Cookies on this site

We use cookies that are strictly necessary for the shop to work. With your consent we would also use optional cookies for preferences, analytics and marketing. Accept or reject them, or choose per category — you can change your choice at any time under “Cookie preferences” at the bottom of every page. Cookie policy

Cookie preferences

  • Free shipping within Türkiye
  • 13 herbs · no added sugar
  • A lower monthly price on longer packs
  • Returns within 14 days, no questions asked
  • Shipping worldwide
HerbaltoX
Sign inCreate account
My favourites

Privacy Policy

PRIVACY POLICY

Last Updated: 05.11.2025

1. INTRODUCTION

Herbaltox Gıda Limited Şirketi (“Herbaltox”, “we”, “us”, "our") respect your privacy and are committed to protecting your personal data when using the https://www.herbaltox.com website and our services.

This Privacy Policy explains how we collect, use, store and protect your personal data. By using our website, you agree to this Privacy Policy.

2. DATA CONTROLLER INFORMATION

Data Controller: Herbaltox Food Limited Company
Address: Ataturk Mahallesi Irfan Sokak No:10/A Umraniye / Istanbul / Turkey
Mersis No: 0461118064300001
E-mail: info@herbaltox.com
Phone: +90 532 064 18 79

You can use the contact information above for questions regarding your personal data.

3. PERSONAL DATA COLLECTED

3.1. ORDER AND ACCOUNT INFORMATION

We collect the following information when you place an order or create an account:
- Name, surname or company title
- Email address
- Phone number
- Delivery address
- Billing address
- TR Identity Number or Tax Number (for invoice)

3.2. PAYMENT INFORMATION

Payment processing:
- We DO NOT collect your credit card information DIRECTLY
- Your payment information is processed by secure payment infrastructure providers (3D Secure)
- We only store payment confirmation information and the last 4 digits

3.3. TECHNICAL DATA

Information collected automatically when you visit our website:
- IP address
- Browser type and version
- Operating System
- Pages visited
- Date and time of visit
- Referrer site
- Device information

3.4. COOKIE DATA

We use cookies and similar technologies. For detailed information, you can review the “Cookie Policy”.

4. PURPOSES OF USE OF PERSONAL DATA

We use your personal data for the following purposes:

4.1. ORDER MANAGEMENT
- Receiving and processing your orders
- Delivering the products to you
- Inform about the order status
- Invoice issuance

4.2. CUSTOMER SERVICES
- Answering your questions
- Resolving support requests
- Managing returns and exchanges
- Handling complaints

4.3. LEGAL OBLIGATIONS
- Invoice storage as required by tax legislation
- Accounting records
- Consumer arbitration committee and court requests

4.4. SECURITY AND FRAUD PREVENTION
- Detecting fraudulent orders
- Prevent security breaches
- Preventing unauthorized access

4.5. MARKETING (WITH PERMISSION)
- Send email newsletters (only if you give your permission)
- Campaign and discount notifications
- New product announcements

4.6. WEBSITE IMPROVEMENT
- Improving user experience
- Analyze site performance
- Troubleshoot bugs and issues

5. LEGAL BASES

We process your personal data in accordance with the following legal bases:

- Your explicit consent (e.g. marketing emails)
- Establishment and performance of the contract (order transactions)
- Our legal obligations (invoice storage, tax declaration)
- Our legitimate interests (security, fraud prevention)

6. SHARING OF PERSONAL DATA

We may share your personal data with the following parties:

6.1. CARGO COMPANIES
- Cargo companies such as UPS, DHL
- Your name, address, phone details are shared for delivery

6.2. PAYMENT PROVIDERS
- Secure payment infrastructure providers
- 3D Secure verification systems
- Your credit card details are processed directly by these companies

6.3. LEGAL AUTHORITIES
- Court decisions
- Prosecution requests
- Law enforcement (in case of legal obligation)

6.4. SERVICE PROVIDERS
- Email delivery services (newsletter)
- Cloud server providers
- Analytics tools (Google Analytics)
- Customer support software

6.5. SITUATIONS WE WILL NOT SHARE
- We NEVER sell your personal data to third parties
- We do not give it to advertising companies for marketing purposes
- We do not use it for other purposes without your consent

7. INTERNATIONAL DATA TRANSFER

7.1. FOREIGN CUSTOMERS
- For international orders, your data is shared with international cargo companies
- GDPR compliant data transfer to EU countries

7.2. CLOUD SERVICES
- Some of your data may be stored on secure servers abroad
- Transfers to countries with adequate levels of protection
- Protection is ensured by data processing agreements

8. STORAGE PERIOD OF PERSONAL DATA

We only retain your data for as long as necessary:

- Order and billing information: 10 years (according to tax legislation)
- Account information: As long as the account is active
- Marketing authorizations: Until the authorization is withdrawn or 2 years (whichever comes first)
- Technical logs: 6 months - 1 year
- Return/complaint records: 3 years

After the retention periods have expired, your data will be securely deleted or anonymized.

