Privacy Policy
ChannelsHub is a product of ZBK Yazılım ve Bilgi Sistemleri A.Ş.
Company: ZBK Yazılım ve Bilgi Sistemleri A.Ş.
Product: ChannelsHub
Website: https://www.channelshub.net
Privacy Contact:
[email protected]
1. Introduction
ZBK Yazılım ve Bilgi Sistemleri A.Ş. ("ZBK", "ChannelsHub", "we", "us", or "our") operates ChannelsHub, a multi-channel e-commerce integration platform.
ChannelsHub enables merchants to connect marketplaces, e-commerce platforms, ERP systems, logistics providers, e-invoicing services and other business systems.
This Privacy Policy explains how we collect, process, use, store, share, retain and securely delete information processed through ChannelsHub.
ChannelsHub is designed to process information only for authorized business purposes and does not sell personal information.
2. Information We Process
Depending on the integrations and services enabled by a merchant, ChannelsHub may process the following categories of information.
Merchant and Account Information
- Merchant and store identifiers
- Account information
- Integration configuration
- Authentication and authorization information
Product and Commercial Information
- Product information
- SKU and product identifiers
- Categories and attributes
- Prices and discounts
- Inventory information
- Listing information
Order and Fulfillment Information
- Order identifiers
- Order items and quantities
- Order status
- Shipment information
- Return and cancellation information
- Invoice information
Customer Information
Depending on the source platform and business workflow, order information may contain personally identifiable information ("PII"), including:
- Customer name
- Delivery address
- Billing address
- Telephone number
- Email address
- Shipment information
ChannelsHub processes customer PII only when it is necessary for an authorized business operation.
3. Sources of Information
ChannelsHub receives information through authorized integrations, including APIs, webhooks and other authorized interfaces.
Supported integrations may include Amazon, Trendyol, Hepsiburada, N11, Shopify and other marketplaces and e-commerce platforms.
Information may also be received from merchant-configured ERP, logistics and e-invoicing systems.
For Amazon, information is obtained through authorized Amazon Selling Partner API (SP-API) access following seller authorization.
4. Purposes of Processing
- Product synchronization
- Inventory synchronization
- Price synchronization
- Order management
- ERP synchronization
- Shipment and fulfillment operations
- Carrier integration
- Shipment tracking
- Returns and cancellations
- Invoicing and e-invoicing
- Accounting and operational processes
- Reporting
- Technical support
- Security and fraud prevention
- Compliance with applicable legal obligations
We apply data minimization and process information only to the extent reasonably necessary for the applicable purpose.
5. Amazon Information
When a merchant authorizes ChannelsHub to access Amazon SP-API, ChannelsHub may process Amazon Information permitted by the authorized SP-API roles.
This may include order, fulfillment, shipment, inventory, product, pricing, financial and customer information.
Where Amazon provides customer personally identifiable information ("Amazon Customer PII"), ChannelsHub processes this information only for merchant-fulfilled shipping of the order, calculation and remittance of applicable taxes, and compliance with legal obligations, consistent with Amazon's Acceptable Use Policy and Data Protection Policy. Amazon Customer PII is not used for ERP synchronization, invoicing, customer support, marketing or any other purpose.
Amazon Customer PII is retained for no longer than 30 days following order delivery and is permanently and securely deleted thereafter, except where longer retention is required by applicable law.
ChannelsHub does not sell Amazon Information and does not use Amazon customer PII for unrelated advertising, profiling or marketing.
6. Customer PII
Customer PII is processed only when required by an authorized business workflow.
Where required to fulfill an order, information such as customer name, delivery address and telephone number may be transmitted to the merchant's selected ERP or logistics provider.
ChannelsHub does not use customer PII for unrelated purposes.
This general flow applies to non-Amazon marketplaces. Amazon Customer PII is subject to the additional purpose restrictions and 30-day retention limit described in Section 5.
