Pembish.
Türkçe English

Privacy Policy

Last updated: 8 August 2026

In short

We collect very little personal data. Our server keeps standard technical logs when you visit, and if you fill in a form we store what you wrote. We do not use advertising or tracking cookies, we do not monitor visitor behaviour, and we never sell your data.

1. Who we are

This website (pembish.co) is operated by Pembish, based in Türkiye. Pembish is the data controller for the purposes of the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU/UK GDPR. You can reach us any time at tugcesahiint0@gmail.com.

2. Data we collect

a) Information you give us

Our digital wedding invitation pages include an optional RSVP form. If you choose to complete it, we store:

If you email us, your email address and the contents of your message are kept for the duration of our correspondence.

b) Information collected automatically

Like every website, our hosting server records a standard access log for each visit: IP address, date and time, the page requested, browser and operating system information, and the referring address if there is one. These logs exist to keep the site running, diagnose faults and prevent abuse.

When an RSVP form is submitted we also store the sender's IP address alongside the response, to help prevent spam and abuse.

This site does not use Google Analytics or any similar visitor analytics tool, advertising network, or social media tracking pixel.

3. Cookies

We do not place advertising, profiling or analytics cookies on visitors' devices. The only cookie this site uses is a strictly necessary session cookie (a PHP session cookie), and it is created only when a site administrator logs into an admin panel. It keeps that login session active and is deleted when the browser is closed. An ordinary visit writes no cookie to your browser.

4. Why we process it

DataPurposeLegal basis
RSVP form responses Passing your attendance details to the host and planning the event Your consent (by submitting the form)
Email correspondence Answering your question Legitimate interest / your request
Server logs and IP address Security, troubleshooting, abuse prevention Legitimate interest

We do not use your data for automated decision-making or profiling.

5. Sharing and third parties

We do not sell your personal data and we do not pass it to third parties for marketing. Data is shared only in these situations:

6. Pinterest

We promote our Etsy shop's products on Pinterest. This is handled by an automation we built ourselves on top of the Pinterest API. This section explains exactly what that integration does.

What this means for site visitors

This website contains no Pinterest Tag, no Pinterest save button and no embedded pins. Visiting pembish.co therefore sends no data to Pinterest and does not cause Pinterest to track you.

Our Pinterest API integration

Our application accesses only our own Pinterest business account (StudioPembish). That access was granted by the account owner in person, through Pinterest's own authorisation screen. We do not access, collect or store data belonging to any other Pinterest user.

The permissions (scopes) we request, and what each one is used for:

ScopeWhat we use it for
boards:readListing the boards on our account so a target board can be selected
boards:writeCreating the target board if it does not exist yet
pins:readConfirming the status of a pin we created
pins:writePublishing our own product pins
user_accounts:readVerifying that the connection was made to the correct account

The only data we receive and retain from Pinterest is our own account's OAuth access and refresh tokens, together with the names and IDs of our own boards. These are stored on our server in files that cannot be opened directly in a browser. They are never shared with third parties, never sold and never used for advertising. Data obtained from Pinterest is used solely to publish pins and for no other purpose.

Everything we send to Pinterest is material we produced ourselves: product images, a title, a description and a link to our shop. None of it contains personal data belonging to site visitors or customers.

We can revoke this access at any time from our Pinterest account settings. Once revoked, the stored tokens become invalid and are deleted from our files. Questions about our Pinterest integration can be sent to tugcesahiint0@gmail.com.

Our boards and pins on Pinterest are also governed by Pinterest's own terms and privacy policy, and we have no control over the data Pinterest collects while you browse their platform.

7. International transfers

Service providers such as Etsy, OpenAI and Pinterest may operate servers outside Türkiye. When you use those services, or as a result of our use of them, relevant data may be transferred to the countries where those companies operate. Such transfers take place under those providers' own contractual terms and privacy policies.

8. How long we keep data

You can ask us to delete your data sooner at any time.

9. Security

The site is served over encrypted HTTPS. RSVP responses are stored in a file that is protected from being opened directly in a browser, and the admin panel that displays them is password protected. That said, no transmission over the internet and no method of electronic storage is ever 100% secure.

10. Your rights

Under Article 11 of the KVKK — and under the GDPR if you are in the EU or UK — you have the right to:

Send any request to tugcesahiint0@gmail.com. We respond within 30 days at the latest. You may also withdraw your consent at any time.

11. Children's privacy

Our site is not directed at children and we do not knowingly collect personal data from anyone under 13. If you believe a child's data has reached us by mistake, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. When we do, we revise the "Last updated" date at the top of the page. Where a change is significant, we will give additional notice wherever we reasonably can.

13. Contact

Pembish — pembish.co

Email: tugcesahiint0@gmail.com

We answer every privacy question we receive. If you are not satisfied with our response to a KVKK request, you have the right to complain to the Turkish Personal Data Protection Authority (KVKK).