PRIVACY POLICY

Last updated: September 14, 2026

Bist operates this online store and website, including all related information, content, features, tools, products and services, in order to provide you with a personalized shopping experience (the “Services”). Bist is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction through the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing or disclosure of your personal information, this Privacy Policy will apply.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood how your information is collected, used and disclosed as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information”, we mean information that identifies you or another person, or that can reasonably be linked to you or another individual.

Depending on how you interact with the Services, where you live and what is permitted or required by applicable law, we may collect or process the following categories of personal information:

• Contact information: name, address, billing address, shipping address, phone number and email address.
• Financial information: payment card details, financial account information, transaction details, payment method and payment confirmation information.
• Account information: username, password, security information, preferences and settings.
• Transaction information: products you view, add to your cart or wishlist, purchase, return, exchange or cancel, as well as your transaction history.
• Communications with us: information you provide when contacting us or requesting customer support.
• Device information: information about your device, browser, network connection, IP address and other identifiers.
• Usage information: information about how and when you interact with or browse the Services.

Sources of Personal Information

We may collect personal information:

• Directly from you when you create an account, place an order, use the Services or contact us.
• Automatically through the Services, including through cookies and similar technologies.
• From service providers that collect or process information on our behalf.
• From business partners and other third parties.

How We Use Your Personal Information

Providing and Improving the Services

We use personal information to perform our contractual obligations to you, process payments, fulfill and ship orders, manage customer accounts, process purchases, returns and exchanges, provide customer support and improve the shopping experience.

We may also use information to provide product recommendations and personalize the Services.

Marketing and Advertising

Where permitted by applicable law, we may use personal information for marketing and promotional purposes, including sending marketing communications and displaying advertisements that may be relevant to your interests.

Where consent is legally required, such activities will only be carried out after the necessary consent has been obtained.

Security and Fraud Prevention

We may use personal information to verify accounts, provide a secure shopping and payment experience, detect or investigate suspected fraud, illegal activity, malicious activity or security threats and protect our Services and users.

Communication

We use your personal information to provide customer support, respond to your requests and maintain our relationship with you.

Legal Obligations

We may process personal information to comply with applicable laws, respond to lawful requests from public authorities, establish or defend legal claims and investigate potential violations of our terms or policies.

How We Share Personal Information

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy, including to:

• Shopify and other service providers supporting our e-commerce operations.
• Payment processors and financial service providers.
• Shipping and logistics providers.
• Information technology, cloud hosting, data analytics and customer service providers.
• Marketing and advertising partners, where permitted by applicable law.
• Professional advisers, including accounting, legal and consultancy service providers.
• Public authorities where disclosure is required by law.

We may also disclose information in connection with a merger, acquisition, restructuring, insolvency or similar corporate transaction.

Where you instruct us, request us to do so or provide your consent, we may also share your information with relevant third parties.

Shopify

The Services are hosted by Shopify.

Shopify collects and processes personal information relating to your access to and use of the Services in order to provide and improve the Services.

Information you submit through our store may therefore be transferred to Shopify and other service providers, including parties located outside your country of residence.

Certain Shopify features may also use information relating to your interactions with our store, Shopify and other merchants in order to improve and personalize services.

For more information about Shopify’s privacy practices, please refer to the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

You may also visit Shopify’s Privacy Portal:

https://privacy.shopify.com/en

Targeted Advertising and Data Sharing Choices

Depending on where you live, you may have the right to opt out of certain uses of personal information for targeted advertising or certain forms of data sharing.

You can manage applicable data-sharing preferences here:

https://bist-9395.myshopify.com/pages/data-sharing-opt-out

When the final Bist domain is activated, this link may be updated accordingly.

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties.

If you follow a link to a website that is not operated or controlled by us, you should review that third party’s privacy and security policies.

We are not responsible for the privacy, security, accuracy or content of third-party websites or services.

Children’s Personal Information

The Services are not intended for children below the legal age required to use such services in their jurisdiction.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided personal information to us, please contact us so that we can take appropriate action.

Security and Retention

We take reasonable measures designed to protect personal information. However, no security system or method of transmission over the internet can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, comply with legal obligations, resolve disputes and enforce agreements and policies.

Once personal information is no longer required and there is no other lawful basis for retaining it, it may be deleted, destroyed or anonymized in accordance with applicable law.

Your Rights and Choices

Depending on the laws applicable to you, you may have rights concerning your personal information, including the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of personal information where legally permitted.
• Request information regarding how your personal information is processed.
• Request restriction of certain processing activities.
• Object to certain processing activities.
• Withdraw consent where processing is based on consent.
• Request data portability where applicable.
• Opt out of certain targeted advertising or data-sharing activities where applicable.

These rights are not absolute and may be subject to legal limitations or exceptions.

We may need to verify your identity before processing certain requests.

Marketing Communications

If you receive promotional emails from us, you may unsubscribe at any time using the unsubscribe link contained in those communications.

Even if you unsubscribe from promotional communications, we may continue to send non-promotional communications relating to your account, purchases, transactions or other services you have requested.

European Economic Area and United Kingdom

If you are located in the European Economic Area or the United Kingdom, applicable data protection laws may provide you with additional rights, including the right to object to or restrict processing and, where processing is based on consent, to withdraw your consent.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

International Transfers

Your personal information may be transferred, stored or processed outside the country where you reside.

Where required by applicable law, appropriate safeguards will be used in connection with international transfers of personal information.

For transfers from the European Economic Area or United Kingdom, this may include recognized transfer mechanisms such as Standard Contractual Clauses where applicable.

For transfers subject to Turkish personal data protection legislation, applicable requirements under Turkish Personal Data Protection Law No. 6698 (“KVKK”) will be observed.

Turkish Personal Data Protection Law

Where Turkish data protection legislation applies, personal data is processed in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”).

Further information concerning processing carried out by DEBA TEKSTİL TASARIM SANAYİ ANONİM ŞİRKETİ under KVKK is available in our Personal Data Protection Notice.

Complaints

If you have concerns regarding the way we process your personal information, please contact us using the information below.

Depending on your location, you may also have the right to lodge a complaint with the competent data protection authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons.

When we update this Privacy Policy, we will publish the revised version on this website and update the “Last updated” date where appropriate.

Contact

For questions about this Privacy Policy, our privacy practices or to exercise applicable privacy rights, please contact:

DEBA TEKSTİL TASARIM SANAYİ ANONİM ŞİRKETİ

Address: Meşrutiyet Mah. Kodaman Sk. No: 41 İç Kapı No: 5, Şişli / Istanbul, Türkiye
Phone: +90 541 558 59 79
Email: info@bist-shop.com
Tax Office: Mecidiyeköy
Tax No.: 2720863560

For applicable data protection legislation, DEBA TEKSTİL TASARIM SANAYİ ANONİM ŞİRKETİ acts as the data controller where required by law.