7. Sharing of Information
ChannelsHub may share information with parties necessary to provide an authorized service.
Depending on the merchant's configuration, these may include:
- Marketplaces and e-commerce platforms
- Merchant ERP systems
- Logistics and carrier providers
- E-invoicing providers
- Infrastructure and security service providers
Examples of supported logistics providers include Yurtiçi Kargo, DHL, Aras Kargo, Sürat Kargo, PTT Kargo, Kolay Gelsin and Horoz Lojistik.
Supported ERP integrations may include Mikro, Nebim, Logo and Vega.
Information is transmitted through authorized interfaces and secure communication mechanisms.
8. International Transfers
Where personal information is transferred outside Türkiye, ZBK applies the requirements of applicable data protection legislation, including the applicable provisions of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK").
International transfers are performed only where an applicable legal basis and required safeguards are available.
9. Data Security
We maintain technical and organizational safeguards appropriate to the nature and sensitivity of information processed through ChannelsHub.
- Access control
- Least-privilege principles
- Multi-factor authentication
- Network protection
- Encryption
- Secure credential management
- Security logging and monitoring
- Vulnerability management
- Secure development practices
- Backup and recovery controls
- Incident response procedures
10. Access to Personal Information
Access to personal information is restricted to authorized personnel and systems based on business necessity and least privilege.
Authorized personnel are individually identified and authenticated.
Personnel with access to personal information are subject to confidentiality obligations under applicable employment or contractual arrangements.
11. Testing and Development
Production customer PII is not intentionally used in development or testing environments.
Where production-like information is required for testing, synthetic, anonymized or masked information is used where reasonably possible.
Production and non-production environments are logically separated and access is restricted.
12. Data Retention
We do not retain personal information indefinitely. Information is retained only for as long as necessary for:
- The purpose for which it was collected
- Contractual obligations
- Legal requirements
- Tax and accounting requirements
- Security and dispute-resolution purposes
- Applicable marketplace requirements
Applicable retention periods are defined in our internal data retention procedures.
Amazon Customer PII is retained for a maximum of 30 days following order delivery and is subject to the additional requirements described in Section 5.
13. Data Deletion and Secure Disposal
When information is no longer required, it is securely deleted, destroyed or anonymized as appropriate.
Deletion procedures cover applicable production data, temporary information, cached information and backup lifecycle processes.
Secure disposal follows recognized secure deletion principles, including NIST SP 800-88 or an equivalent standard where applicable.
Amazon Customer PII is permanently and securely deleted within 30 days following order delivery, or within 30 days of an Amazon deletion request or termination of the applicable authorization, unless retention is legally required.
14. Records of Processing Activities
ZBK maintains records of relevant personal-data processing activities.
- Categories of personal information
- Categories of data subjects
- Processing purposes
- Legal basis
- Data recipients
- International transfers
- Retention periods
- Security measures
- Processing systems and activities
Records are reviewed and updated when material processing activities change.
15. Data Subject Rights
Where KVKK applies, data subjects may exercise the rights provided under Article 11 of Law No. 6698.
Requests may be submitted to:
ZBK Yazılım ve Bilgi Sistemleri A.Ş.
Email:
[email protected]
Where ChannelsHub processes information on behalf of a merchant, the request may need to be coordinated with the relevant merchant or data controller.
16. Security Incidents
ZBK maintains an incident response process for unauthorized access, data leakage, credential compromise and other security incidents.
Our response process includes detection, triage, containment, investigation, remediation, recovery and post-incident review.
Where required by applicable law or contractual obligations, relevant customers, authorities and platform providers are notified.
17. Changes to This Policy
We may update this Privacy Policy to reflect changes in ChannelsHub, our processing activities, applicable laws or security requirements.
The current version will always be published on this page.
18. Contact
ZBK Yazılım ve Bilgi Sistemleri A.Ş.
ChannelsHub
Website:
https://www.channelshub.net
Email:
[email protected]