Privacy Policy
Last updated: 9 October 2026
This Privacy Policy explains how Too Fabric collects and uses personal data when you visit toofabric.com, send us an enquiry or work with us as a customer. We are a custom clothing manufacturer based in Istanbul, Türkiye, and most of the people we deal with are contact persons at brands and companies in Europe and the UK.
1. Who is responsible for your data
The data controller is Too Fabric Global Tekstil ve Dış Ticaret A.Ş. ("Too Fabric", "we", "us"), Kozyatağı Mah. Kırçiçeği Sk. No: 1, 34742 Kadıköy, Istanbul, Türkiye.
Email: info@toofabric.com · WhatsApp: +90 545 626 44 01
We process personal data in line with the Turkish Personal Data Protection Law No. 6698 (KVKK). Because we offer our services to people in the European Union, the United Kingdom and Switzerland, we also follow the EU General Data Protection Regulation (GDPR), the UK GDPR and the Swiss Federal Act on Data Protection (FADP) where they apply.
If you are in the EU, the UK or Switzerland, you can contact us directly in English about anything related to your personal data, using the details above.
2. What personal data we collect
When you visit our website
- Technical data such as your IP address, browser and device type, the pages you visit, the date and time of your visit and the website that referred you. Our hosting and security services record this data in server and security logs.
- Cookie data, explained in section 8.
When you contact us or request a quote
Through our contact form, by email, WhatsApp or phone, we receive:
- your name, email address, phone number and country, and your company name and job title if you give them;
- your message and any files you send, such as designs, tech packs, logos, measurement charts or reference photos.
When you place an order
- names and contact details of the people we work with at your company;
- delivery and invoicing details, such as company name and address, delivery contact name and phone number, and VAT, EORI or other tax numbers;
- quotation, sample, order, production and shipping records, and our correspondence with you;
- payment information needed to match bank transfers to invoices. We do not collect card details on our website.
We may also receive your details from colleagues who name you as a delivery or invoicing contact for an order.
When you interact with us on other platforms
- reviews you leave about us on Trustpilot or Google;
- messages and interactions on our LinkedIn, Instagram and YouTube pages.
We do not ask for special categories of personal data, such as health data. Our website and services are not intended for children.
3. Why we use your data and on what legal basis
| Purpose | Legal basis under the GDPR and UK GDPR | Legal basis under KVKK |
|---|---|---|
| Answer your enquiry and prepare quotations and samples | Steps taken at your request before a contract (Art. 6(1)(b)); our legitimate interest in answering business enquiries (Art. 6(1)(f)) | Establishment of a contract (Art. 5(2)(c)); legitimate interest (Art. 5(2)(f)) |
| Produce, deliver and invoice your order, and handle reorders and after-sales questions | Performance of a contract (Art. 6(1)(b)); our legitimate interest in working with you as the contact person of your company (Art. 6(1)(f)) | Performance of a contract (Art. 5(2)(c)); legitimate interest (Art. 5(2)(f)) |
| Keep accounting, tax, customs and export records | Our legitimate interest in complying with Turkish commercial, tax and customs law (Art. 6(1)(f)) | Legal obligation (Art. 5(2)(ç)) |
| Keep our website and systems secure and prevent misuse | Legitimate interest (Art. 6(1)(f)) | Legitimate interest (Art. 5(2)(f)) |
| Measure and improve the use of our website with analytics cookies | Consent (Art. 6(1)(a)) | Explicit consent (Art. 5(1)) |
| Show embedded content, such as the map on our contact page | Consent (Art. 6(1)(a)) | Explicit consent (Art. 5(1)) |
| Read and reply to reviews and messages on Trustpilot, Google and social media | Legitimate interest (Art. 6(1)(f)) | Data you have made public (Art. 5(2)(d)); legitimate interest (Art. 5(2)(f)) |
| Invite customers to review us on Trustpilot after delivery | Legitimate interest (Art. 6(1)(f)) | Legitimate interest (Art. 5(2)(f)) |
| Establish, exercise or defend legal claims | Legitimate interest (Art. 6(1)(f)) | Establishment, exercise or protection of a right (Art. 5(2)(e)) |
Where we rely on legitimate interests, you can object at any time. Where we rely on consent, you can withdraw it at any time; this does not affect processing carried out before you withdrew it. If you do not give us the details we need to prepare a quotation or deliver an order, we may not be able to work with you. We do not make decisions about you based solely on automated processing.
