Privacy Policy

1. Data Controller Identification

This Privacy and Data Protection Policy governs how Overfit Seamless ("we", "our", or "the Company"), operating an industrial seamless circular knitting facility in Beylikdüzü, İstanbul, Türkiye, handles personal and business data. Under the European Union General Data Protection Regulation (GDPR) and the Turkish Law on the Protection of Personal Data (KVKK Law No. 6698), Overfit Seamless acts as the Data Controller.

2. Commercial and Technical Data We Collect

As a specialized B2B contract manufacturer producing private-label seamless apparel for international apparel brands, e-commerce retailers, and wholesale distributors, we collect commercial data exclusively to evaluate, sample, execute, and deliver custom manufacturing runs.

A. Direct Inquiries and Sourcing Consultations

When you contact our sales engineering team, we process:

• Contact Details: Business name, representative name, business email, physical billing and delivery address, phone/WhatsApp number.
• Procurement Requirements: Target styles (seamless leggings, sports bras, yoga sets), yarn blend specifications, target quantities (respecting our 1,000-piece style MOQ), size ratios, and distribution countries.
• Intellectual Property & Reference Assets: Tech packs, vector graphics, Pantones, sizing charts, CAD files, and technical specifications provided for counter-sampling and Santoni machine programming.

B. Direct Communication Channels

Inquiries sent directly to our international trade managers via enterprise email, phone, or instant business messaging are logged on our secure servers to ensure continuity throughout the sampling and mass manufacturing cycles.

3. Legal Bases for Processing (GDPR & KVKK)

All data acquisition and processing conducted by Overfit Seamless is grounded in rigorous international legal compliance:

• Pre-contractual Steps & Contract Performance (GDPR Art. 6(1)(b) & KVKK Art. 5(2)(c)): Processing is necessary to generate manufacturing quotes, produce fit samples within our 5–7 day cycle, procure custom dyed yarns, and execute batch production agreements.
• Legal Obligations & Customs Clearances (GDPR Art. 6(1)(c) & KVKK Art. 5(2)(a)): Compliance with Turkish export controls, international trade regulations, customs documentation under the EU–Turkey Customs Union, and mandatory tax declarations.
• Legitimate Interests (GDPR Art. 6(1)(f)): Maintaining commercial records, defending against intellectual property infringements, managing supplier-buyer communications, and preventing industrial fraud.

4. Tech Pack Confidentiality and Non-Disclosure Safeguards

We recognize that in the private-label sportswear industry, design exclusivity and technical garment engineering are core commercial assets. We enforce strict confidentiality standards across our Istanbul production floor:

• Tech packs, proprietary fabric compositions, custom dye formulas, and Santoni machine programs developed for your brand are never disclosed, resold, or shared with third-party brands.
• Design and knitting program access is strictly restricted to certified production engineers and machine programmers under binding non-disclosure agreements.
• Counter-samples, over-runs, and QC test pieces bearing your proprietary brand labels are securely recycled or destroyed; they are never liquidated onto wholesale markets.

5. Third-Party Processors and International Transfers

We do not sell, rent, monetize, or broker personal or corporate data to external advertisers. Essential commercial data is transmitted only to audited technical partners strictly necessary for production, logistics, and legal compliance:

• Cloud Infrastructure & Security: Secure enterprise hosting, DNS management, and SSL encryption managed via Tier-1 global infrastructure providers.
• Logistics and Freight Forwarding: International road and air cargo forwarders handling ATA carnets, customs documentation, EUR.1 certificates, and direct factory-to-warehouse dispatch across Europe and North America.
• Accredited Dyeing & Finishing Partners: Yarn details and dye recipes shared with certified partner mills under rigorous confidentiality to ensure OEKO-TEX compliant fabric treatments.

For international buyers in the EU/EEA, data transfers to our facility in Türkiye are governed by European Commission Standard Contractual Clauses (SCCs) to guarantee GDPR-equivalent data security.

6. Data Retention Protocols

We retain commercial records, purchase orders, technical manufacturing files, and correspondence only for as long as is necessary to support your seasonal replenishment orders and fulfill statutory Turkish commercial, export, and fiscal audit periods (typically 5 to 10 years depending on the classification of the trade documentation).

Upon termination of a commercial partnership and conclusion of statutory accounting liabilities, technical drawings, tech packs, and customer correspondence will be permanently purged upon written request.

7. Your Rights Under GDPR & KVKK

As a corporate partner or representative, you maintain comprehensive statutory rights over your personal information:

• Right of Access: Request comprehensive confirmation and copies of personal data maintained within our systems.
• Right to Rectification: Require instant modification of inaccurate, incomplete, or out-of-date commercial contact profiles.
• Right to Erasure ("Right to be Forgotten"): Demand the deletion of personal files when statutory record-keeping periods have lapsed.
• Right to Restrict or Object: Restrict processing or object to data handling based upon our legitimate commercial interests.
• Data Portability: Obtain your technical and commercial files in a structured, commonly used machine-readable standard.

8. Contact the Data Governance Team

To exercise your rights, submit a privacy inquiry, or request an executive Non-Disclosure Agreement (NDA) prior to transmitting proprietary tech packs, contact our data compliance desk directly:

Should your concerns remain unaddressed, you reserve the statutory right to lodge an inquiry with the Turkish Data Protection Authority (KVKK) or your relevant National Data Protection Authority within the European Union.