Privacy and Data Protection

Sign in with Google

7 September 2026. When you choose Sign in with Google, your Google account email address is shared with Shopify to authenticate you and sign you in to your customer account. Your email address is the information transferred to your EPIDEN customer record through this connection. This sign-in connection does not request access to your Google emails, files or contacts.

Google sign-in is optional; you can also sign in by email. Signing in does not give permission for marketing. Your email address is retained to manage your customer account. To request access to or deletion of account information, use the personal data request form. You can remove the Google connection in your Google account’s third-party connections settings; removing that connection does not automatically delete the store’s customer record. Google and Shopify process this sign-in under their own privacy policies Google Privacy Policy and Shopify Consumer Privacy Policy.

Last updated. 24 September 2026

EPIDEN operates this store and website, including all related information, content, features, tools, products and services, to provide you with a personalised shopping experience (the “Services”). EPIDEN is powered by Shopify, which enables us to provide the Services. This Privacy Policy explains how we collect, use and share your personal information when you visit or use the Services, make a purchase or other transaction through them, or otherwise communicate with us. If our Terms of Service conflict with this Privacy Policy, this Privacy Policy governs the collection, processing and sharing of your personal information.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used and shared as described here.

Personal information we collect or process

“Personal information” means information that identifies, or can reasonably be linked to, you or another person. It does not include information collected anonymously or de-identified so that it cannot identify or reasonably be linked to you. Depending on how you interact with the Services, where you live and what applicable law permits or requires, we may collect or process the following categories, including inferences drawn from your personal information

  • Contact details Your name, address, billing address, shipping address, phone number and email address.
  • Financial information Credit card, debit card and financial account numbers, payment card and financial account details, transaction details, payment method, payment confirmation and other payment information.
  • Account information Your username, password, security questions, preferences and settings.
  • Transaction information Products you view or add to your cart or wish list, purchase, return, exchange or cancel, and your past transactions.
  • Communications with us Information you share when contacting us, for example in a customer support request.
  • Device information Information about your device, browser or network connection, IP address and other unique identifiers.
  • Usage information Information about your interaction with the Services, such as when and how you use or navigate them.

Sources of personal information

We may collect personal information from

  • You directly, when you create an account, visit or use the Services, contact us or otherwise provide personal information.
  • The Services automatically, including from your device when you use our products or services or visit our websites, and through cookies and similar technologies.
  • Our service providers, when they help provide technology or collect or process personal information on our behalf.
  • Our partners or other third parties.

How we use your personal information

Depending on how you interact with us and which Services you use, we may use your information for these purposes

  • Providing, personalising and improving the Services. We use personal information to fulfil our contract with you, process payments, fulfil orders, remember preferences and products of interest, send account notifications, handle purchases, returns, exchanges and other transactions, create and manage your account, arrange shipping, facilitate returns and exchanges, enable reviews and provide a personalised shopping experience, including recommendations based on purchases. This may include using personal information to better personalise and improve the Services.
  • Marketing and advertising. We use personal information for marketing and promotional purposes, including marketing, advertising and promotional communications by email, text message or post, and to display online advertising for products or services on the Services or other websites based on previous purchases, items added to your cart and other activity on the Services.
  • Security and fraud prevention. We use personal information to authenticate accounts, provide secure checkout and shopping, detect, investigate or act on possible fraudulent, unlawful, dangerous or malicious activity, protect public safety and maintain the security of the Services. If you create an account, you are responsible for keeping your account credentials secure. We strongly recommend that you do not share your username, password or other access details.
  • Communicating with you. We use personal information to provide customer support, respond promptly, deliver effective services and maintain our business relationship with you.
  • Legal purposes. We use personal information to comply with applicable law and respond to valid legal processes, including requests from law enforcement or government agencies; investigate or participate in legal discovery; manage actual or anticipated litigation or other disputes; and investigate or enforce possible violations of our terms or policies.

How we share your personal information

In some circumstances, we may share personal information with third parties for legitimate purposes, subject to this Privacy Policy. Examples include

  • Sharing with Shopify, vendors and other third parties providing services on our behalf, such as IT management, payment processing, data analysis, customer support, cloud storage, fulfilment and shipping.
  • Sharing with business and marketing partners to provide marketing and advertising. For example, we use Shopify to support personalised advertising through third-party services based on online activity with different merchants and websites. These partners use information under their own privacy notices. Depending on where you live, you may have the right to ask us not to share information about you for targeted advertising and marketing based on activity across merchants and websites.
  • Sharing when you direct or request it, or explicitly consent, for example to ship products or when you use social media widgets or login integrations.
  • Sharing with affiliates or other parts of our corporate group.
  • Sharing in connection with business transactions such as a merger or bankruptcy; to meet legal obligations, including subpoenas, warrants and similar requests; to enforce applicable terms or policies; or to protect or defend the Services, our rights or the rights of users or others.

Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve them. Information you submit will be transferred to and shared with Shopify and third parties outside your country of residence to provide and improve the Services. We also use certain enhanced Shopify features to protect, grow and improve our business, drawing on data from your interactions with our store, other merchants and Shopify. To provide these features, Shopify may use personal information collected about those interactions. In these cases, Shopify is responsible for processing your personal information and responding to requests to exercise your rights concerning that use. For more information, see the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights through the Shopify Privacy Portal.

Third-party websites and links

The Services may link to websites or other online platforms operated by third parties. If you follow a link to a site we do not control or operate, review its privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of their information. Information you provide in public or semi-public spaces, including on third-party social media platforms, may be visible to other users of the Services or those platforms and may be available for use by us or third parties without limitation. Unless expressly stated, including a link does not endorse the linked platform’s content, owner or operator.

Children’s data

The Services are not intended for use by children, and we do not knowingly collect personal information from children below the age of majority in their jurisdiction. If you believe your child has provided personal information, contact us using the details below to request deletion. As of this Privacy Policy’s effective date, we have no actual knowledge of “sharing” or “selling” personal information of individuals under 16 as defined by applicable law.

Security and retention

No security measure is perfect or impenetrable, and we cannot guarantee perfect security. Information you send may also be insecure during transmission. We recommend avoiding insecure communication channels when sending sensitive or confidential information.

How long we retain personal information depends on factors such as whether we need it to maintain your account, provide the Services, meet legal obligations, resolve disputes or enforce applicable agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the following rights. These rights are not absolute, may apply only in certain circumstances and may be subject to legally permitted exceptions.

  • Access / right to know. You may request access to personal information we hold about you.
  • Deletion. You may request deletion of personal information we hold about you.
  • Correction. You may request correction of inaccurate personal information.
  • Data portability. You may obtain a copy of your personal information and request its transfer to a third party, subject to certain conditions and exceptions.
  • Managing communication preferences. You can opt out of promotional emails at any time using the unsubscribe option in those messages. We may continue sending non-promotional messages, including those about your account or orders.

You can exercise these rights where indicated in the Services or by contacting us using the details below. For more about Shopify’s use of personal information and other rights you may have, visit privacy.shopify.com/en.

We will not discriminate against you for exercising these rights. Where permitted or required by law, we may need to verify your identity before processing a request. You may appoint an authorised agent to submit a request on your behalf under applicable law. Before accepting it, we require proof of the agent’s authority, and you may need to verify your identity directly with us. We respond within a reasonable period in accordance with applicable law.

Complaints

If you have a complaint about our processing of your personal information, contact us using the details below. Depending on where you live, you may have the right to appeal our decision by contacting us or to lodge a complaint with your local data protection authority.

International transfers

We may transfer, store and process personal information outside your country of residence.

If we transfer personal information outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or equivalent contracts issued by the relevant UK authority, unless the destination country has been recognised as providing adequate protection.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our practices or for operational, legal or regulatory reasons. We will publish the revised policy on this website, update the “Last updated” date and provide any notice required by applicable law.

Contact

For questions about our privacy practices or this policy, or to exercise a right, email info@epiden.co or contact us at Bahriye Üçok Mahallesi, 1762 Sokak, No. 9, İç Kapı No. 1, Karşıyaka / İzmir, Türkiye.

KVKK information for users in Türkiye and the sleep quiz

Updated. 8 September 2026. This section supplements the store’s general privacy information for users in Türkiye and the EPIDEN sleep quiz. The specific information below applies to health-related quiz answers.

Data controller and contact

The data controller is Ege Yurtsever’s sole proprietorship, operating under the EPIDEN brand. Business address. Bahriye Üçok Mahallesi, 1762 Sokak, No. 9, İç Kapı No. 1, Karşıyaka / İzmir, Türkiye. Email info@epiden.co. Registered electronic mail (KEP) ege.yurtsever@hs09.kep.tr.

Collection methods, purposes and legal grounds

Identity, contact, order and transaction information is collected electronically through store forms, customer accounts, order processes and requests sent to us. It is processed to establish and fulfil orders, invoice, deliver, provide customer support and meet legal obligations, relying, as applicable, on the grounds in Article 5 of the KVKK concerning entering into or performing a contract, legal obligations, and establishing, exercising or protecting a right. Necessary security and abuse-prevention processing is assessed against the legitimate-interest ground, provided it does not harm your fundamental rights and freedoms. Consent-based analytics and marketing are offered as separate choices.

