Privacy Policy

Last updated: 17 October 2026

This Privacy Policy explains how O ve O Company Elektronik ve Kozmetik Pazarlama Limited Şirketi ("O ve O Company", "we", "us"), operating under the trade name Two Goghs, collects, uses, stores and protects information when you use this website or work with us.

Data controller
O ve O Company Elektronik ve Kozmetik Pazarlama Limited Şirketi
Vişnezade Mah. Süleyman Seba Cad. No: 79 İç Kapı No: 1, Beşiktaş, İstanbul, Türkiye
Email: hi@wavesounds.com.tr

1. Information we collect

Information you give us. When you submit the application form, book a call or email us, we collect your name, email address, brand or company name, the channels you sell on, your revenue range, the ASIN or store link you share and anything you choose to write to us.

Information from client accounts. When a client authorizes us to access their Amazon Seller Central, Amazon Ads or other marketplace and advertising accounts, we access business data needed to deliver the agreed services, such as advertising performance, search and catalog reports, sales totals, inventory and listing content. We access these accounts only through the permissions the client grants us and, on Amazon, only through roles approved for us in Amazon's Solution Provider Portal.

Information we do not need. Our services do not require Amazon customers' personally identifiable information (such as buyer names, addresses, phone numbers or emails). We do not request roles that expose it, and we do not collect or store it. If such information ever reaches us incidentally, we delete it without further use.

Technical information. This website is hosted on Netlify. Our hosting provider processes standard server logs (such as IP address, browser type and time of request) to deliver and secure the site. We do not currently use analytics or advertising cookies. If we add them, we will update this policy and ask for your consent where the law requires it.

2. How we use information

• To answer your enquiry, assess your account and prepare a proposal.
• To deliver the services agreed with a client: advertising management, listing and search optimization, creative work, reporting and account management.
• To communicate about ongoing work and invoices.
• To meet legal, tax and accounting obligations.

We do not sell personal information. We do not use client data for any purpose other than delivering services to that client.

3. Amazon information

Information obtained from Amazon services ("Amazon Information") is handled in line with Amazon's Solution Provider Portal Agreement, Acceptable Use Policy and Data Protection Policy. In particular:

• We use Amazon Information only to provide services to the selling partner who authorized us, and only within the scope of that authorization.
• We do not share Amazon Information with third parties except service providers strictly necessary to deliver the service, under confidentiality and equivalent security obligations.
• We do not use Amazon Information to market to Amazon customers or to build profiles of them.
• We encrypt Amazon Information in transit and at rest, restrict access to people who need it for their work, and protect accounts with multi-factor authentication.
• We do not retain personally identifiable information. Business data is retained only as long as needed to deliver the service and is deleted when the engagement ends, unless a client asks us to keep its reports or the law requires otherwise.
• We notify Amazon of any security incident involving Amazon Information within 24 hours of detecting it, as described on our Technology & Data Security page.

4. Sharing

We share information only with:

• Service providers who help us run our business (website hosting, email, file storage, scheduling), under contracts that require them to protect it.
• Authorities, where the law requires us to.
• A successor entity in the event of a merger or transfer of the business, under this same policy.

5. International transfers

We are based in Türkiye and some of our service providers process data in other countries, including the European Union and the United States. Where data moves across borders, we rely on safeguards available under applicable law.

6. Retention

• Enquiries that do not lead to a contract: up to 12 months, then deleted.
• Client business data: for the duration of the engagement, then deleted or returned, except records we must keep for legal, tax or accounting reasons.
• Amazon customers' personally identifiable information: not retained.

7. Security

We protect information with access controls, multi-factor authentication, encryption in transit and at rest, a password manager for credentials, and a documented incident response plan. Details are on our Technology & Data Security page.

8. Your rights

Depending on where you live, including under Türkiye's Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR), you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To use these rights, email hi@wavesounds.com.tr. We reply within 30 days. You may also complain to your local data protection authority.

9. Children

Our services are for businesses. We do not knowingly collect information from anyone under 18.

10. Changes

We may update this policy. The date at the top shows the latest version. Material changes will be highlighted on this page.

11. Contact

hi@wavesounds.com.tr