Cookie Policy

Last updated: 11 March 2026

1) Data controller and scope

This Cookie Policy applies when you visit and use the Levion Turkey website (the Store). The primary data controller for cookie‑related processing is Hera Ankara Ballo Organizasyon (the Seller), registered at Hacı Bayram Mah. Kosova Cad. 5/A, Altındağ, Ankara, with MERSIS/VKN numbers (0103054992000014/4660680017) and contact email support@leviontech.com. The Seller operates the Store under licence from Levion Technology Limited and uses various service providers (e‑commerce, analytics, marketing) to run the Store. Where Levion Technology Limited or its service providers process cookie data on our behalf they act as data processors.

Cookies and similar technologies (collectively cookies) are small files placed on your device when you visit the Store. Some cookies are strictly necessary for core functions (e.g. shopping cart, fraud prevention, security). Other cookies are optional and require your explicit consent under Turkish Personal Data Protection Law No. 6698 (KVKK) and the Aydınlatma metni/explicit consent rules.

2) Cookie categories and legal bases

Strictly necessary cookies (no consent required)
These cookies enable core functions such as remembering the items in your cart, processing payments securely, logging you in, and complying with security requirements. They are considered “kesinlikle gerekli çerezler” under KVKK and do not require your explicit consent. We process data via these cookies under the legal bases of contract performance (distance sales contract), legal obligation (fraud prevention) and legitimate interests (running the website securely).

Functional cookies (optional — consent required)
These cookies remember choices you make (language, region, preferences) and provide enhanced features. They are not necessary for the core operation of the Store, so we only place them if you give us explicit consent.

Analytics cookies (optional — consent required)
These cookies help us understand how visitors use the Store by collecting aggregated statistics about traffic sources, pages visited and user journeys. Examples include cookies used by Google Analytics or Shopify analytics. Analytics cookies are not “strictly necessary” and may only be set if you consent. We use your consent as the legal basis for processing.

Advertising/targeting cookies (optional — consent required)
These cookies (for example, Meta Pixel, TikTok Pixel or Google Ads cookies) allow us and our partners to measure ad performance and serve personalised ads. Because they track your browsing across the web, they require explicit opt‑in consent. If you reject them, they will not be set and you will still see ads, but they may be less relevant.

3) Cookie table

We maintain a detailed table listing each cookie set on the Store, including:

·       Cookie name – the name of the cookie file stored on your device.

·       Provider – who sets it (Levion, Shopify, Google, Meta, etc.). Third‑party cookies are set by our partners on our behalf.

·       Purpose – what the cookie does (e.g. remember basket, analyse site use, show targeted ads).

·       Category – strictly necessary, functional, analytics or advertising.

·       Retention period – how long the cookie stays on your device.

·       Legal basis – contract, legal obligation, legitimate interest or explicit consent.

Cookie name	Provider	Purpose	Category	Duration	Legal basis
_shopify_essential	Shopify	Core store / checkout function	Strictly necessary	1 year	Contract / legitimate interest
_shopify_essential_	Shopify	Device token for essential functions	Strictly necessary	1 year	Contract / legitimate interest
_shopify_test	Shopify	Checks browser cookie capability	Strictly necessary	1 minute	Legitimate interest
cart	Shopify	Stores cart data	Strictly necessary	2 weeks	Contract
cart_currency	Shopify	Keeps cart currency	Strictly necessary	2 weeks	Contract
discount_code	Shopify	Stores applied discount code	Strictly necessary	Session	Contract
localization	Shopify	Keeps country / localization choice	Functional or strictly necessary*	2 weeks	Contract / legitimate interest
login_with_shop_finalize	Shopify	Supports Shop login flow	Strictly necessary	5 minutes	Contract
shopify_pay	Shopify	Recognizes returning Shop Pay user	Strictly necessary	1 year	Contract
storefront_digest	Shopify	Password-protected storefront access	Strictly necessary	1 year	Legitimate interest / contract
_shopify_analytics	Shopify	Shopify storefront / checkout analytics	Analytics	1 year	Explicit consent
shop_analytics	Shopify	Shop-related analytics	Analytics	1 year	Explicit consent
_ga	Google Analytics 4	Distinguishes users	Analytics	2 years	Explicit consent
_ga_<container-id>	Google Analytics 4	Persists session state	Analytics	2 years	Explicit consent
_ttp	TikTok Pixel	Ad measurement / personalization	Advertising	13 months	Explicit consent
ttcsid_ / ttcsid_<pixel code>	TikTok Pixel	Ad measurement / attribution	Advertising	13 months	Explicit consent
ttclid	TikTok Pixel	Ad click attribution	Advertising	13 months	Explicit consent
_pangle	TikTok / Pangle	Ad network measurement	Advertising	13 months	Explicit consent
Meta Pixel cookies (verify live)	Meta	Ad measurement / audience matching	Advertising	Varies	Explicit consent

This table is available in the Cookie Settings panel on our website. We review and update the table regularly to reflect our current cookie use and will notify you of significant changes.

4) How we obtain and manage consent

We do not place any non‑essential cookies until you give us explicit consent. When you first visit the Store, a cookie banner appears with the following options:

·       Accept all – grants consent for functional, analytics and advertising cookies.

·       Reject optional – declines all optional cookies (only strictly necessary cookies will be set).

·       Manage preferences – allows you to choose which categories of optional cookies you consent to.

The banner provides a link to this Cookie Policy and the cookie settings panel. You can change your preferences at any time via the Cookie Settings link in our footer or by revisiting the banner. If you withdraw consent, we will disable optional cookies and stop processing the related data going forward, but this will not affect processing already carried out while consent was valid.

