1. DEFINITION OF PARTIES

This “party definition policy” shall be defined between IZNİYLE LAUNDRY, which provides laundry washing, drying, folding, and dry cleaning services (hereinafter referred to as the “company”, “laundry service”, or “service provider”), and the INDIVIDUALS or INSTITUTIONS benefiting from these services (hereinafter referred to as the “customer”, or “service-using user”).

• SERVICE PROVIDER

We receive, wash, dry, fold, and deliver your clothes under reasonable standards. We provide the service using professional equipment, industrial methods, and separate processing systems for each operation. Our responsibility is to carefully try to process the products delivered to us in a clean, attentive manner, in line with general commercial laundry practices and within reasonable frameworks.

• CUSTOMER

An individual or institution that creates a service request to our company, delivers and receives their clothes, and benefits from this service in exchange for a fee.

• Customer Expectations:

o To accurately declare the actual condition of the clothes,

o To inform about items that require special care,

o To report any dissatisfaction or damage claims in a timely manner and with evidence.

2. TYPES OF DATA COLLECTED

While benefiting from our services, we collect certain information from you through direct or indirect means. This data is collected to ensure the proper functioning of the services, maintain communication, and guarantee system security. The collected information is categorized as follows:

• IDENTITY INFORMATION

Basic information that identifies you, such as your name, surname, and username. This data is entered into our system during service registration, account creation, or reservation.

• CONTACT INFORMATION

Information that enables us to communicate with you directly, such as your phone number, email address, and delivery address. These details are used during delivery and notification processes.

• LOCATION AND ADDRESS INFORMATION

This includes the physical address from which you request the service, location verification provided through map service applications, or manual entries. This is necessary for the smooth operation of our pick-up and delivery services.

• PAYMENT AND TRANSACTION INFORMATION

Payment data collected via payment service infrastructures is used solely to securely conduct payment transactions. Credit card data is not stored in our system.

• DEVICE AND SESSION INFORMATION

When you access our website or mobile application, certain technical details such as browser type, IP address, session duration, and device model may be automatically recorded by our system. This data is collected for security, analysis, and system improvement purposes.

• SUPPORT AND FEEDBACK RECORDS

Information you voluntarily provide in your correspondence with customer service, support requests, or complaint forms also falls under this category.

3. TYPES OF DATA COLLECTION

In order to effectively deliver our services and improve user experience, we collect some data either directly or automatically. The methods of data collection are as follows:

• VIA DIRECT USER INPUT

When you make a service request, create a reservation, make a payment, or fill out a support form, you voluntarily provide information. This data includes your name, address, contact details, and order information.

• VIA WEBSITE AND MOBILE APPLICATION

When you visit our website or mobile application, the system automatically collects certain technical data: o IP address
o Browser type
o Duration of visit
o Page view information
This data is used for security and analytical purposes.

• VIA COOKIES

With the help of browser cookies, we obtain some information regarding user behavior. This data is used to:
o Analyze on-site navigation habits
o Maintain session continuity
o Remember your preferences

• VIA EXTERNAL SERVICE INTEGRATIONS

As a result of integrations with external services such as payment providers, map/location services, SMS services, or verification systems, some data is transmitted to our system. This information is used strictly within the scope of the service process.

• VIA FEEDBACK, SURVEYS, AND SUPPORT REQUESTS

Information you provide through your comments, suggestions, complaints, or support requests is also stored in our system and may be evaluated to enhance service quality.

4. PURPOSES OF DATA USAGE

• INTERNAL COMPANY DATA USAGE

Your collected personal data is used solely within the legitimate boundaries outlined below to ensure proper fulfillment of the services provided to you. In this context, your data may be used for: o Receiving and confirming service reservations, o Planning and optimizing delivery addresses, o Executing the order process, o Performing billing and payment transactions, o Sending service status notifications (via SMS, email, etc.),
o Requesting feedback related to service quality,
o Occasionally sending campaign, promotion, or informational announcements.
These operations are considered a natural part of the received service and are regarded as internal company usage.

