Privacy and Cookie Policy

Effective Date: 01.02.2025
Last Updated: 29.06.2025

1. Introduction

Yellow Cart Family Store LLC (“us” or “Company”) respects your privacy and is committed to protecting your personal data. This Privacy and Cookie Policy (“Policy”) describes how we process personal data we collect through www.ycfdigital.com (hereinafter, the “Site”) or through our other online services. Our corporate headquarters is [address in the United States], our legal registered address is [additional information], and we also operate in Turkey, European Union (EU) countries, the United Kingdom (UK), the United Arab Emirates, Qatar and other regions.

When processing your personal data, we comply with global regulations, including in particular the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the European Union General Data Protection Regulation (“GDPR”), the United Kingdom GDPR (“UK GDPR”), the California Consumer Privacy Act / California Privacy Rights Act (“CCPA/CPRA”), UAE and Qatar data protection legislation and all other applicable legal regulations and Google Consent Mode requirements.

2. The Data We Collect

2.1. Data Provided by the User

  • Data you share with us by filling out a form, such as name, surname, e-mail address, phone number, title or company information.
  • Additional information you provide through contact forms, surveys or newsletter subscription forms.

2.2. Automatically Collected Data

  • Through cookies and similar technologies; Usage data such as IP address, geographical location, device type, operating system, browser information, Site login-time stamp, pages clicked or duration of visit.
  • Visitor interactions with Google Analytics, Google Ads, Meta Pixel, Microsoft Advertising, TikTok Pixel or similar measurement tools (e.g. “remarketing/retargeting” cookies).

3. Method and Purposes of Data Collection

3.1. Contract and Performance of Service

  • Your data is processed to meet your contact requests, to respond to your requests for services or to perform our contracts.

3.2. Legitimate Interests

  • Ensuring site security and detecting abuse.
  • To improve our service quality, to improve user experience, to perform statistical analysis (e.g. performance cookies).

3.3. Explicit Consent and Marketing

  • To send personalized advertisements, retargeting, remarketing, newsletter and promotional content, to inform you about our campaigns. For this purpose, your data may be processed with advertising and marketing cookies if we have your consent.
  • Where required by the relevant legislation (GDPR, KVKK, etc.), you will be added to our marketing list to the extent that we obtain your explicit consent.

3.4. Legal Obligations

  • To fulfill tax, accounting or other regulatory requirements.

4. Use of Cookies

Cookies are used on the Website in compliance with Google Consent Mode v2. With CookieYes or a similar consent management platform, you can manage cookie categories and change your preferences at any time.

4.1. Cookie Types

  1. Mandatory (Essential) Cookies: Necessary for the operation of the site and generally provide basic functions such as login and security. These cookies can be used without consent; they cannot be disabled.
  2. Analytical/Performance Cookies: Collects statistical data such as number of visitors, traffic source, most visited pages. It is not activated without your consent.
  3. Advertising/Marketing (Remarketing) Cookies: Google Ads, Meta Pixel, Microsoft, TikTok etc. It is used so that we can show personalized ads or retargeting on platforms. It is not placed on your device without your consent.
  4. Functional Cookies: Used to improve some Site features, to remember your preferences (language selection, session information, etc.).

4.2. Cookie Management

When you first enter the site, you will be greeted with a cookie notification. Here you can determine your cookie settings using the “Accept All”, “Reject” or “Manage Preferences” options. No cookies other than the categories of cookies you have approved are used. You can update your cookie preferences or delete cookies at any time by clicking on the “Cookie Preferences” link on the Site or by changing your browser settings.

5. International Data Transfers

The data we collect may be stored and processed on servers in the United States of America, Turkey, European Union countries, United Kingdom, UAE, Qatar or other regions where [Company Name] and its service providers are located. In accordance with the relevant legislation, especially GDPR / KVKK, we ensure data security with Standard Contractual Clauses (SCCs) or similar protection mechanisms. In cases where explicit consent is required from users, we request this consent before transfer.

Of course, the “Data Sharing and Third Parties” text you refer to is fairly standard and comprehensive language for modern privacy policies. We can make it more holistic by updating it to include Obsidia Digital, your partner in Turkey, which we discussed in our previous conversation.

Below is the proposed updated text, combining the text you provided and the Obsidia Digital-related clause.

