Privacy
This Privacy Policy explains how MAMAF (“we”, “us”) collects, uses and discloses personal information when you visit mamaf.co, buy from us, join our list or otherwise communicate with us. In this policy, “personal information” means information that identifies or can reasonably be linked to you.
Our store runs on Shopify, which hosts the site and processes orders on our behalf.
Changes to this policy
We may update this policy from time to time, to reflect changes in what we do or for legal and operational reasons. We will post the revised version here and update the date at the bottom.
What we collect
Information you give us: your name, email address, phone number, delivery and billing address, order details, and anything you write to us in an email or a contact form.
Payment information: processed by our payment provider. We receive confirmation that a payment succeeded and the last four digits of the card. We never see or store your full card number.
Information collected automatically: when you browse the site we receive device and browser type, IP address, approximate location, pages visited, what you added to your cart, and how you arrived here. This comes from cookies and similar technologies.
Information from other parties: Shopify, our payment provider, our carrier and our analytics and marketing tools pass us information needed to run the shop, such as delivery status or whether an email was opened.
How we use it
- To run the shop: process your order, take payment, ship it, handle returns and answer your questions.
- To keep records: invoices and commercial records we are legally required to keep.
- To tell you about drops: only if you asked us to. Every message has an unsubscribe link.
- To improve the site: understand which pages and products people actually look at.
- To keep it safe: detect fraud, abuse and security incidents.
Cookies
Some cookies are necessary: they keep your cart, your session and the checkout working. Others are for analytics and marketing and only run if you allow them. You can block or delete cookies in your browser settings, but the necessary ones are required for checkout to function.
Who we share it with
Only the parties needed to get your order to you and keep the shop running: Shopify (our platform), our payment provider, our carrier, our email and analytics tools, and our accountant. We also disclose information where the law requires it, or to protect our rights. We do not sell your personal information.
Where your data is stored
Shopify and some of our tools store data on servers outside Türkiye. By using the site and placing an order you accept this transfer, carried out with the safeguards required under Article 9 of the Turkish Personal Data Protection Law (KVKK No. 6698).
How long we keep it
Order and invoice records are kept for 10 years, as Turkish commercial and tax law requires. Marketing consent records are kept while you are subscribed and for 3 years after you unsubscribe, as proof of consent. Everything else is deleted once the reason we collected it has ended.
Third-party links
The site links to other places, such as Instagram. We do not control those sites and are not responsible for what they do with your data. Read their policies before you share anything there.
Children
The site is not intended for children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, write to us and we will delete it.
Security
We take reasonable measures to protect your information, and our platform and payment provider are certified to the security standards required for card payments. That said, no system on the internet is perfectly secure, so we cannot guarantee absolute security, and you share information with us at your own risk.
Your rights
Under KVKK Article 11 you can ask us: whether we hold data about you and what it is; why we process it; that it be corrected or deleted; that the parties we shared it with be told about a correction; to object to conclusions drawn about you by automated systems; and to claim compensation for damage caused by unlawful processing.
You can also withdraw your consent to marketing at any time. Write to community@mamaf.co with your request. We answer within 30 days, free of charge.
Complaints
If you are not satisfied with our answer, you may complain to the Turkish Personal Data Protection Authority (KVKK) or to your local data protection authority.
Contact
Questions about this policy, or about your data: community@mamaf.co.
Last updated: September 2026