Privacy policy

We use your data only to deliver your order and answer your questions. The details are below.

Privacy notice

Protection of your personal data

Last updated: September 2026

Data controller

Roaster Lab Kahve Sanayi ve Ticaret Ltd. Şti. ("Roaster Lab", "we"), located in Çankaya, Ankara, is the data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"). This notice explains how your personal data is processed when you use the roasterlab.com.tr website, place an order, sign up to our newsletter or contact us.

What we collect

  • Order data: name, delivery address, phone number, email address, order contents and invoicing details.
  • Contact data: what you write in the contact, wholesale and course forms, and messages you send us by email or WhatsApp.
  • Newsletter data: your email address and sign-up date.
  • Technical data: the limited log records needed to run the website (IP address, browser type, pages visited). Your cart is stored only in your own browser (localStorage) and is not sent to us.

We do not collect or store payment card details. When online payment is introduced, payments will be processed through a licensed payment institution and this notice will be updated.

Why we process it and on what legal basis

  • To prepare, deliver and invoice your order (performance of a contract, KVKK art. 5/2-c; legal obligation, art. 5/2-ç).
  • To answer your questions and follow up your request (legitimate interest, art. 5/2-f).
  • To send the newsletter with your explicit consent (art. 5/1). You can opt out at any time using the link at the bottom of every email.
  • To keep the website secure and fix errors (legitimate interest, art. 5/2-f).

Who we share it with

We share your data only with parties strictly needed to provide the service: the courier delivering your parcel, the accounting and e-invoicing provider issuing your invoice, the infrastructure provider hosting our website, and the newsletter delivery service. Some of these providers may have servers abroad; in that case the transfer is made in line with KVKK art. 9. We never sell your data to third parties.

How long we keep it

Order and invoice data for 10 years as required by tax law; contact form messages for 2 years; your newsletter record until you opt out; technical logs for no more than 6 months.

Cookies

Our website uses no advertising or tracking cookies. It only uses your browser's local storage to remember your language preference and your cart; this data is not transmitted to us.

Your rights

Under KVKK art. 11 you have the right to learn whether your personal data is processed, to request information if it is, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred in Türkiye or abroad, to request correction if it is incomplete or inaccurate, to request deletion or destruction, to request that these actions be notified to third parties, to object to a result that is to your detriment arising from analysis by automated systems, and to claim compensation if you suffer damage.

To exercise these rights, write to merhaba@roasterlab.com.tr or to the postal address above. We resolve requests free of charge within 30 days at the latest. If you are not satisfied with our answer, you may lodge a complaint with the Personal Data Protection Board.

Changes

We update this notice when needed; the current version is always published on this page.