1. MEMBERSHIP AND LE MABELLE STARS PROGRAM CLARIFICATION TEXT

This Clarification Text has been prepared by Le Mabelle Tekstil Limited Şirketi ("Le Mabelle"), as the data controller within the scope of the Personal Data Protection Law No. 6698 ("KVKK Law"), to provide information regarding the personal data processed within the scope of online membership and the Le Mabelle Stars Program.

Data controller contact information: Kazım Karabekir Mahallesi 2. Kervan Sokak No:91/3 Yıldırım/Bursa; phone 0545 407 19 70; e-mail lemabelle.100@gmail.com.

1.1. Processed Personal Data

Identity information: Name, surname, and age or date of birth information required for membership.

Contact information: Phone number, e-mail address, delivery and billing address.

Customer transaction information: Membership date, records of orders, products, amounts, discounts, payment transactions, deliveries, cancellations, returns, exchanges, requests, and complaints.

Cashback information: Point earning rate, pending and available balance, usage, offsetting, returns, expiration date, campaigns, and account transactions.

Transaction security information: IP address, session, device, verification, access and security logs, and mandatory cookie information.

Marketing information: In case of explicit consent, shopping preferences, campaign interactions, segment and personalization results, and records of commercial electronic message permissions and opt-outs.

1.2. Purposes of Processing and Legal Grounds

Data is processed for the purposes of establishing and managing the membership account; executing order, delivery, cancellation, return, and exchange processes; calculating, holding, making available, using, returning, and offsetting Le Mabelle Stars Points; and finalizing requests and complaints, based on the legal ground of establishment or performance of a contract under Article 5/2-c of the KVKK Law.

Data is processed for ensuring invoice and record-keeping compliance, complying with consumer legislation, and meeting the requests of authorized institutions, based on the legal grounds of being expressly provided for in the laws and legal obligations under Articles 5/2-a and 5/2-ç of the KVKK Law.

Data is processed for the management of disputes, protection of rights, and prevention of fraud and Program misuse, based on the legal grounds of establishing, exercising, or protecting a right and legitimate interests under Articles 5/2-e and 5/2-f of the KVKK Law. In the legitimate interest assessment, the fundamental rights and freedoms of the relevant persons are taken into account.

Non-mandatory cookies, activities for marketing-related profiling, and presenting personalized offers are based on separate explicit consent in accordance with Article 5/1 of the KVKK Law, to the extent that there is no other processing condition.

1.3. Transfer and Cross-Border Transfer

Personal data may be transferred to suppliers providing e-commerce and membership infrastructure, the Le Mabelle Stars Point system, hosting, IT security, customer service, payment, cargo, e-mail, and SMS services, only to the extent required by the duty. Data may also be transferred to authorized public institutions and judicial authorities in case of legal obligation.

In case of using service providers whose servers or technical infrastructure are located abroad, the transfer is made based on an adequacy decision or appropriate safeguards in accordance with Article 9 of the KVKK Law. In the absence of appropriate safeguards, the transfer is only performed if it is of an occasional nature and one of the exceptions listed in the Law exists. Regular transfers are not based on a general and indefinite explicit consent.

1.4. Collection Method and Retention Period

Data is collected through membership and order forms, account and Cashback movements, return-exchange records, customer services, e-mail, phone, cookies, and technical system logs, via automated or non-automated means provided that they are part of a data recording system.

Personal data is stored for the periods stipulated in the relevant legislation and for the duration required by the purpose of processing. When the membership ends, data that is not necessary for legal obligations or the protection of rights is deleted, destroyed, or anonymized.

1.5. Rights of the Relevant Person and Application

The relevant person has the right to learn whether their personal data is being processed, to request information if it has been processed, to learn the purpose of processing and whether it is used in accordance with the purpose, to know the third parties to whom the data is transferred, to request correction of incomplete or incorrect data, to request deletion or destruction when the conditions are met, to request notification of these procedures to third parties, to object to a result against them arising solely from automated analysis, and to request the elimination of damages caused by illegal processing.

Applications can be submitted to Le Mabelle Tekstil Limited Şirketi, Kazım Karabekir Mahallesi 2. Kervan Sokak No:91/3 Yıldırım/Bursa, in writing or, provided that it is suitable for identity verification, via the e-mail address previously notified to the Company and registered in the system to lemabelle.100@gmail.com. Other methods permitted by legislation may also be used.

2. MARKETING AND PERSONALIZATION EXPLICIT CONSENT TEXT

I have read the Membership and Le Mabelle Stars Program Clarification Text. Within the scope of marketing and personalization activities that are not necessary for the basic operation of the membership, shopping, and the Le Mabelle Stars Program; I give my explicit consent for my shopping history, product preferences, Le Mabelle Stars Point movements, campaign interactions, and usage information obtained from non-mandatory cookies to be analyzed to create interest areas and customer segments, and for the presentation of special product, discount, and campaign offers to me.

I know that this consent is optional; that not giving consent will not affect my membership, shopping, or earned Cashback Points; and that I can withdraw my consent at any time.

☐ I give my explicit consent.

3. COMMERCIAL ELECTRONIC MESSAGE APPROVAL

Within the scope of the Law on the Regulation of Electronic Commerce No. 6563 and the Regulation on Commercial Communication and Commercial Electronic Messages; I approve that commercial electronic messages containing products, services, discounts, the Le Mabelle Stars Program, campaigns, promotions, surveys, and customer satisfaction content be sent to me by Le Mabelle via SMS, e-mail, phone calls, and push notification channels.

I know that this approval is not mandatory for membership or shopping; that it cannot be presented as pre-selected; that I can withdraw it at any time via the Message Management System (İYS) and the free opt-out channels shown in the messages; and that commercial message sending will be stopped within the period stipulated in the legislation after the opt-out request. I accept that service notifications such as membership, order, delivery, return, and security can be sent separately, provided they do not contain marketing content.

☐ SMS    ☐ E-mail    ☐ Phone call    ☐ Push notification

4. APPLICATION PRINCIPLES FOR APPROVALS

4.1. Explicit consent and commercial electronic message approval are obtained with separate boxes. The boxes are not pre-checked.

4.2. Commercial electronic message approval is recorded in a provable manner with name-surname, contact address, channel, date-time, source, and approval text version, and is registered in the İYS within the period stipulated in the legislation.

4.3. Notification regarding the approval obtained in an electronic environment is sent to the recipient within the period stipulated in the legislation, providing the opportunity to opt out.

4.4. Opt-out requests can be made easily and free of charge via the same communication channel; the request is implemented within the period stipulated in the legislation and reported to the İYS.

4.5. Text versions, approval and opt-out actions, and records regarding the provision of the clarification are stored in an auditable manner.

Effective date: 11.09.2026