Proposed Updated Text

6. Data Sharing and Third Parties

The confidentiality and security of customer data is essential to us. Your data may be shared with the following parties only for the purpose of providing the service, fulfilling legal obligations and carrying out our business processes:

  • Affiliates and Strategic Business Partners: In order to improve service quality, manage operational processes and provide local support, customer data may be shared with Obsidia Digital, our business partner based in Turkey. This data transfer is limited to the necessity of the service and is carried out in accordance with the relevant data protection regulations.
  • Advertising and Analytics Partners: Data may be shared with platforms such as Google (Ads, Analytics), Meta (Facebook/Instagram), Microsoft (Bing/LinkedIn), TikTok through cookies or SDK (Software Development Kit) with your consent. These business partners may process data in accordance with their own privacy policies.
  • Service Providers (Data Processors): Data may be shared with external service providers from whom we receive technical services such as hosting, e-mail sending, customer support software, payment infrastructures. These providers are obliged to process data only in accordance with our instructions and by taking the necessary technical and administrative protection measures in accordance with the contract between us.
  • Legal Obligations: We may share your data to fulfill our legal obligations in accordance with a binding request from regulatory authorities or legally competent judicial and administrative authorities.
  • Business Transfer: In the event of a business transaction, such as a merger, spin-off, sale of some or all of its assets or acquisition by another company, your data may be transferred to the acquiring party. In such a case, users are informed in advance to the extent required by legal legislation.

7. Data Security

The Company implements technical and administrative measures to prevent loss, misuse or unauthorized access to personal data. For example, we take measures such as secure servers, data encryption, access control and privacy training for employees.

8. Data Retention Periods

Personal data are stored for as long as necessary for the purpose of processing or for the period stipulated by the relevant legal regulations. Data that no longer need to be processed are deleted, destroyed or anonymized.

9. Your Rights and Choices

9.1. Rights under Turkey (KVKK)

  • To learn whether your personal data has been processed or not, and to request information if it has been processed,
  • Learn the purpose of processing and whether it is used for its intended purpose,
  • To know the third parties to whom the data is transferred domestically or abroad,
  • Request correction in case the data is incomplete or incorrectly processed,
  • To request its deletion or destruction within the framework of the conditions stipulated in the relevant legislation,
  • Request notification of correction or deletion to third parties to whom the data is transferred,
  • Object to the occurrence of a result against you by analyzing the processed data through automated systems,
  • Claim compensation if you have suffered damage due to unlawful processing.

9.2. Rights under EU/EEA (GDPR) and UK (UK GDPR)

  • Access, rectification, erasure (right to be forgotten), restriction of processing,
  • Data portability,
  • Object to processing based on legitimate interest, including the right to object to direct marketing,
  • Withdraw consent at any time from processing activities to which you have given consent.

9.3. Rights under the US (CCPA/CPRA)

  • Request information about the categories of data processed and the purposes of their use,
  • Request deletion of your data (exceptions reserved),
  • Opt-out right for “Sale/Sharing of Personal Data”,
  • Request additional restrictions on sensitive data processing,
  • Not to be discriminated against for exercising these rights.

9.4. Other Regions

You have similar rights in the UAE, Qatar and other jurisdictions (access, rectification, deletion, opposition, etc.).

To exercise your rights,you can send an e-mail to için:info@ycfdigital.comor info@yellowcartfamilystore.com or manage your application via cookies banner.

10. Personalized Ads and Consent Management

We cooperate with platforms such as Google Ads, Facebook/Instagram, Microsoft (Bing/LinkedIn), TikTok for Remarketing/Retargeting and Personalized Ads. During these activities, cookies or advertising identifiers that analyze your user behavior may be used. We request your prior consent for the placement of such cookies. You can opt-out at any time by changing your cookie preferences or in the “Advertising Settings” section of the relevant platforms.

11. Policy Changes

This Policy may be updated from time to time in order to comply with current legislation and practices. If we make significant changes, we will notify you via the Site or other appropriate communication channels. Please review the current version regularly.

12. Communication

Please contact us if you have any questions, requests or complaints regarding this Policy or your personal data:

Yellow Cart Family Store LLC

30 N Gould St Ste N

Sheridan, WY 82801-6317
info@yellowcartfamilystore, info@ycfdigital.com
Phone: +905314003939 or +13074294018

Data Controller Mansur Sari

Address: Yesilova mah 4174/5 sok no:1 Izmir/ Turkey