4. Who we share your data with
We share personal data only when it is needed for the purposes above:
- IT service providers that host our website (Kinsta), run our email (Google) and protect our website from attacks;
- Google, if you accept analytics cookies or when you load the map on our contact page;
- logistics partners, such as DHL Express, road freight forwarders and customs brokers, who need delivery contact details to ship your order and clear customs;
- banks that process payments;
- our accountants, auditors and legal advisers;
- public authorities, such as tax and customs authorities and courts, where the law requires it;
- Trustpilot, if we invite you to review us (your name, email address and order reference).
Our IT service providers process data only on our instructions. Carriers, banks, Google and review platforms use the data under their own privacy policies, as do WhatsApp, LinkedIn, Instagram and YouTube when you contact us through them. We do not sell personal data.
5. International transfers
We are based in Türkiye and work with your data from Türkiye. Our website is hosted by Kinsta on servers in Frankfurt, Germany. Our email runs on Gmail, and Google also provides the analytics and the map on our website; Google may process this data in the United States and in other countries where it has data centres.
Under the GDPR, UK GDPR and FADP, transfers to Germany need no additional safeguards because Germany is in the EU. Transfers to US companies certified under the Data Privacy Framework, such as Google, rely on that framework, and other transfers use the European Commission's standard contractual clauses. For transfers from Türkiye, we use standard contracts notified to the Turkish Personal Data Protection Authority. You can ask us for a copy of the safeguards we use.
6. How long we keep your data
- Enquiries that do not lead to an order: 24 months after our last contact.
- Customer, order, invoice and shipping records and our business correspondence: for 10 years, as required by Turkish commercial and tax law.
- Your designs and product specifications: for as long as we work with you, so that we can handle reorders, and for 2 years after your last order, unless we must keep them in our order records. You can ask us to delete them earlier.
- Server and security logs: up to 6 months.
- Analytics data: up to 14 months.
When a retention period ends, we delete, destroy or anonymise the data.
7. How we protect your data
We use an encrypted connection (HTTPS) on our website, a firewall and login protection, access controls for our email and files, and regular backups. Only the people who need your data for their work can access it. If a personal data breach is likely to put your rights at risk, we will inform you and the authorities as required by law.
8. Cookies
Cookies are small files that a website stores on your device. Our website uses:
- Necessary cookies that keep our website secure and remember your language. They do not need your consent.
- Analytics cookies (Google Analytics) that help us understand how visitors use our website. We set them only if you accept them.
- Embedded content: the Google Map on our contact page loads only after you accept it, because Google may set cookies and receive your IP address.
You can change or withdraw your consent at any time, and you can block or delete cookies in your browser settings.
9. Your rights
Depending on the law that applies to you, you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate or incomplete data corrected;
- have your data deleted or its use restricted;
- object to processing based on legitimate interests;
- receive the data you gave us in a commonly used electronic format (data portability);
- withdraw your consent at any time.
Under Article 11 of KVKK, you can also:
- learn whether we process your data, for what purpose, and whether we use it for that purpose;
- find out who we have shared it with in Türkiye or abroad;
- ask us to inform those recipients of any correction or deletion;
- object to a result against you that comes solely from automated analysis;
- claim compensation for damage caused by unlawful processing.
How to make a request
Email info@toofabric.com with the subject "Privacy request", or write to us at the address in section 1. We may ask you to confirm your identity. We will reply free of charge within one month (30 days under KVKK and the Swiss FADP).
Complaints
If you are unhappy with how we handle your data, please email info@toofabric.com with the subject "Privacy complaint". We will acknowledge your complaint within 30 days, keep you informed and tell you the outcome without undue delay. You also have the right to complain to a supervisory authority:
- in the EU: the data protection authority in your country (list of EU authorities);
- in the UK: the Information Commissioner's Office (ICO);
- in Switzerland: the Federal Data Protection and Information Commissioner (FDPIC);
- in Türkiye: the Personal Data Protection Board (KVKK), after you have first applied to us.
10. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version, and we will make significant changes clear on this page.
11. Contact us
Too Fabric Global Tekstil ve Dış Ticaret A.Ş.
Kozyatağı Mah. Kırçiçeği Sk. No: 1, 34742 Kadıköy, Istanbul, Türkiye
info@toofabric.com · WhatsApp: +90 545 626 44 01