CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA

As Honest Kahve A.Ş. (“Company”), the confidentiality and security of your personal data is among our top priorities. Our Company processes your personal data in compliance with the Law No. 6698 on the Protection of Personal Data (“KVKK”). Your personal data refers to any kind of information that makes your identity identifiable or identifiable.

We would like to inform you about the personal data processed if you accept the Membership Agreement to benefit from the services offered through our Company's mobile applications and/or websites (together referred to as the “Platform”) and become a “Platform Member”.

What personal data is processed by our Company?

If you become a Platform Member, the following personal data will be processed:

User Account Information: your name, surname, customer number, membership email address, and if added to your user profile, your phone number, gender, and date of birth.

Customer Transaction Information: your order and invoice information, your transaction history related to your purchases, request and complaint information, platform usage data, any information you share when commenting or asking questions about products on the Platform, your points and rating information, and content of conversations via chat.

Delivery Information: phone number and address you provide for order delivery, delivery transaction information.

Payment Information: your payment details and method of payment.

Transaction Security Information: device data, IP address, password and credentials, cookies, platform access logs, login method (Google/Facebook).

Legal Transaction Information: information in correspondence with authorized persons, institutions and organizations, information in case and enforcement files, details of legal information requests.

Audio Recording Information: call recordings if you contact our call center.

What are the legal grounds, purposes, and collection methods for processing your personal data?

Your personal data is collected through our mobile applications or websites as part of the Platform Service you benefit from under the membership agreement, either automatically or non-automatically as part of a data recording system. It is collected electronically via live support, call center, or email; or physically via printed forms, postal mail, or legal notifications.

Our Company processes your personal data for the purposes listed below, based on the lawful grounds stated in Article 5 of KVKK:

(See detailed table provided in the original text for legal bases and purposes for each data category – these include consent, legal obligations, performance of contract, establishment/protection of rights, and legitimate interests.)

Who does the Company share your personal data with and why?

Our Company exercises due care in processing your data by ensuring the principles of “need to know” and “need to use”, applying data minimization, and taking necessary technical and administrative security measures.

We may need to share personal data with third parties to operate and audit our business activities, ensure business continuity, and manage digital infrastructures. Accurate and updated personal data is essential to fulfill our contractual and legal obligations, which may require working with various business partners and service providers.

Your personal data is shared only as necessary and for the purposes listed in the table below, in compliance with legal bases such as explicit consent, legal obligations, performance of contracts, and legitimate interests.

(Refer to the detailed table in the original text for exact data categories, recipient groups, legal bases, and purposes of data sharing.)