project
• To maintain records required by Turkish commercial and tax law
• To protect against spam, fraud, and abuse of our contact systems
• To improve our website and services through anonymized analytics

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share data with trusted third parties only where necessary:

• Resend (email service): Used to deliver notification emails when you submit a form. Your email address and name are transmitted to Resend servers to send email. Resend is compliant with standard data protection requirements.
• Cloudflare: Our website and API infrastructure is hosted on Cloudflare. Cloudflare processes technical data including IP addresses as part of its network services. Cloudflare is SOC 2 Type II certified.
• Legal authorities: We may disclose data if required by Turkish courts, law enforcement, or regulatory bodies under applicable law.

7. International Data Transfers

Our infrastructure providers (Cloudflare, Resend) operate globally. By submitting data through our website, you acknowledge that your data may be processed outside of Turkey. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with KVKK Article 9 and applicable regulations in force from June 1, 2024.

8. Data Retention

Data Type	Retention Period
Project application data	5 years from submission, or for the duration of any business relationship
General contact messages	2 years from submission
Technical / server logs	90 days
Email correspondence	5 years in accordance with Turkish Commercial Code (TTK)

After the applicable retention period, personal data is securely deleted or anonymized.

9. Your Rights

Under KVKK Article 11, you have the right to:

• Learn whether your personal data is being processed
• Request information about the purpose and whether it is being used in accordance with that purpose
• Know the third parties to whom your data has been transferred
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data where the conditions in KVKK Article 7 are met
• Object to processing carried out through automated systems that produces unfavorable results for you
• Claim compensation for damages arising from unlawful processing

To exercise these rights, please use our Data Subject Rights Application Form or email us at [email protected].

You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK Kurumu) at www.kvkk.gov.tr.

10. Cookies

We use minimal cookies on mooseloom.com. For full details, please read our Cookie Policy.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. Our infrastructure is hosted on Cloudflare's enterprise-grade network with TLS encryption on all data transmissions. Access to personal data within our organization is strictly limited to authorized personnel.

12. Children

Our website and services are intended for business use by adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. The date at the top of this page indicates when it was last updated. Continued use of our website after any changes constitutes acceptance of the updated policy.

14. Contact

For any questions about this Privacy Policy or your personal data:
Email: [email protected]
Post: Mooseloom, Bursa, Turkey