Privacy Policy

Last updated: September 2026

1. Who we are

Okan Toys manufactures and wholesales toys from Istanbul, Türkiye. For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the UK GDPR, we act as the data controller for personal data processed through this website and through our commercial correspondence.

Contact for any privacy question or request: WhatsApp (+90 539 322 75 77).

2. What data we collect

• Contact details you provide when you enquire: name, company name, email address, telephone number, and country.
• Commercial correspondence: the content of your enquiry, quotations issued, and order history.
• Technical data: IP address, browser type, pages viewed and referring URL, collected through cookies and analytics. See our Cookie Policy.

We do not knowingly collect special category data, and we do not ask for it. Please do not include sensitive personal information in enquiries.

3. Why we process it, and on what legal basis

• To respond to enquiries and issue quotations — necessary for steps taken at your request prior to entering a contract (Art. 6(1)(b)).
• To perform a sales contract — order processing, shipping documentation, invoicing (Art. 6(1)(b)).
• To meet legal obligations — tax, customs and commercial record-keeping under Turkish law (Art. 6(1)(c)).
• To operate and improve the website — our legitimate interest in a functioning, secure site (Art. 6(1)(f)).
• Marketing communications — only with your consent, which you may withdraw at any time (Art. 6(1)(a)).

4. International transfers

We are established in Türkiye, which is outside the European Economic Area and has not received an adequacy decision from the European Commission. Where we receive personal data from the EEA or the United Kingdom, transfers are made on the basis of Standard Contractual Clauses or, where applicable, your explicit consent, together with appropriate supplementary safeguards. A copy of the relevant transfer mechanism is available on request.

5. Who we share data with

We do not sell personal data. We share it only with:

• Freight forwarders and carriers, where necessary to ship your order and prepare customs documentation.
• Service providers who host this website and provide analytics, acting as processors under contract.
• Authorities, where we are required to do so by law.

6. How long we keep it

Enquiry correspondence is retained for up to three years from last contact. Records relating to concluded sales are retained for ten years where Turkish commercial and tax legislation requires it. Analytics data is retained according to the retention period set in the analytics tool, generally no more than 26 months.

7. Your rights

Subject to the conditions in the GDPR, you have the right to:

• request access to the personal data we hold about you;
• have inaccurate data corrected;
• request erasure of your data;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us on WhatsApp (+90 539 322 75 77). We respond within one month. If you believe we have not handled your data properly, you may lodge a complaint with your national supervisory authority.

8. Security

We apply technical and organisational measures appropriate to the risk, including encrypted transmission (TLS), access control on our systems, and limiting access to personal data to staff who need it to do their work.

9. Changes to this policy

We may update this policy. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.