Opt‑in by default: We operate an opt‑in mechanism—optional cookies are off by default and only activate if you choose to accept them. This aligns with the Turkish Data Protection Board’s “opt‑in” guidance for cookies.

5) Recipients and international transfers

We may share cookie‑derived data with:

·       Service providers (e.g. Shopify, payment processors, shipping providers) who help us operate the Store. These providers act as data processors and process the data only on our instructions.

·       Analytics providers (e.g. Google Analytics) to analyse traffic and usage patterns.

·       Advertising partners (e.g. Meta, TikTok) to measure campaigns and, if you consent, serve personalised ads.

·       Law enforcement or regulators where legally required or to protect rights.

Some recipients may be located outside Türkiye. When we transfer personal data abroad, we implement safeguards (Standard Contractual Clauses or explicit consent) as required by KVKK and cross‑border transfer regulations. Details are provided in our Privacy Policy.

6) Retention periods

Cookie retention periods vary. Session cookies are deleted when you close your browser; persistent cookies remain until they expire. Our cookie table lists each cookie’s duration. We do not retain cookie data longer than necessary for its purpose and any legal retention obligations.

7) Your rights under KVKK

You have rights under Articles 11 and 12 of KVKK, including the right to:

·       Access your personal data processed via cookies.

·       Request correction of inaccurate or incomplete data.

·       Request deletion or anonymisation of personal data where conditions are met.

·       Object to processing based on legitimate interests.

·       Withdraw consent for optional cookies at any time via the Cookie Settings panel.

·       File a complaint with the Personal Data Protection Authority (KVKK) if you believe we have violated your data protection rights.

To exercise these rights, please contact us at support@leviontech.com.

8) Contact details

If you have questions about our cookie practices or this policy, please contact:

Data controller: Hera Ankara Ballo Organizasyon
Address: Hacı Bayram Mah. Kosova Cad. 5/A, Altındağ, Ankara
Support/Email: support@leviontech.com

Commercial Electronic Messages and IYS Consent Notice

Last updated: 11 March 2026

1) Who sends commercial electronic messages?

Marketing communications (campaigns, discounts, product news) are sent by Hera Ankara Ballo Organizasyon. Levion Technology Limited and its affiliates may operate customer‑support and content functions on behalf of the Seller. For questions about commercial electronic messages, please contact support@leviontech.com.

2) Types of messages and channels

Commercial electronic messages include marketing communications via email, SMS, voice calls, or messaging apps (e.g. WhatsApp). They do not include transactional messages required to fulfil your order (order confirmations, shipping updates, security alerts, warranty/service notices).

3) Consent requirement

Under the Electronic Commerce Regulation and the Ticari İletişim ve Ticari Elektronik İletiler Hakkında Yönetmelik, we may send marketing messages only if we have your prior explicit consent. Consent must be a clear affirmative action and cannot be pre‑selected or bundled with another agreement. You do not need to give consent to make a purchase — consent is entirely optional.

How we obtain consent

We obtain marketing consent in one of two ways:

·       Via the İleti Yönetim Sistemi (IYS) – If you provide consent through the national IYS platform, we receive this information directly from IYS. Consent is valid until you withdraw it.

·       Directly from you – We may request consent for specific channels during account registration or checkout. For each channel (email, SMS/WhatsApp, phone), we present a separate checkbox with clear wording (see sample texts below). The checkbox is not pre‑ticked and we record your positive choice. We do not make consent a condition for purchasing.

If we collect consent outside IYS, we must record it in IYS within three business days; unrecorded consents are invalid. We maintain proof of consent and will provide it to authorities if requested.

4) Right to refuse and withdrawal

You may withdraw your consent at any time and without giving a reason. When you refuse further marketing, it cancels the consent for that specific channel. After we receive your refusal, we must stop sending commercial electronic messages to you within three business days. We also report the refusal to IYS within three business days.

How to withdraw

·       Email – Click the “unsubscribe” link in any marketing email.

·       SMS – Reply to the message with the opt‑out keyword shown in the message.

·       WhatsApp – Reply with “STOP” or the keyword shown.

·       IYS – Log in to the İleti Yönetim Sistemi using your e‑Government account and manage your permissions.

·       Customer service – Email support@leviontech.com with your request.

We will honour your withdrawal across all applicable channels. Refusal does not prevent us from sending obligatory transactional messages (e.g. invoices, warranty information).

5) Recording and maintaining consents

We register and maintain marketing consents and refusals via IYS. Consents collected outside IYS must be recorded in IYS within three business days, and consents not recorded in IYS are invalid. Similarly, we must record refusals (opt‑outs) in IYS within three business days. We keep records of consents and refusals for at least one year after the consent expires or the transaction ends.

6) Exceptions (messages that do not require consent)

The law allows certain communications without separate marketing consent, for example:

·       Service updates – Notifications about order status, delivery, repairs, or changes to your purchase.

·       Membership/administrative messages – Where you have an ongoing subscription, membership or service relationship, messages relating to that service (e.g. payment reminders, account information, policy updates). These messages must not include marketing or promotional content.

·       Communications with traders and artisans – For business‑to‑business contacts (tacir, esnaf), marketing messages do not require prior consent, but recipients still have the right to refuse.

7) Complaints and IYS rights

If you believe you have received a marketing message without your consent or after withdrawing consent, you can:

1.      Contact us via support@leviontech.com so we can correct the situation.

2.      Use the İYS platform to withdraw consent or lodge a complaint. Through your e‑Government account you can see which brands have your consent and manage or cancel permissions.

3.      File a complaint with the Ministry of Trade’s local consumer authority (Tüketicinin Korunması ve Piyasa Gözetimi Genel Müdürlüğü) using the procedure described in Article 14 of the regulation.

We will cooperate fully with the Ministry and KVKK Authority in any investigation.