Cookie Policy
Last updated: 11 March 2026
1) Data controller and scope
This Cookie Policy applies when you visit and use the Levion Turkey website (the Store). The primary data controller for cookie related processing is Hera Ankara Ballo Organizasyon (the Seller), registered at Hacı Bayram Mah. Kosova Cad. 5/A, Altındağ, Ankara, with MERSIS/VKN numbers (0103054992000014/4660680017) and contact email support@leviontech.com. The Seller operates the Store under licence from Levion Technology Limited and uses various service providers (ecommerce, analytics, marketing) to run the Store. Where Levion Technology Limited or its service providers process cookie data on our behalf they act as data processors.
Cookies and similar technologies (collectively cookies) are small files placed on your device when you visit the Store. Some cookies are strictly necessary for core functions (e.g. shopping cart, fraud prevention, security). Other cookies are optional and require your explicit consent under Turkish Personal Data Protection Law No. 6698 (KVKK) and the Aydınlatma metni/explicit consent rules.
2) Cookie categories and legal bases
Strictly necessary cookies (no consent required)
These cookies enable core functions such as remembering the items in your cart, processing payments securely, logging you in, and complying with security requirements. They are considered “kesinlikle gerekli çerezler” under KVKK and do not require your explicit consent. We process data via these cookies under the legal bases of contract performance (distance sales contract), legal obligation (fraud prevention) and legitimate interests (running the website securely).
Functional cookies (optional — consent required)
These cookies remember choices you make (language, region, preferences) and provide enhanced features. They are not necessary for the core operation of the Store, so we only place them if you give us explicit consent.
Analytics cookies (optional — consent required)
These cookies help us understand how visitors use the Store by collecting aggregated statistics about traffic sources, pages visited and user journeys. Examples include cookies used by Google Analytics or Shopify analytics. Analytics cookies are not “strictly necessary” and may only be set if you consent. We use your consent as the legal basis for processing..
Advertising/targeting cookies (optional — consent required)
These cookies (for example, Meta Pixel, TikTok Pixel or Google Ads cookies) allow us and our partners to measure ad performance and serve personalised ads. Because they track your browsing across the web, they require explicit optin consent. If you reject them, they will not be set and you will still see ads, but they may be less relevant.
3) Cookie table
We maintain a detailed table listing each cookie set on the Store, including:
- Cookie name – the name of the cookie file stored on your device.
- Provider – who sets it (Levion, Shopify, Google, Meta, etc.). Thirdparty cookies are set by our partners on our behalf.
- Purpose – what the cookie does (e.g. remember basket, analyse site use, show targeted ads).
- Category – strictly necessary, functional, analytics or advertising.
- Retention period – how long the cookie stays on your device.
- Legal basis – contract, legal obligation, legitimate interest or explicit consent.
| Cookie name | Provider | Purpose | Category | Duration | Legal basis |
|---|---|---|---|---|---|
| _shopify_essential | Shopify | Core store / checkout function | Strictly necessary | 1 year | Contract / legitimate interest |
| _shopify_essential | Shopify | Device token for essential | Strictly necessary | 1 year | Contract / legitimate |
| functions | interest | ||||
| _shopify_test | Shopify | Checks browser cookie capability | Strictly necessary | 1 minute | Legitimate interest |
| cart | Shopify | Stores cart data | Strictly necessary | 2 weeks | Contract |
| cart_currency | Shopify | Keeps cart currency | Strictly necessary | 2 weeks | Contract |
| discount_code | Shopify | Stores applied discount code | Strictly necessary | Session | Contract |
| localization | Shopify | Keeps country / localization choice | Functional or strictly necessary | 2 weeks | Contract / legitimate interest |
| login_with_shop_finalize | Shopify | Supports Shop login flow | Strictly necessary | 5 weeks | Contract |
| shopify_pay | Shopify | Recognizes returning Shop Pay user | Strictly necessary | 1 year | Contract |
| storefront_digest | Shopify | Password-protected storefront access | Strictly necessary | 1 year | Legitimate interest / contract |
| _shopify_analytics | Shopify | Shopify storefront / checkout analytics | Analytics | 1 year | Explicit consent |
| shop_analytics | Shop-related analytics | Password-protected storefront access | Strictly necessary | 1 year | Explicit consent |
| _ga | Google Analytics 4 | Distinguishes users | Analytics | 2 years | Explicit consent |
| _ga_<container-id> | Google Analytics 4 | Persists session state | Analytics | 2 year | Explicit consent |
| _ttp | TikTok Pixel | Ad measurement / personalization | Advertising | 13 months | Explicit consent |
| ttcsid_ / ttcsid_<pixel code> | TikTok Pixel | Ad measurement / attribution | Advertising | 13 months | Explicit consent |
| ttclid | TikTok Pixel | Ad click attribution | Advertising | 13 months | Explicit consent |
| _pangle | TikTok Pixel | Ad network measurement | Advertising | 13 months | Explicit consent |
| Meta Pixel cookies (verify live) | Meta | Ad measurement / audience matching | Advertising | Varies | Explicit consent |
This table is available in the Cookie Settings panel on our website. We review and update the table regularly to reflect our current cookie use and will notify you of significant changes.
4) How we obtain and manage consent
We do not place any nonessential cookies until you give us explicit consent. When you first visit the Store, a cookie banner appears with the following options:
- Accept all – grants consent for all cookies
- Reject optional – only necessary cookies
- Manage preferences – choose categories
The banner provides a link to this Cookie Policy and the cookie settings panel. You can change your preferences at any time via the Cookie Settings link in our footer or by revisiting the banner. If you withdraw consent, we will disable optional cookies and stop processing the related data going forward, but this will not affect processing already carried out while consent was valid.
