Cookies Policy

1. Overview

This Cookies Policy explains how ResReturn uses cookies and similar technologies on resreturn.com, on the merchant dashboard, and on the hosted returns portal that shoppers use to request returns, exchanges, store credit, and refunds. It is provided to meet our transparency obligations under Article 10 of the Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and under the EU General Data Protection Regulation (GDPR).

We use these technologies to keep the platform secure, to make it work reliably, and to understand how it is used so we can improve it. In doing so we follow the principles of lawfulness, fairness, transparency, and data minimization set out in Article 4 of the KVKK and Article 5 of the GDPR: we collect only what is necessary for the purposes described in this policy.

2. Who we are

ResReturn is a returns and exchange management platform operated by YourSizer. Address: Gümüşsuyu Mahallesi İnönü Caddesi Ulusal Apt. No:5 D:5, 34437 Beyoğlu/İstanbul, Türkiye. Email: contact@resreturn.com.

For cookies set on our own website and merchant dashboard, we act as the data controller: we determine the purposes and means of processing. For the hosted returns portal that shoppers reach through a merchant's store, we generally act as a data processor on behalf of that merchant, and the merchant's own privacy and cookie notices also apply. This section serves as the controller identification required by Article 10(a) of the KVKK.

3. What cookies are and how they are collected

Cookies are small text files that a website saves to your device (computer, tablet, or smartphone) through your browser. They allow the site to recognize your device on later visits, remember your preferences, and keep your session working. A cookie on its own does not identify you, but combined with device, connection, and usage data it can constitute personal data.

Session cookies are deleted automatically when you close your browser and are typically used for sign-in, security, and navigation. Persistent cookies remain on your device for a set period — for example to remember your preferences or to support analytics — and are removed when they expire or when you delete them manually.

Alongside cookies we may use similar technologies such as pixel tags, local storage, and SDKs that collect data automatically via your browser or device when you visit our website, use the merchant dashboard, or complete a return through the hosted portal. In all cases we collect only the data needed for the purposes defined below.

4. Cookie categories and legal bases

Strictly necessary cookies are essential for the platform to function: they manage sign-in sessions for merchants, keep a shopper's return or exchange request intact as they move through the portal, protect against cross-site request forgery and fraud, and record your cookie preferences. Without them the service cannot be provided. Legal basis: performance of a contract (KVKK Article 5/2-c; GDPR Article 6(1)(b)) and our legitimate interest in securing the platform.

Performance and analytics cookies help us understand how the website and platform are used — visitor counts, popular pages, time on page, and technical errors — so we can improve them. Our website uses Google Analytics 4 for this purpose. These cookies are disabled by default and are set only with your explicit consent (KVKK Article 5/1; GDPR Article 6(1)(a)).

Functionality cookies remember choices you make, such as language or region, to give you a more convenient experience on return visits. These are also disabled by default and activated only with your consent.

Where a merchant has enabled the optional fit-intelligence layer, any processing of body-measurement data in the returns portal is based on the shopper's separate explicit consent and a short retention period; cookies are not used to store measurement data itself, only to keep the consented session working.

5. Cookies we use

Strictly necessary (first party): session and security cookies such as session identifiers and CSRF tokens, used for authentication, session management, fraud prevention, and logging your cookie preferences. Duration: end of session up to 1 year.

Performance and analytics (third party): Google Analytics 4 cookies such as _ga and _gid, used for usage statistics, visitor counts, and performance measurement. Duration: approximately 30 minutes to 2 years, per Google's own schedule.

Functionality (first party): preference cookies such as language and region settings, used to personalize the interface. Duration: approximately 6 months to 1 year.

This list is kept current as our infrastructure and third-party providers change, and exact names and durations are ultimately governed by the respective providers' own policies. You can review and change your category-level choices at any time through the cookie preferences controls described below.

6. Third parties and international transfers

Data collected through cookies (such as device and browser information, IP address, usage statistics, and cookie identifiers) may be shared with service providers that supply our hosting, infrastructure, security, and analytics — for example Google Analytics 4 for website measurement. Some of these providers operate infrastructure outside Türkiye and the EEA, which means cookie data may be transferred abroad, only to the extent necessary and limited to the stated purposes.

International transfers are made in accordance with Article 9 of the KVKK and Chapter V of the GDPR. We prioritize destinations covered by an adequacy decision; where none exists, we rely on appropriate safeguards such as the standard contractual clauses published by the Turkish Personal Data Protection Board and the European Commission, notified to the Authority where required.

In addition to contractual safeguards, we apply technical and administrative measures — encryption in transit, access restrictions, role-based authorization, and logging — so that transferred data is protected against unlawful access, disclosure, or loss.

7. Managing your cookie preferences

On your first visit, a cookie banner lets you choose Accept All, Reject All, or Manage Preferences. All categories other than strictly necessary cookies are off by default and are enabled only if you opt in. Manage Preferences lets you switch analytics and functionality cookies on or off individually; strictly necessary cookies cannot be disabled because the service cannot run without them.

You can also control cookies through your browser: most browsers let you block or delete cookies under their Settings or Privacy and Security sections (Chrome: Settings > Privacy and Security > Site Settings > Cookies; Firefox: Settings > Privacy and Security; Edge: Settings > Cookies and Site Permissions; Safari: Preferences > Privacy).

You may withdraw consent at any time via the cookie settings link on our site or through your browser. Withdrawal takes effect from that moment onward, and consent-based cookies stop being set. Note that disabling non-essential cookies may limit analytics-driven improvements and personalized convenience features, but it will not prevent you from completing a return or exchange.

8. Your rights

Under Article 11 of the KVKK and Articles 15–21 of the GDPR, you have the right to learn whether your personal data is processed, to request information about that processing, to learn its purpose and whether it is used accordingly, to know the domestic and international third parties it is shared with, to request correction of incomplete or inaccurate data, to request deletion or destruction under the applicable conditions, to have such actions notified to recipients, to object to results produced solely by automated analysis that adversely affect you, and to claim compensation for damage caused by unlawful processing.

To exercise these rights, write to contact@resreturn.com from the email address registered with us, or apply in writing to our postal address, in line with the applicable procedures for applications to the data controller. Include enough information to verify your identity and state your request clearly. We respond free of charge within thirty days at the latest; if the request incurs additional costs, a fee may apply per the tariff set by the Personal Data Protection Board.

If you are a shopper using a merchant's returns portal, you can also direct your request to the merchant, and we will assist them in fulfilling it in our role as processor.

9. Updates to this policy

We may update this Cookies Policy as our platform, legal obligations, or third-party providers change — for example when analytics tooling changes or new cookie categories are introduced. The date at the top of this page shows when it was last revised.

Material changes will be highlighted on the website or, where required, notified through a renewed consent request in the cookie banner. Continued use of the site after non-material updates constitutes acknowledgment of the revised policy.