• OPTIONAL USAGE AND CONSENT-BASED DATA TRANSFER

With the explicit consent of the user, the email address may be shared in a hashed format with digital advertising platforms solely for displaying promotional and informational campaigns related to our company. This process: o Is not for commercial purposes and is only for reminders and guidance, o Does not involve selling or sharing data for marketing activities to third parties, o Is valid only if consent is given; the user may withdraw this consent at any time.

5. DATA SHARING

Personal data collected from you will only be shared under the conditions listed below and solely with the specified individuals or organizations:

• SHARING REQUIRED FOR SERVICE PROCESSES

Your data may be shared, to the extent necessary for the execution of services provided to you, with the following third-party software and organizations strictly for operational and technical purposes: o Field teams and delivery personnel involved in the delivery process o System partners providing infrastructure for appointments, orders, and payments o Billing and accounting systems (e.g., online invoice platforms) o SMS and email service providers (e.g., Twilio, Mailjet) o Data backup and hosting services (e.g., server providers, CDN infrastructures)
All such data sharing is carried out within the principle of minimum data and only for the performance of the service process.

• SHARING FOR ADVERTISING AND PROMOTION PURPOSES

With the user’s explicit consent, limited data such as email address may be shared with third-party platforms solely for the following purpose: o Displaying our own advertisements to relevant users (targeted campaign delivery) o Data is processed only in a “hashed” (encrypted) format o No data is ever sold or made generally accessible to advertising platforms.

• LEGAL AND JUDICIAL SHARING

In the case of a legal obligation, data sharing may occur under the following circumstances and only with authorized authorities: o Court order
o Request from competent administrative bodies
o Tax, audit, or judicial procedures

• NON-EXISTENT SHARING

The company does not sell, transfer, or share users’ personal data with third parties for marketing purposes. Data sharing is strictly limited to the functional, legitimate, and consent-based reasons mentioned above.

6. COOKIES AND TRACKING TECHNOLOGIES

On our website, cookies and similar tracking technologies are used to improve user experience, monitor system performance, and enhance service quality. Cookies are small data files that are placed on the user’s device either temporarily or permanently.

• MANDATORY COOKIES

These are essential for the website to function properly and securely. Such cookies support processes such as session management, user preferences, and page navigation.

• PERFORMANCE AND ANALYTICAL COOKIES

These cookies collect anonymized data on how users interact with the website. They are used solely for content optimization, performance evaluation, and technical development. When necessary, data may be shared with relevant technical solution partners solely for the execution of specific analytical functions.

• ADVERTISING AND MARKETING COOKIES

Currently, no cookies or retargeting technologies are used for personalized advertisement delivery. However, if such cookies are implemented in the future, they will not be activated without obtaining prior explicit consent from the user.

• RETENTION PERIOD

The duration that cookies remain on the system may vary depending on their nature. Some cookies are active during a session, while others may remain in the browser for several years. Users have the right to delete or block cookies via their browser settings.

7. DATA RETENTION PERIOD

Collected personal and technical data are stored only for as long as necessary and for specific purposes. The following criteria are taken into account when determining the retention period:

• SERVICE PROCESS REQUIREMENTS

Data is retained in the system for a reasonable period in line with operational needs such as providing the service, tracking delivery, invoicing, and customer support.

• LEGAL OBLIGATIONS

Certain data may be legally required to be retained for a specific period under applicable regulations such as accounting, taxation, or consumer rights (e.g., invoice records for 5–10 years).

• USER ACCOUNTS

Users may delete their profiles at any time. However, some data in the system may still be retained for a certain period due to legal obligations (e.g., transaction records, payment history).

• COOKIES AND TRACKING DATA

Cookies may remain in the browser for specified periods: o Session cookies are deleted within a few hours.
o Analytical cookies may be stored for 6–24 months.
o Marketing cookies are activated only upon consent and may remain for similar durations.

• DELETION AND ANONYMIZATION

When personal data is no longer needed:
o It is securely deleted, or
o It is anonymized and may be used for statistical analysis.