The sleep quiz and personal suggestions

The sleep quiz creates a habits plan from your age group and answers. It does not provide a clinical diagnosis or treatment. Answers, personal plans and permission choices shared by adult participants with separate explicit consent are saved in the business’s restricted-access Google Drive archive. If you separately opt in and verify your email address, the personal weekly tips series sends one email a week for up to eight weeks. You can leave the series using the link in each email. In the young participant flow, which does not create a personal record, answers are cleared when the page is refreshed. Reports you download remain on your device.

Health-related answers are retained with separate explicit consent under Article 6 of the KVKK, for a personal sleep plan and long-term comparisons, for up to 10 years. Previous answers are not treated as a statement of current health. If the purpose or required legal conditions no longer apply, deletion is considered before the maximum period ends. Expired files are removed from the active archive through daily checks; copies in Google Drive’s trash are permanently deleted within 30 days. Using Google Drive involves transferring data to Google infrastructure, subject to applicable conditions under Article 9 of the KVKK. Health-related answers are not sent to advertising platforms or used for advertising targeting based on health. Participants under 18 do not create personal follow-up records or join campaigns through the quiz. Details Sleep Quiz, Privacy and Permissions.

Product news and contact preferences

Commercial electronic messages about EPIDEN products, new releases, campaigns and offers may be sent through channels you permit. Email campaign permission is collected separately; weekly personal routine suggestions are a separate choice from campaign permission. Campaign permission is not a condition of using the sleep quiz. Withdraw permission through the unsubscribe link in messages or the personal data request form. If a new purpose for using data is needed, appropriate information and legal conditions will be provided separately.

Cookies and experience analysis

With analytics permission, Microsoft Clarity may analyse clicks, scrolling and session interactions to understand store usage. This does not access your device’s camera. Sleep quiz and personal data request pages are excluded from Clarity recording; text and form fields are masked. Change analytics permission through the Cookie preferences link at the bottom of the page. Providers, durations and details are in the Cookie Policy.

Your rights and requests

Under Article 11 of the KVKK, you have the right to learn whether personal data is processed; request information about processing; learn its purpose and whether use is consistent with that purpose; learn which third parties receive it domestically or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where the conditions apply; request that corrections and deletions be communicated to recipients; object to an adverse outcome arising solely from automated analysis; and seek compensation for harm caused by unlawful processing.

Use the Personal Data Request page or the email, KEP and business addresses above. Depending on the request, secure identity verification may be necessary. Requests are answered as soon as possible and within 30 days at the latest. Deletion requests are assessed against applicable retention obligations and legal conditions.

Stock notification requests

9 September 2026. When you request a stock notification, your name, email address, selected product or variant and request time are used to record your request and email you when that product is back in stock. This service uses Crawlapps’ Alert Me! application, Shopify and the relevant delivery and hosting providers. Notification events, such as sending, delivery and opening, may be processed to monitor the service. These providers’ infrastructure may be located outside Türkiye.

A stock notification request is separate from a general campaign subscription. You can withdraw your request using the unsubscribe link in a notification email. To ask for deletion, use our personal data request form or email info@epiden.co. The provider explains its practices in the Alert Me! Privacy Policy. Your health-related answers from the sleep quiz are not transferred to this application.

EPIDEN Club membership and communication preferences

24 September 2026. EPIDEN Club is linked to your customer account. Your optional nickname, email marketing choice, WhatsApp number and separate order or marketing message preferences are used to personalise your account and remember your chosen channels. Marketing permission is not required for membership.

Email preferences follow your Shopify subscription status. Order notifications are separate from marketing. Saving a WhatsApp preference does not verify your number or start messaging. Messages within your chosen scope may begin after verification and the relevant connection are complete.

If you previously provided a photo, demographic details or routine answers through the earlier profile form, this interface change does not automatically delete them. The current Club form does not collect these fields. Request access or deletion through our personal data request form or info@epiden.co.

Profile and communication preferences are stored in non-public application fields linked to your Shopify customer record and accessible to authorised store administrators. The other provisions in this policy about retention, rights and international transfers continue to apply.

Closure of the previous rewards programme

Automatic earning under the previous store credit programme ended on 24 September 2026. Collection of order data for new rewards and automatic credit operations have stopped. Customer accounts and favourites continue independently.

Any earlier transaction records are assessed for retention or deletion in light of service needs and legal obligations. Use the contact routes in this policy to request access, correction or deletion. Current membership information is on the EPIDEN Club page.

WhatsApp support

Our optional WhatsApp link opens WhatsApp. No message is sent on your behalf before you choose to send it. We use the phone number, message and order details you provide to respond to and follow up on your support request. Contacting support does not subscribe you to marketing.

WhatsApp operates under its own privacy policy and may process information outside Türkiye. You may instead use our contact form or info@epiden.co. Do not include payment card details, identity documents or health information.