1. Identity of the Data Controller

Your data is processed and protected by Zigzax Tekstil Dış Ticaret Limited Şirketi, a legally registered Turkish entity located in Merter Tekstil Merkezi, Güngören, Istanbul, Turkiye.

We strictly adhere to the European Union General Data Protection Regulation (GDPR – Regulation EU 2016/679) and the Turkish Law on the Protection of Personal Data (KVKK No. 6698). For any privacy inquiries, our Data Protection Officer (DPO) can be reached at info@zigzax.agency.

2. Types of Commercial & Personal Data We Collect

To facilitate seamless B2B fashion sourcing, private label manufacturing, and door-to-door European shipping, we collect the following categories of information:

• Contact & Corporate Information: Name, business name, VAT/tax registration number, corporate email address, phone number, and WhatsApp communication history.
• Delivery & Logistics Data: Store or warehouse delivery addresses, recipient contact details, EORI numbers, and commercial invoicing information for international customs clearance.
• Manufacturing & Design Data: Tech packs, sketches, brand logo files, artwork specifications, and garment measurements submitted for private label custom manufacturing.
• Website & Technical Data: IP addresses, browser types, device operating systems, and anonymous interaction analytics collected via essential website cookies.

3. Legal Grounds & Purposes for Data Processing

We only process your information when there is a lawful commercial or legal basis:

• Contractual Execution: To procure ready-to-wear apparel via our wholesale fashion sourcing in Istanbul network and coordinate vendor collections.
• Warehousing Operations: To log parcel receipt and execute multi-supplier repacking at our order pickup warehouse storage facility in Merter.
• Customs & Freight Clearance: To generate mandatory export declarations, commercial invoices, and official A.TR movement certificates for fashion shipping to Europe.
• Legal Compliance: To comply with Turkish trade regulations, export audits, and commercial accounting requirements.

4. Non-Disclosure & Intellectual Property Protection

We treat our clients’ proprietary garment designs, tech packs, brand assets, and customer lists with absolute confidentiality.

• We never sell, rent, license, or share your proprietary tech packs or custom label artwork with third parties or rival brands.
• Turkish manufacturing partners receive only the technical specifications strictly required to create samples and complete cut-and-sew bulk production.
• Formal non-disclosure agreements (NDAs) are available upon request for high-security custom collections.

5. Third-Party Service Providers & Courier Partners

To deliver our services, data is shared exclusively with verified operational partners under strict data protection protocols:

• International Transport Carriers: Verified courier networks (including UPS, GLS, DPD, FedEx) receiving recipient names, tracking contacts, and addresses for final-mile door delivery.
• Customs Brokers: Official Turkish and European customs clearance authorities processing export/import documentation.
• Banking & Financial Institutions: Secure banking networks executing SWIFT/SEPA transfers and encrypted payment processors.

6. Data Security & Retention Schedules

Zigzax employs industry-standard technical and organizational security measures, including SSL encryption, secure warehouse management databases, and restricted access protocols to prevent unauthorized data access or loss.

Commercial transaction records and customs export files are retained for the statutory period mandated by Turkish commercial law (typically 10 years for financial records), after which data is securely erased or anonymized.

7. Your Privacy Rights as a Data Subject

Under GDPR and KVKK legislation, you retain full ownership and control over your personal data, including the right to:

• Access & Portability: Request a copy of all personal information stored in our databases.
• Rectification: Request correction of inaccurate, outdated, or incomplete corporate contact data.
• Erasure (Right to be Forgotten): Request the permanent deletion of your data where legal retention obligations do not apply.
• Opt-Out of Marketing: Unsubscribe at any time from our WhatsApp daily broadcast collection catalogs with a single message.

8. Contact Our Data Protection Officer

To exercise any of your data rights or to clarify any aspect of our privacy practices under our commercial terms & conditions, please reach out to our team: