At LEA Olive Oil, we take care of the personal data you share with us when you visit our website, place an order or get in touch. This notice is provided under Article 10 of the Turkish Law No. 6698 on the Protection of Personal Data (the «Law», known in Türkiye as KVKK) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It explains which of your data we process, why and on what legal basis, who we share it with, and how you can exercise your rights. This notice is governed by the laws of the Republic of Türkiye. This English text is provided for information; in case of any discrepancy, the Turkish version prevails.
Last updated: 22.10.2026
1. Data Controller
Your personal data is processed by the following business, acting as data controller:
- Legal name: MİLANUS DANIŞMANLIK ANONİM ŞİRKETİ (Milanus Danışmanlık A.Ş.)
- Brand: LEA Olive Oil
- Address: Acıbadem Mah. Akçaağaç Sok. No: 7 D: 15, 34660 Üsküdar / İstanbul, Türkiye
- MERSIS No.: 0621051841700016
- Tax Office / Tax No.: Üsküdar Tax Office / 6210518417
- Registered e-mail (KEP): milanusdanismanlik@hs01.kep.tr
- E-mail: info@leaoliveoil.com
- Phone: +90 530 510 79 42
- Website: https://leaoliveoil.com
2. The Personal Data We Process
We only process the data we need to serve you. Depending on how you use our website, some or all of the following may apply.
- Identity: First name and surname. If you ask for a company invoice, your company name; where required to issue an invoice, your Turkish ID number.
- Contact: E-mail address, phone number, delivery and billing address.
- Customer transactions: Order number and date, the products ordered, the amount, whether the payment was approved, the shipment tracking number, withdrawal and return requests, and your e-mail and WhatsApp messages with us.
- Financial: Invoice details; if you ask for a company invoice, your tax office and tax number. Your card details never reach us (see Section 5).
- Account and security: If you open a «My Account» membership, your username and e-mail address; your password is not stored in plain text. IP addresses and activity logs kept to run the website securely.
- Marketing and analytics: Only if you accept cookies: cookie and device identifiers, browser and device information, the pages you visit, and on-site actions such as adding to cart and purchasing.
We do not ask for or process special categories of personal data (such as health, religious or biometric data). Please do not include such information in your messages to us.
3. Purposes and Legal Bases
We process your personal data for the purposes below, relying on the legal bases set out in Article 5 of the Law.
| Purpose | Data processed | Legal basis |
|---|---|---|
| Receiving, confirming, preparing and delivering your order | Identity, contact, customer transactions | Formation or performance of a contract (Art. 5(2)(c)) |
| Taking your payment and handling declined or refunded payments | Identity, contact, customer transactions | Formation or performance of a contract (Art. 5(2)(c)) |
| Issuing your invoice and keeping accounting and tax records | Identity, contact, financial, customer transactions | Expressly provided for by law (Art. 5(2)(a)) and compliance with our legal obligations (Art. 5(2)(ç)) |
| Handling withdrawal, return, exchange and complaint requests; keeping records of the agreement and pre-contract information | Identity, contact, customer transactions | Performance of a contract (Art. 5(2)(c)) and legal obligation (Art. 5(2)(ç)) |
| Answering your questions by e-mail and WhatsApp | Identity, contact, message content | Formation or performance of a contract (Art. 5(2)(c)); for questions unrelated to an order, our legitimate interests (Art. 5(2)(f)) |
| Creating and managing your «My Account» membership and showing your order history | Identity, contact, account details, customer transactions | Formation or performance of a contract (Art. 5(2)(c)) |
| Keeping the website secure, making backups and preventing misuse | Account and security | Legitimate interests (Art. 5(2)(f)) |
| Protecting our rights in a dispute and responding to requests from competent authorities | Relevant records | Establishment, exercise or protection of a right (Art. 5(2)(e)) and legal obligation (Art. 5(2)(ç)) |
| Measuring website traffic, assessing our advertising and showing you relevant ads | Marketing and analytics | Explicit consent (Art. 5(1)) – the consent you give in the cookie banner |
We do not use your data for any other purpose. If a new purpose arises, we will inform you before we start processing for it.
4. Cookies and Analytics Tools
Cookies that are strictly necessary for the website to work, such as those that remember your cart, are always active. Analytics and marketing cookies run only if you accept them in the cookie banner. With these cookies we use the following tools:
- Google Analytics 4 and Google Site Kit: to measure website traffic and usage;
- Google Ads and Google for WooCommerce (Google Merchant Center): to measure the performance of our ads and product listings;
- Meta Pixel (Meta for WooCommerce): to measure the performance of our Facebook and Instagram ads and to show you relevant ads.
You can withdraw or change your consent at any time through the cookie banner or cookie settings. You can shop with us whether or not you accept these cookies. The list of cookies, their purposes and how long they last are set out in our Cookie Policy.
Cookie consent is a separate act of explicit consent; reading this notice does not mean you have given it.
5. Who We Share Your Data With
We share your data only as far as needed for the purposes above, in line with Articles 8 and 9 of the Law. We do not sell your data.
