PRIVACY NOTICE (UK)

Last updated: 20.01.2026

This Privacy Notice explains how Beije Medikal Ürünler Pazarlama Sanayi ve Ticaret Anonim Şirketi ("Beije", "we", "us", "our") collects and uses personal data when you use:

  • our website www.beije.uk (the "Website"),
  • our mobile application (if applicable),
  • our social media and other media channels,
  • and any related services (together, the "Platform").

This Notice also explains your rights under UK GDPR and how to contact us or the UK regulator.

1) Who is responsible for your data?

Data Controller:
Beije Medikal Ürünler Pazarlama Sanayi ve Ticaret Anonim Şirketi ("Beije")
Registered address: Feriköy Mah. Bayır Sk. No: 30, Şişli / Istanbul, Türkiye
Email: kvkk@beije.co (recommended for data protection queries)
Customer support: hersey@beije.co

UK Representative (if required under Article 27 UK GDPR)
Doruk Akpek
doruk.akpek@beije.co

2) What data we collect

Depending on how you use the Platform, we may collect:

A. Identity & contact data

Name, surname, email address, phone number, date of birth, delivery address, billing address.

B. Account data

Login and account identifiers, password (stored in encrypted/hashed form), subscription status.

C. Order & payment data

Products purchased, order dates, delivery details, invoice details, refunds/returns, and payment status.

Payment card details: we do not store full card details. We may store limited data such as the last 4 digits and expiry date where needed for operational purposes (e.g., distinguishing payment methods).

D. Usage & device data

IP address, device type, operating system, browser, app version, time zone, approximate location (derived from IP), logs and event data.

E. Customer support data

Messages, complaints, requests, call records (where recorded), and any information you choose to provide.

F. Cookies & tracking data

Cookie IDs and advertising identifiers, analytics events, pixel data, and interactions with ads and campaigns. See our Cookie Policy.

G. Special category data (health-related) — only if you provide it

If you choose to use features that involve menstrual tracking / preferences (e.g., period duration, intensity, frequency, product preferences during period), this may be treated as special category data under UK GDPR.

3) How we collect data

We collect data from:

  • you directly (account creation, checkout, forms, support requests),
  • your device/browser (cookies, pixels, logs),
  • service providers (payment providers, logistics partners, analytics providers),
  • advertising partners (only where you have consented to marketing cookies).

4) Why we use your data and our lawful bases

Under UK GDPR, we must have a lawful basis to process personal data. We use the following bases:

A. To provide the Platform and fulfil orders (including subscriptions)

Purpose: account setup, delivering products, processing payments, customer service, returns/refunds, preventing misuse/fraud.
Lawful basis: Contract (UK GDPR Art. 6(1)(b)) and Legitimate interests (Art. 6(1)(f)) for security/fraud prevention.

B. To comply with legal obligations

Purpose: tax, accounting, consumer law compliance, responding to lawful requests.
Lawful basis: Legal obligation (Art. 6(1)(c)).

C. To improve our Platform and services

Purpose: analytics and performance insights, bug fixing, service improvement.
Lawful basis:

  • Consent where cookies/SDKs are involved (PECR + UK GDPR), and/or
  • Legitimate interests for non-cookie improvement activities.

D. Marketing communications (email/SMS/push/phone)

Purpose: send offers, promotions, product updates, surveys, and similar marketing.
Lawful basis:

  • Consent where required under PECR (and UK GDPR), and/or
  • Soft opt-in where permitted under PECR (existing customers, similar products, clear opt-out at point of collection and in every message).

You can opt out at any time (see Section 8).

E. Advertising and measurement (personalised ads)

Purpose: show and measure ads on platforms like Meta/TikTok/LinkedIn/X and optimise campaigns.
Lawful basis: Consent (marketing cookies / pixels under PECR + UK GDPR).

5) Special category data (health-related menstrual data)

If you provide menstrual tracking information, we will only process it where a UK GDPR Article 9 condition applies.

Typical condition: Explicit consent (UK GDPR Art. 9(2)(a))

You can withdraw your explicit consent at any time (see Section 8). Withdrawal does not affect processing already carried out.

6) Who we share data with

We may share personal data with:

  • Payment providers (to process payments)
  • Delivery/logistics partners (to deliver orders)
  • Customer support tools (ticketing, live chat)
  • Hosting and IT providers (cloud hosting, email infrastructure)
  • Analytics and optimisation providers (only with consent where cookies apply)
  • Marketing providers (email/SMS tools; advertising partners only with consent)
  • Professional advisors (lawyers, auditors, accountants)
  • Authorities where legally required (courts, regulators, law enforcement)

We require service providers to process data only on our instructions and keep it secure.

7) International data transfers

Because Beije is based in Türkiye and uses global vendors, your personal data may be transferred outside the UK.

Where UK GDPR requires safeguards, we use appropriate mechanisms such as:

  • the UK International Data Transfer Agreement (IDTA), and/or
  • the UK Addendum to the EU Standard Contractual Clauses, and/or
  • transfers to countries recognised by the UK as providing adequate protection (where applicable).

You may request a copy of the relevant safeguards by contacting kvkk@beije.co.

8) Your choices and controls

Cookies

You can control cookies via our Cookie banner / preference centre and your browser settings. See our Cookie Policy.

Marketing

You can opt out at any time by:

  • using the unsubscribe link in emails,
  • following opt-out instructions in SMS,
  • adjusting your in-app preferences (if available),
  • or contacting kvkk@beije.co.

Withdrawing consent will not affect earlier lawful processing.

9) Data retention

We keep personal data only as long as needed for the purposes above, including legal, accounting, or reporting requirements.

Retention depends on the data type and purpose, for example:

  • order and invoice records (to meet tax/accounting obligations),
  • account data (while your account is active, then for a limited period),
  • marketing preferences (until you opt out or we no longer need them),
  • analytics data (per vendor settings / cookie durations).

We will delete, anonymise, or securely archive data when it is no longer required.

10) Security

We implement appropriate technical and organisational measures to protect personal data, including access controls, encryption where appropriate, and security monitoring. No system is 100% secure, but we work to maintain a level of security appropriate to the risk.

11) Your rights under UK GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase data (in certain situations)
  • Restrict processing
  • Object to processing (including where based on legitimate interests; and direct marketing)
  • Data portability (where processing is based on consent or contract and automated)
  • Withdraw consent at any time (where we rely on consent)
  • Complain to the UK regulator

To exercise your rights, contact kvkk@beije.co.

Complaints to the ICO

You can complain to the Information Commissioner's Office (ICO) (UK regulator for data protection). You can find details on the ICO website.

12) Third-party links

Our Platform may contain links to third-party websites or apps. We are not responsible for their privacy practices. Please review their privacy notices.

13) Changes to this Privacy Notice

We may update this Notice to reflect changes in law, our services, or our practices. The "Last updated" date will be changed accordingly.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

beije Medikal Ürünler Pazarlama Sanayi ve Ticaret A.Ş.
Email: privacy@beije.co
Address: Feriköy Mah. Bayır Sk. No: 30, Şişli / İstanbul, Turkey