Privacy Policy - Bf Spices

Last updated: February 27, 2026

BF Spices Ltd ("we", "our", "us") is committed to protecting the privacy of visitors to our website www.bfspices.com. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the EU General Data Protection Regulation (GDPR), Turkish Personal Data Protection Law (KVKK No. 6698), and other applicable data protection regulations.

1. Data Controller

BF Spices Ltd
Bursa Organize Sanayi Bolgesi, Demirciler St. G Bl. No:12
TR 16149 Nilufer, Bursa, Turkey
Email: [email protected]
Phone: +90 224 211 78 73

2. Information We Collect

a) Information you provide directly: When you submit our Request a Quote form or contact us, we collect your name, business email address, phone number, company name, country, and any additional information you include in your message.

b) Automatically collected information: When you visit our website, we automatically collect certain technical data including your IP address, browser type, device information, pages visited, time spent on pages, and referring website.

c) Cookie data: We use essential cookies for website security and functionality, and analytics cookies to understand how visitors use our site. See Section 7 for details.

3. How We Use Your Information

a) To process your quote requests and communicate about our products, pricing, and shipping terms.

b) To maintain records of our B2B communications and provide ongoing customer support.

c) To protect our website from spam, bot attacks, and fraudulent form submissions.

d) To analyze website traffic patterns and optimize user experience.

e) To comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing (GDPR)

Legitimate interest: Business inquiries, website security, analytics (Art. 6(1)(f)).

Consent: Non-essential cookies activated only after consent (Art. 6(1)(a)).

Contractual necessity: Processing data to respond to quote requests (Art. 6(1)(b)).

Legal obligation: Where required by law (Art. 6(1)(c)).

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only with service providers under strict agreements, and legal authorities when required by law.

6. Data Retention

Quote requests: 3 years. Analytics: 26 months. Cookie consent: 1 year. Security logs: 90 days.

7. Cookies

Essential Cookies (always active)

bf_cookie_consent — Cookie preference. 1 year.

bf_human_check — Anti-spam verification. 1 hour.

WordPress session cookies — Basic functionality.

Analytics Cookies (with consent)

Google Analytics — Traffic analysis. Up to 26 months.

Google reCAPTCHA — Form protection by Google LLC.

8. Your Rights

Under GDPR and KVKK: access, rectification, erasure, restrict processing, data portability, object to processing, withdraw consent. Contact [email protected]. Response within 30 days.

9. International Data Transfers

Our website is operated from Turkey. For EEA visitors, we implement Standard Contractual Clauses (SCCs) where required.

10. Data Security

We implement SSL/TLS encryption, multi-layer form security, secure hosting, and access controls.

11. Contact Us