Skip to main content

Privacy Policy, KVKK & Cookies

Last updated: April 2026

This page explains how YCF Digital (Yellow Cart Family Store LLC, trading as YCF Digital) processes personal data on ycfdigital.tech, our technology hub. This site is distinct from the Shopify apps we operate under the /fullcontentseo path — those apps have their own privacy policy required by Shopify Partner terms.

1. Data We Collect and Why

When you visit this site we collect a minimal set of technical and analytics data:

  • Server logs — IP address, user agent, requested URL, timestamp. Retained up to 30 days for security and debugging.
  • Analytics events — page views, click events, session duration via Google Analytics 4 (through Google Tag Manager). Only after you accept cookies.
  • Advertising measurement — Google Ads and Meta Pixel conversion events. Only after you accept cookies.
  • Contact submissions — if you email sales@ycfdigital.com we retain the message and any attachments to respond to you.

We do not collect sensitive categories of personal data (health, biometrics, religion, political opinion). We do not sell personal data. Payments are processed by Stripe — we never see or store full card numbers.

2. Legal Bases

  • Consent — analytics and advertising cookies, via the cookie banner and Google Consent Mode v2.
  • Legitimate interest — server logs, security monitoring.
  • Contract — if you become a customer, processing needed to deliver the service.
  • Legal obligation — tax records, anti-abuse cooperation.

3. International Transfers

Our infrastructure runs on a Hostinger VPS located in Europe, with replication and logs stored in the EU. Some third parties (Google, Meta, Stripe) may transfer data to the United States under Standard Contractual Clauses and applicable adequacy decisions.

4. Retention

  • Server logs: up to 30 days
  • Contact emails: up to 3 years unless you request earlier deletion
  • Analytics aggregates: up to 14 months (GA4 default)
  • Consent records (the choice you made in the cookie banner): up to 12 months, then we ask again

5. KVKK — Turkish Users

Under Turkey's Law No. 6698 on the Protection of Personal Data (KVKK), the data controller is YCF Digital (contact below). Under Article 11 of KVKK you have the right to:

  • learn whether your personal data is being processed;
  • request information about what has been processed;
  • learn the purpose and whether data is used consistently with it;
  • know third parties to whom data is transferred (domestic or abroad);
  • request correction of incomplete or inaccurate data;
  • request deletion or destruction under Article 7 where the reasons requiring processing have disappeared;
  • request notification to third parties of the above corrections or deletions;
  • object to outcomes arising solely from automated processing if they harm you;
  • claim compensation if you suffer damages from unlawful processing.

To exercise these rights, email info@ycfdigital.com with a clear request and proof of identity. We respond within 30 days.

6. Cookies

We implement Google Consent Mode v2. On your first visit all non-essential categories are denied by default; they become active only after you click Accept in the banner.

Categories

  • Essential — session, security, consent record. Cannot be disabled. No personal data sent externally.
  • Analytics — Google Analytics 4 (through GTM GTM-WLZHV6KS). Measures traffic and performance. Disabled until consent.
  • Advertising — Google Ads conversions, Meta Pixel. Disabled until consent.

You can withdraw your consent at any time by clearing cookies for this domain or by clicking the cookie preferences link in the footer.

7. Third-Party Integrations

  • Google Tag Manager, Google Analytics 4, Google Ads — Google LLC, USA
  • Meta Pixel — Meta Platforms Ireland Ltd
  • Stripe — Stripe Payments Europe Ltd (for customer billing)
  • Hostinger — Hostinger International Ltd (hosting)
  • Google Gemini API — server-side only, no end-user data

8. Security

TLS (Let's Encrypt) in transit. Credentials are stored in environment variables on the VPS, never committed to source control. Access is restricted to named administrators. We monitor rate-limiting and abuse.

9. Changes

We update this policy as the service evolves. Material changes are announced on this page with a new "Last updated" date.

10. Contact

YCF Digital — Yellow Cart Family Store LLC
Yeşilova Mah. 4174/5 Sok. No:1, Bornova, İzmir, Türkiye
30 N Gould St Ste R, Sheridan, WY 82801, USA
Email: info@ycfdigital.com · sales@ycfdigital.com
Phone (TR): +90 531 400 3939 · Phone (US): +1 307 429 4018

Shopify app users: for data collected inside our Shopify apps (store metadata, catalog content), please see the Shopify App Privacy Policy and Terms of Service.