5.1. Recipients in Türkiye
| Recipient | Data shared | Purpose |
|---|---|---|
| PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. | Name, e-mail, phone, address, IP address, order amount and contents | Taking your payment. You enter your card details in the PayTR field on the payment page; they are processed directly by PayTR and are never held on our systems. |
| Kargonomi and our contracted shipping companies | Name, delivery address, phone, shipment details | Delivering your order and tracking the shipment |
| BizimHesap (accounting and e-invoicing software) | Name / company name, billing address, tax details or Turkish ID number, order amount | Issuing invoices and keeping accounting records |
| Our accountant | Invoice and accounting records | Meeting our tax and accounting obligations |
| The Turkish Revenue Administration and other competent public authorities, courts | Records required by law or requested by a competent authority | Our legal obligations, including e-invoice / e-archive reporting |
| Veridyen Bilişim Teknolojileri San. ve Tic. Ltd. Şti. (hosting; servers in İstanbul) | All records held on the website | Hosting the website |
| Veridyen Bilişim (backups are kept on the website’s own server) | Backups of the website database | Protecting against data loss |
| Veridyen Bilişim (the website’s mail server) | Name, e-mail, order details | Sending transactional e-mails such as order confirmations and shipping notices |
If the servers of our hosting, backup or e-mail provider are located outside Türkiye, that transfer is subject to the rules in Section 5.2.
5.2. Transfers outside Türkiye
The servers of the following services may be located outside Türkiye, in which case your data is transferred abroad:
- Google (Google Analytics 4, Google Ads, Google Merchant Center): analytics and marketing data, only if you accept cookies;
- Meta Platforms (Meta Pixel): analytics and marketing data, only if you accept cookies;
- WhatsApp: when you message us on WhatsApp, your messages are processed on WhatsApp’s infrastructure;
- Yandex (Yandex 360 e-mail service): e-mails you send to info@leaoliveoil.com and our replies.
These transfers rely on the appropriate safeguards provided for in Article 9 of the Law (standard contracts with the service providers) and, for e-mails and WhatsApp messages you choose to send us, occasional transfers necessary for entering into and performing the contract. Analytics and marketing cookies additionally depend on the consent you give in the cookie banner.
6. How We Collect Your Data
We collect your personal data directly from you, electronically and partly by automated means, through:
- the order and payment forms and the «My Account» registration form;
- e-mails you send to info@leaoliveoil.com and your WhatsApp messages;
- cookies and similar technologies, if you have accepted them;
- server and activity logs generated automatically while the website runs.
Documents you send us in writing or by post are collected by non-automated means.
7. How Long We Keep Your Data
We keep your data for as long as needed for the purpose it was collected for and for the periods required by law:
- Invoices, orders and accounting records: for the periods set by the Turkish Tax Procedure Law and the Turkish Commercial Code, up to 10 years.
- «My Account» membership: for as long as your account remains open. When you ask us to close it, your account details are deleted, except for order and invoice records we are required by law to keep.
- E-mail and WhatsApp messages: 3 years after the request is resolved; messages about an order are kept with that order’s records for 10 years.
- Website backups: Up to 1 year; older backups are deleted as new ones are made.
- Cookie data: for the period stated for each cookie in the Cookie Policy.
Once the period ends, your data is deleted, destroyed or anonymised.
8. Your Rights
Under Article 11 of the Law, you may contact us to:
- find out whether your personal data is being processed;
- request information about it if it has been processed;
- find out the purpose of the processing and whether your data is used accordingly;
- know the third parties, in Türkiye or abroad, to whom your data has been transferred;
- ask for incomplete or inaccurate data to be corrected;
- ask for your data to be deleted or destroyed under the conditions set out in Article 7 of the Law;
- ask for any correction, deletion or destruction to be notified to the third parties your data has been transferred to;
- object to an outcome against you that arises solely from the automated analysis of your data;
- claim compensation if you suffer damage because your data was processed unlawfully.
Where processing is based on your explicit consent, you may withdraw that consent at any time; withdrawal does not affect processing carried out before it.
9. How to Apply
Under the Communiqué on the Procedures and Principles for Applications to the Data Controller, applications must be submitted in Turkish. You can send your application in any of the following ways:
- In writing: a signed letter delivered by hand or by post to the address in Section 1;
- By e-mail: to info@leaoliveoil.com, from the e-mail address you have previously given us and which is registered in our system;
- By KEP, secure electronic signature or mobile signature: by KEP to milanusdanismanlik@hs01.kep.tr, or by e-mail to info@leaoliveoil.com signed with a secure electronic signature or mobile signature
Your application must include:
- your first name, surname and, for written applications, your signature;
- your Turkish ID number if you are a Turkish citizen; if not, your nationality and passport number, or your ID number if you have one;
- your residential or business address for notifications;
- your e-mail address and phone number for notifications, if any;
- the subject of your request, with any supporting documents.
We will resolve your application free of charge within 30 days at the latest. If the request involves an additional cost, only the fee set in the Communiqué may be charged. We will reply in writing or electronically. If your application is rejected, you find our reply insufficient, or we do not reply in time, you may file a complaint with the Turkish Personal Data Protection Board under Article 14 of the Law.
10. Orders Placed on Trendyol
When you buy our products on Trendyol, the details you give with your order are processed under Trendyol’s own privacy notice. Trendyol shares with us the details we need to prepare and ship your order (name, delivery address and order contents), and we use them only to deliver and invoice your order.
11. Changes to This Notice
We update this notice when our processing activities or the law change. The current version is always available on this page; the date at the top shows when it was last updated.