Which regulations apply?
For a business selling to consumers online in Türkiye, the key regulations are: Consumer Protection Law No. 6502 and the Distance Contracts Regulation under it, Law No. 6563 on the Regulation of Electronic Commerce, and Law No. 6698 on the Protection of Personal Data — KVKK, Türkiye's Personal Data Protection Law. These rules are updated from time to time. Here we give the general framework; for your specific situation, we recommend getting your legal advisor's opinion.
Texts your website must include
| Text | Where it is shown |
|---|---|
| Pre-contract information form | Before the payment step, with confirmation |
| Distance sales contract | At the payment step, with confirmation; by email after the order |
| Right of withdrawal and return terms | Accessible from the product page and the footer menu |
| KVKK privacy notice | On sign-up, order and contact forms |
| Cookie notice | On the first visit, with preference management |
| Consent for commercial messages | On sign-up and newsletter forms, separate and optional |
| Seller information | Company name, address, contact and tax details, accessible from every page |
As a general rule, consumers have a 14-day right of withdrawal on distance sales; exceptions, such as products made to the customer's specifications, are listed in the regulation. Stating these exceptions clearly on the product page reduces disputes later on.
ETBİS registration and commercial messages
Businesses engaged in e-commerce must register with the Electronic Commerce Information System (ETBİS). To send campaign emails and text messages, you need the recipient's prior consent, and those consents must be managed through the Message Management System (İYS). The details most often overlooked: the consent box must not be pre-checked, and it must be kept separate from the sign-up confirmation.
Practical steps for KVKK
- Ask only for the information you really need on your forms.
- Present the privacy notice as a readable link, separate from the consent checkbox.
- Keep marketing consent separate from the processing needed to fulfill orders.
- Don't store payment card details on your own server; leave that to the payment provider.
- Keep a log of who accesses the admin panel and what they do there.
On the e-commerce sites Globya builds, these steps are part of the structure; KVKK requirements are never left out and come at no extra charge. You can also take a look at our KVKK compliance service, where we cover the topic in more depth, and at our approach to KVKK.
Frequently asked questions
Do you prepare these texts?
We provide drafts that fit the site's technical structure and place them correctly. We recommend that your legal advisor does the final review of the legal content specific to your company.
Does this apply if I only sell to dealers?
Consumer law applies to sales to end customers. When you sell only to businesses, some obligations change, but KVKK applies in every case.
If I sell on marketplaces, do I still need these on my own website?
Yes. For every sale made through your own website, these texts must also be on your website.
You can go back to the full e-commerce service page, or write to us through our contact page with any questions.