Privacy Policy

The data controller under Turkish data protection law (KVKK) and, where applicable, the GDPR is hepdrama. Contact: destek@hepdrama.net.

• Order data: name, email address, the book purchased, amount, currency, order date and payment status.
• Payment data: your card details never reach hepdrama; payments are processed by Stripe Payments Europe Ltd. We only receive a payment identifier, the card brand and the last four digits.
• Technical data: IP address (kept briefly to prevent abuse), browser type, country (to show regional prices) and download counts.
• Cookies: a single cookie (hd_lang) stores your language preference. We use no advertising or tracking cookies.

We process your data to perform the contract (taking the order, delivering the e-book, providing the download link), to meet legal obligations (invoicing and accounting records) and for our legitimate interests (fraud prevention and technical security).

We send no marketing emails. Order confirmations and download links are transactional messages that are part of the contract.

Our providers' servers may be located outside Türkiye; transfers rely on your consent or adequate safeguards as required by law.

• Stripe (payment processing): name, email and amount; Stripe's own privacy policy applies.
• Email delivery provider: name and email address, to send order emails.
• Partner sites: if you started your order on a partner site, the payment result and download link are reported back to that site with a signed notification.
• Public authorities: only where legally required.

Order and invoice records are kept for 10 years as required by tax and commercial law. Technical logs are kept for at most 90 days. The language cookie lasts 1 year and can be deleted in your browser.

You may ask whether we process your data, request a copy, correction or deletion, learn who it has been shared with and object to processing. Send requests to destek@hepdrama.net; we answer within 30 days.