Legal Information

Cookie Policy

We explain which cookies we use, why we use them and how you can manage your preferences under the KVKK and GDPR framework.

Version 1.1Last updated: October 2026

This cookie policy explains which cookies are used on our website, the purpose of these cookies and how you can manage your preferences within the scope of KVKK and GDPR.

What is a Cookie?

Cookies are small text files placed on your device (computer, tablet or smartphone) through your browser when you visit a website. They allow websites to recognise you, remember your preferences and personalise your experience.

Cookies do not harm your device and cannot access your personal files. They only carry session information between the website and your browser.

Types of Cookies We Use

The following categories of cookies are used on our website. Essential cookies are required for technical functionality; explicit consent is obtained for others.

Types of Cookies We Use
Cookie Name	Provider	Purpose	Duration	Type
__ff_consent	foraflora.com	Stores the user's cookie preferences. The banner is shown again unless a preference is made.	1 year	Essential
ff_consent_v1	foraflora.com	Stores the consent preference version; banner is re-triggered when the policy is updated.	1 year	Essential
ff_locale	foraflora.com	Stores the selected language preference (TR/EN/AZ/AR/RU).	1 year	Essential
_ga, _ga_*	Google Analytics 4	Anonymous visitor count, page view and interaction measurement. User identity is not linked.	2 years	Analytics
_gid	Google Analytics 4	Distinguishes separate visitor sessions.	24 hours	Analytics
_clck	Microsoft Clarity	Microsoft Clarity — stores an anonymous Clarity visitor ID and preferences (heatmap and session-recording analysis).	1 year	Analytics
_clsk	Microsoft Clarity	Microsoft Clarity — links multiple page views in one visit into a single session recording.	1 day	Analytics
CLID, MUID, ANONCHK, MR, SM	Microsoft (clarity.ms)	Microsoft Clarity — browser identifiers used on Microsoft domains; lets a first visit be recognised and IDs be synchronised across Microsoft domains.	10 minutes – 1 year (depends on the cookie)	Analytics
_fbp	Meta (Facebook)	Meta Pixel — ad targeting and conversion measurement.	90 days	Marketing
_fbc	Meta (Facebook)	Meta Pixel — links click ID to session.	90 days	Marketing
tt_webid	TikTok	TikTok Pixel — ad targeting and conversion tracking.	13 months	Marketing
_pinterest_ct_ua	Pinterest	Pinterest Tag — campaign performance and audience building.	1 year	Marketing

Legal Basis and Consent

The following legal bases apply to the processing of cookies:

Essential cookies: KVKK Article 5(2)(f) — legitimate interest of the data controller; essential for technical functionality of the website. No consent required.
Analytics cookies (Google Analytics 4, Microsoft Clarity): KVKK Article 5(1) and GDPR Article 6(1)(a) — explicit consent. No analytics data is collected before consent is given.
Marketing cookies: KVKK Article 5(1) and GDPR Article 6(1)(a) — explicit consent. Meta Pixel, TikTok Pixel and Pinterest Tag are not loaded before consent is given.
For EU/EEA/UK visitors, ePrivacy Directive Article 5(3) applies; terminal device access is not permitted without consent.

Through GTM Consent Mode v2 integration, all third-party tags track consent status in real time. When consent is withdrawn, relevant cookies are deleted from the browser.

Cookie Retention Period

Cookies are retained according to the following principles:

Session cookies: automatically deleted when the browser is closed.
Persistent cookies: retained for the duration specified in the table; cleared when expired or deleted by the user.
Consent log: retained for 2 years for audit trails. This data is not personal data but an anonymous session hash.
When consent is withdrawn, relevant third-party cookies are deleted immediately.

Third-Party Cookies and International Transfer

Marketing and analytics cookies may belong to third-party providers whose servers are located outside the European Economic Area (EEA). These transfers are carried out under appropriate safeguards (Standard Contractual Clauses or Adequacy Decisions) within the scope of KVKK Article 9 and GDPR Article 46.

Google LLC (USA) — Google Analytics 4 · Google Ads · GTM: under Google's Data Processing Terms and EU Standard Contractual Clauses.
Microsoft Corporation (USA) — Microsoft Clarity (heatmaps and session recordings): under Microsoft's Data Processing Terms and EU Standard Contractual Clauses.
Meta Platforms Ireland Ltd (EU) — Meta Pixel: under Meta's GDPR Data Processing Terms.
TikTok Technology Limited (EU) — TikTok Pixel: under TikTok's EU Data Transfer Terms.
Pinterest Europe Ltd (EU) — Pinterest Tag: under Pinterest's Data Processing Agreement.

Managing Your Cookie Preferences

You always have the right to change your cookie preferences. You can use one of the following methods:

Click the 'Manage Cookie Preferences' link at the bottom of our website to open the preference panel.
The panel is always accessible by clicking the cookie icon at the bottom left of the page.
You can block or delete cookies from your browser settings (some site features may not work in this case).
Google Analytics opt-out: tools.google.com/dlpage/gaoptout
Microsoft Clarity privacy information: privacy.microsoft.com/privacystatement
Manage your ad preferences for Meta: facebook.com/settings?tab=ads
For TikTok: ads.tiktok.com/i18n/optout

or use the cookie icon at the bottom left of the page.

Data Subject Rights

Under KVKK Article 11 and GDPR Articles 15–22 you have the following rights:

To learn whether your personal data is being processed (KVKK Art.11/a, GDPR Art.15)
To request information about processing (KVKK Art.11/b)
To request correction of incomplete or incorrect data (KVKK Art.11/c, GDPR Art.16)
To request deletion or destruction of personal data (KVKK Art.11/d, GDPR Art.17)
To request notification of data to third parties (KVKK Art.11/e)
To object to processing; to object to automated processing (KVKK Art.11/f-g, GDPR Art.21-22)
Data portability — receiving data in structured, machine-readable format (GDPR Art.20)
Withdrawal of consent — at any time, without affecting the lawfulness of existing processing (GDPR Art.7(3))

You can forward your requests to gdpr@foraflora.com . Applications under KVKK are responded to within 30 days.

Data Controller Contact Information

For questions about this policy:

Title: Foraflora Pharmaceuticals
Tax No: 3881880509
Address: Abdurrahman Nafiz Gürman Mah., General Ali Rıza Gürcan Cad., No:27 Platform Suit B Block D:81, 34760 Güngören / İstanbul
Email: gdpr@foraflora.com
Phone: +90 552 994 88 28
KVKK Data Controllers Registry (VERBİS) registration number: [will be added when VERBİS registration is complete]

Your preferences, under your control.

When significant changes are made, the policy version is updated and published on our website. The banner is shown again to ask for preference. This policy was last updated in April 2025 (v1.0).

Have questions?

We're here if you have questions about cookies or privacy.

You can forward your questions about cookie policy, personal data or your KVKK/GDPR rights to our team.