9. SECURITY MEASURES

We take the following measures to protect your personal data:

9.1. TECHNICAL MEASURES
- SSL/TLS encryption (HTTPS)
- Secure server infrastructure
- Firewall protection
- Regular security scans
- Backup systems

9.2. ADMINISTRATIVE MEASURES
- Personnel confidentiality trainings
- Limited access authorizations
- Confidentiality agreements
- Data processing procedures

9.3. PHYSICAL MEASURES
- Secure office and warehouse
- Physical access control
- Secure document destruction

10. COOKIES AND TRACKING TECHNOLOGIES

We use various cookies on our website. For detailed information, you can review the “Cookie Policy”.

The types of cookies we use:
- Mandatory cookies (site functions)
- Performance cookies (Google Analytics)
- Functionality cookies (language, currency preferences)
- Marketing cookies (advertising platforms - with your consent)

You can set or reject your cookie preferences.

11. THIRD PARTY SERVICES

Third party services used on our website:

11.1. GOOGLE ANALYTICS
- Anonymous user statistics
- Site performance analysis
- IP anonymization active
- Privacy Policy: https://policies.google.com/privacy

11.2. SOCIAL MEDIA INTEGRATIONS
- Facebook, Instagram, Twitter plugins
- Social media sharing buttons
- These platforms have their own privacy policies

11.3. PAYMENT SYSTEMS
- 3D Secure infrastructure
- PCI-DSS compliant systems
- Privacy policies of payment providers apply

12. YOUR RIGHTS (KVKK ARTICLE 11)

Within the scope of KVKK numbered 6698, you have the following rights:

a) Learn whether your personal data is being processed
b) Request information if processed
c) Learning the purpose of processing and whether it is used in accordance with its purpose
d) Knowing the third parties to whom it is transferred domestically or abroad
e) Request correction if incomplete or incorrectly processed
f) To request deletion or destruction within the framework of the conditions stipulated in the KVKK
g) To request notification of correction, deletion and destruction to third parties to whom personal data are transferred
h) To object to any result against you due to analysis by automated systems
i) Request compensation for damages if you suffer damage due to unlawful processing

12.1. APPLICATION METHOD

To exercise your rights:

E-mail: info@herbaltox.com
Mail Herbaltox Food Limited
Ataturk Mahallesi Irfan Sokak No:10/A
Umraniye / Istanbul / Turkey

In your application: Name-surname, contact information, subject of request.
Authentication may be required.

12.2. RESPONSE TIME

We will respond to your application within 30 days at the latest. If the process requires cost, the tariff determined by the Personal Data Protection Board is applied.

13. MARKETING COMMUNICATION

13.1. E-MAIL NEWSLETTERS

We obtain your explicit consent to send marketing emails. At any time:
- Using the “Unsubscribe” link in the email
- By sending an e-mail to info@herbaltox.com
- By changing your account settings
you can exit marketing communications.

13.2. SMS AND TELEPHONE

We do not do SMS or telemarketing.

14. CHILDREN'S PRIVACY

Our website is intended for users over the age of 18. We do not knowingly collect personal data from children under the age of 18. If you are under the age of 18, do not use our website or provide personal information without the permission of your parent or guardian.

If we become aware that erroneous data has been collected from a person under 18, we will delete it immediately.

15. GDPR (FOR EUROPEAN UNION CITIZENS)

EU citizens have additional rights under the GDPR:

- Right to data portability
- Right to be forgotten (erasure)
- Right to object to processing
- Right to challenge automated decision-making

If you are resident in the EU, you have the right to complain to your local data protection authority.

16. LINKS

Our website may contain links to third party websites. We are not responsible for the privacy practices of these sites. When you visit another site, we encourage you to read that site's privacy policy.

17. POLICY CHANGES

We may update this Privacy Policy from time to time. Significant changes:
- We will make an announcement on the website
- We will notify you by e-mail (in case of important changes)

We recommend that you check the current version regularly.
The last update date is indicated at the top of the page.

18. CONTACT

For questions about our privacy practices:

Herbaltox Food Limited Company
Ataturk Mahallesi Irfan Sokak No:10/A
Umraniye / Istanbul / Turkey
E-mail: info@herbaltox.com
Phone: +90 532 064 18 79
Web: https://www.herbaltox.com

Last Updated: 05.11.2025

This Privacy Policy has been prepared in accordance with the Personal Data Protection Law No. 6698 (KVKK), EU General Data Protection Regulation (GDPR) and related legislation.