Optin by default: We operate an optin mechanism—optional cookies are off by default and only activate if you choose to accept them. This aligns with the Turkish Data Protection Board’s “optin” guidance for cookies.
5) Recipients and international transfers
- Service providers (e.g. Shopify, payment processors, shipping providers) who help us operate the Store. These providers act as data processors and process the data only on our instructions.
- Analytics providers (e.g. Google Analytics) to analyse traffic and usage patterns.
- Advertising partners (e.g. Meta, TikTok) to measure campaigns and, if you consent, serve personalised ads.
- Law enforcement or regulators where legally required or to protect rights.Some recipients may be located outside Türkiye. When we transfer personal data abroad, we implement safeguards (Standard Contractual Clauses or explicit consent) as required by KVKK and crossborder transfer regulations. Details are provided in our Privacy Policy.
6) Retention periods
Cookie retention periods vary. Session cookies are deleted when you close your browser; persistent cookies remain until they expire. Our cookie table lists each cookie’s duration. We do not retain cookie data longer than necessary for its purpose and any legal retention obligations..
7) Your rights under KVKK
You have rights under Articles 11 and 12 of KVKK, including the right to:
- Access your personal data processed via cookies.
- ReqRequest correction of inaccurate or incomplete data.
- Request deletion or anonymisation of personal data where conditions are met.
- Object to processing based on legitimate interests.
- Withdraw consent for optional cookies at any time via the Cookie Settings panel.
- File a complaint with the Personal Data Protection Authority (KVKK) if you believe we have violated your data protection rights.
To exercise these rights, please contact us at support@leviontech.com.
8) Contact details
If you have questions about our cookie practices or this policy, please contact:
Data controller: Hera Ankara Ballo Organizasyon
Address: Hacı Bayram Mah. Kosova Cad. 5/A, Altındağ, Ankara
Email: support@leviontech.com
Commercial Electronic Messages and IYS Consent Notice (Türkiye)
Last updated: 11 March 2026
1) Who sends commercial electronic messages?
Marketing communications (campaigns, discounts, product news) are sent by Hera Ankara Ballo Organizasyon. Levion Technology Limited and its affiliates may operate customer support and content functions on behalf of the Seller. For questions about commercial electronic messages, please contact support@leviontech.com.
2) Types of messages and channels
Commercial electronic messages include marketing communications via email, SMS, voice calls, or messaging apps (e.g. WhatsApp). They do not include transactional messages required to fulfil your order (order confirmations, shipping updates, security alerts, warranty/service notices).
3) Consent requirement
Under the Electronic Commerce Regulation and the Ticari İletişim ve Ticari Elektronik İletiler Hakkında Yönetmelik, we may send marketing messages only if we have your prior explicit consent. Consent must be a clear affirmative action and cannot be preselected or bundled with another agreement. You do not need to give consent to make a purchase — consent is entirely optional.
How we obtain consent
We obtain marketing consent in one of two ways:
- Via the İleti Yönetim Sistemi (IYS) – If you provide consent through the national IYS platform, we receive this information directly from IYS. Consent is valid until you withdraw it.
- Directly from you – We may request consent for specific channels during account registration or checkout. For each channel (email, SMS/WhatsApp, phone), we present a separate checkbox with clear wording (see sample texts below). The checkbox is not preticked and we record your positive choice. We do not make consent a condition for purchasing.
If we collect consent outside IYS, we must record it in IYS within three business days; unrecorded consents are invalid. We maintain proof of consent and will provide it to authorities if requested.
4) Right to refuse and withdrawal
You may withdraw your consent at any time and without giving a reason. When you refuse further marketing, it cancels the consent for that specific channel. After we receive your refusal, we must stop sending commercial electronic messages to you within three business days. We also report the refusal to IYS within three business days.
How to withdraw
- Email – Click the “unsubscribe” link in any marketing email.
- SMS – Reply to the message with the opt-out keyword shown in the message.
- WhatsApp – Reply with “STOP” or the keyword shown.
- IYS – Log in to the İleti Yönetim Sistemi using your eGovernment account and manage your permissions.
- Customer service – Email support@leviontech.com with your request.
We will honour your withdrawal across all applicable channels. Refusal does not prevent us from sending obligatory transactional messages (e.g. invoices, warranty information).
5) Recording and maintaining consents
We register and maintain marketing consents and refusals via IYS. Consents collected outside IYS must be recorded in IYS within three business days, and consents not recorded in IYS are invalid. Similarly, we must record refusals (opt-outs) in IYS within three business days. We keep records of consents and refusals for at least one year after the consent expires or the transaction ends.
6) Exceptions (messages that do not require consent)
The law allows certain communications without separate marketing consent, for example:
- Service updates – Notifications about order status, delivery, repairs, or changes to your purchase.
- Membership/administrative messages – Where you have an ongoing subscription, membership or service relationship, messages relating to that service (e.g. payment reminders, account information, policy updates). These messages must not include marketing or promotional content.
- Communications with traders and artisans – For business-to-business contacts (tacir, esnaf), marketing messages do not require prior consent, but recipients still have the right to refuse.
7) Complaints and IYS rights
If you believe you have received a marketing message without your consent or after withdrawing consent, you can:
- Contact us via support@leviontech.com so we can correct the situation.
- Use the İYS platform to withdraw consent or lodge a complaint. Through your eGovernment account you can see which brands have your consent and manage or cancel permissions.
- File a complaint with the Ministry of Trade’s local consumer authority (Tüketicinin Korunması ve Piyasa Gözetimi Genel Müdürlüğü) using the procedure described in Article 14 of the regulation.
We will cooperate fully with the Ministry and KVKK Authority in any investigation.
