Privacy Policy
How ARICAN GRILLS handles website visits, product enquiries, TikTok quote requests and your privacy choices.
Last updated: 1 November 2026
1. Who is responsible for your data?
ARICAN GRILLS is a brand of ARICAN DEMİR VE ENDÜSTRİYEL MUTFAK ÜRÜNLERİ GIDA SANAYİ TİCARET LTD. ŞTİ., the controller responsible for the processing described here.
Address: İvedik OSB, 1366. Cadde, İsmail Arıcan İş Merkezi No:16–18, 06378 Yenimahalle, Ankara, Türkiye. Email: info@aricangrup.com. Telephone: +90 533 705 27 45.
This notice covers our website, business product and quotation enquiries, TikTok lead forms, related communications and website orders. Our company is established in Türkiye. We have not appointed an EU or UK representative. Rights under EU or UK data protection law apply where that law applies to the processing.
2. What we collect and how
We receive information you provide through a TikTok lead form, our website, email, telephone or WhatsApp. TikTok sends us the details you submit in its form. Depending on your request, we may receive:
- Your name, business name and role; country and city; email address, telephone or WhatsApp number and preferred contact channel.
- The gas or lava-stone doner machine or other product you need, purchase timing, quantities, specifications, messages and our related correspondence.
- For an order: selected products, company and billing information, delivery address, tax details where relevant and order references. Our invoice-order flow uses bank transfer and does not collect payment-card details.
- Technical information generated when you visit, such as IP address, browser/device information and requests needed to deliver and secure the website. Optional analytics and browser storage are explained below.
3. Why we use it and the legal bases
Quotation and product selection: we review enquiries daily, assess the product needed, prepare a quotation and respond through the requested channel. For an individual contracting with us, this is necessary for steps requested before a contract or its performance (KVKK Article 5(2)(c); GDPR/UK GDPR Article 6(1)(b), where applicable). For someone acting for a business, we rely on the legitimate interest in answering and managing the business enquiry, balanced against that person's rights (KVKK Article 5(2)(f); Article 6(1)(f)).
Related sales follow-up: we may clarify the same enquiry, quotation or purchase timing. The legitimate interest is completing the business conversation you initiated; it does not authorise unrelated advertising. You can ask us to stop this follow-up.
Optional WhatsApp contact: when you select WhatsApp and separately agree, we use your number to discuss this product request and record the lead in our Excel customer records. This channel choice is based on your consent (KVKK Article 5(1); Article 6(1)(a), where applicable). You can withdraw it and choose email or telephone instead.
Orders, legal duties and disputes: we use the necessary details to fulfil orders, handle invoices and legal requirements, and establish or defend legal claims. The relevant bases are contract, legal obligation and establishment/exercise/protection of rights (KVKK Article 5(2)(c), (ç), (e); Article 6(1)(b), (c) and, for legal claims where appropriate, (f)). Security and prevention of duplicate or abusive orders rely on our legitimate interest in protecting the service.
Optional website analytics relies on your consent. A product enquiry is not a newsletter subscription or permission for general advertising. We do not use this TikTok lead process for unrelated bulk messages. Any separate marketing purpose would require its own explanation and any consent required by law.
4. Who handles the information
Our authorised staff review enquiries and keep TikTok leads in Excel. We do not sell customer information or provide it to other businesses for their own marketing. The service providers used to deliver the chosen service may nevertheless process information as described here.
TikTok operates its lead form and makes your submitted information available to us. TikTok also processes information under its own terms and privacy policy; it is not simply our processor for all of its activities. WhatsApp, a Meta service, processes information necessary for the communication you choose, under its applicable privacy policy.
Wix provides our website hosting and website order infrastructure. Google provides email infrastructure for info@aricangrup.com and, if you allow analytics, Google Analytics. YouTube provides product-video playback and some thumbnail images. These services can receive technical data when their content or functions are used.
Codex/OpenAI is not used to follow up WhatsApp conversations in this TikTok enquiry process. We do not use this process to make decisions producing legal or similarly significant effects solely by automated means.
Necessary information may also be disclosed where legally required to competent authorities or for handling a legal claim. This is separate from sharing data for advertising.
5. Processing across borders
We receive and review enquiries in Türkiye. TikTok, WhatsApp/Meta, Wix and Google operate international services, so using them may involve processing outside Türkiye or outside your own country. Their privacy information explains their own international processing.
A provider-specific transfer agreement or other transfer safeguard has not been verified for every service described here. We therefore do not claim that a particular adequacy decision, standard contract or equivalent safeguard covers every transfer. This policy and an optional WhatsApp contact choice are not blanket consent to international transfers. Contact info@aricangrup.com for information about the processing locations and transfer arrangements relevant to your request.
6. How long information is kept
Our conversations and enquiry correspondence are kept for one year and then deleted. This applies to the lead correspondence handled by our team; it does not set the independent retention period of TikTok, WhatsApp or other platform providers.
An enquiry that becomes an order creates separate order, invoice and accounting records. Their retention is determined by applicable accounting and tax requirements, the need to fulfil the order and any unresolved legal claim. Records required for those purposes are not automatically covered by the one-year conversation deletion period.
Cookie lifetimes and browser-storage behaviour are set out below. Hosting logs and provider-held records follow the relevant service settings and requirements; we do not promise an unverified deletion period for those systems. You can contact us to ask what records relating to you remain and why.
8. Your choices and rights
You decide whether to submit an enquiry. We need enough contact and product information to answer it; optional fields and WhatsApp consent are not a condition of receiving a quotation through another available channel. Please do not include sensitive personal information that is unnecessary for your product request.
Under KVKK, you may ask whether we process your data, request information about purposes and recipients in Türkiye or abroad, request correction or deletion where the legal conditions are met, and ask for those actions to be notified to recipients. You may object to a result against you based exclusively on automated analysis and seek compensation for damage caused by unlawful processing.
Where the GDPR or UK GDPR applies, rights may also include access, erasure, restriction, portability where its conditions apply, and objection to processing based on legitimate interests. You may withdraw consent at any time without affecting processing lawfully carried out before withdrawal. Rights are subject to the conditions and exceptions in the applicable law.
To stop WhatsApp follow-up, tell us in the conversation or email info@aricangrup.com. Withdrawing a channel choice does not require you to abandon your quotation request.
9. Contact and complaints
Send privacy questions or requests to info@aricangrup.com or to our postal address above, stating your name, the contact details used for the enquiry and what you request. We may need proportionate information to verify your identity. Do not send an identity document unless we explain why it is necessary.
For a formal KVKK application, use the methods provided by Turkish law, such as a signed written application or an email sent from an address previously provided to us and recorded in our system. We respond within the applicable legal period: normally no later than 30 days under KVKK, or one month under GDPR/UK GDPR, subject to any lawful extension.
You may pursue a complaint with the Turkish Personal Data Protection Authority (KVKK), following the applicable application procedure. Where EU or UK law applies, you may also complain to the competent supervisory authority, including the authority where you live or work in the EEA or the UK Information Commissioner's Office.
10. Updates
We update this notice when the described processing changes. The date above identifies this version. A change to this notice does not itself create consent for a new marketing purpose.