8. DATA SECURITY MEASURES

The confidentiality, integrity, and access security of all collected personal data are protected through technical and administrative measures. Our company applies the following security precautions to safeguard user data from unauthorized access, loss, misuse, or alteration:

• ENCRYPTION AND SECURE COMMUNICATION

o Our website and user panel are protected with SSL (Secure Socket Layer). o Login and transaction data are transmitted via secure connections.

• SERVER AND SOFTWARE SECURITY

o Servers are protected by firewalls and up-to-date software. o Only authorized technical personnel have access.

• ACCESS AUTHORIZATION

o Access to personal data is limited to authorized individuals within the scope of their duties. o All internal access activities are logged.

• UPDATES AND MAINTENANCE

o Our software infrastructure is regularly updated.
o Potential vulnerabilities are monitored and preventive technical measures are implemented.

• PHYSICAL AND DIGITAL BACKUP

o Backups are taken at regular intervals.
o Recovery plans are in place to respond to data loss scenarios.

• COLLABORATING SERVICE PROVIDERS

o Integrated services are provided only through trusted companies certified in data security.

In this way, we strive to ensure the security of user data to the highest possible standards. The company’s aim is to process and protect the data collected during the service delivery process only to the necessary extent.

9. USER RIGHTS

Regarding the personal data collected during the service process, users, as data subjects, are entitled to the following rights. These rights can be exercised within the framework of applicable data protection laws:

• RIGHT TO REQUEST INFORMATION

Users have the right to learn which of their data has been collected, for what purpose it is being processed, and how long it is stored.

• RIGHT TO CORRECT AND UPDATE

They may request the correction or updating of incomplete or incorrectly recorded personal data.

• RIGHT TO DELETE (RIGHT TO BE FORGOTTEN)

If the user has left the service or no longer wishes their data to be processed, they may request the deletion of their personal data. (Excluding data required to be retained by law)

• RIGHT TO REQUEST A COPY

Users have the right to request a reasonable copy of their data (e.g., invoice history, reservation records).

• RIGHT TO OBJECT TO PROCESSING

If users have a legitimate reason, they may object to the processing of their data. In particular, they may object to data processing related to optional campaigns or marketing communications.

• RIGHT TO GIVE OR WITHDRAW CONSENT

Users may withdraw previously given consent for communications such as campaigns or promotions at any time.

• RIGHT TO REQUEST REVIEW AND SUBMIT INQUIRIES

If users have concerns about data processing activities, they may contact the company via the relevant communication channels to request a review. Users wishing to exercise these rights can contact us via the form on [our contact page] or via email at privacy@izniyle.com

10. INTERNATIONAL DATA TRANSFER

Our company may utilize certain digital services or infrastructures operated by third-party service providers located abroad during the delivery of laundry services. This may result in the technical transfer of user data to servers outside the country.

• REASONS FOR TRANSFER

o Reservation systems and data backup
o Automated email delivery infrastructure
o Map and location-based navigation systems
o Secure payment infrastructures (e.g., Stripe, PayPal)
o Other technical service providers

• MEASURES TAKEN

Transferred data is shared only for the purpose of maintaining and securely delivering the service. Data transfer is conducted under the following conditions: o Only reliable and data security-certified providers are selected o Services that comply with the European Union’s GDPR or similar data protection standards are used o When necessary, transfers are carried out with user consent or clear prior notification

11. UPDATES

Our company may update this Privacy Policy from time to time in accordance with applicable laws, regulations, and operational changes. Updates will be carried out within the following framework:

• REASONS FOR UPDATES

o Changes in the scope of services or technological infrastructure
o Compliance with new legal regulations
o Expanding or clarifying user rights

• NOTIFICATION TO USERS

o When the policy is updated, the most recent version will be clearly published on the website o In the case of significant changes, users may be notified via email or in-system messages o By continuing to use the service, users are deemed to have accepted the updated policy The current version can always be accessed via the “privacy-policy” option on our website.

12. CONTACT

Users may contact us at any time to request detailed information regarding the use, correction, deletion, objection to processing of their personal data, or for any other inquiries.

• OUR CONTACT CHANNELS

o Email: support@izniyle.com
o Mailing Address: San Francisco, CA 94101
o Online Form: Via the “Contact Us” form on our website
o Phone: (+1) 530 – 610 – 2599