Secure Shopping Policy

COMPREHENSIVE SECURE SHOPPING AND CYBER SECURITY POLICY

At NetMilli, we value the security of every transaction you make on our digital platform as much as we value the quality of the century-old brands we offer. By integrating the same high-level cyber security protocols used by global e-commerce giants (Amazon, Shopify, etc.) into our infrastructure, we operate on a "Zero Risk" principle.

This Secure Shopping Policy has been prepared with the meticulousness of a "constitution" to transparently demonstrate how your data, payments, and personal privacy are protected by a massive digital shield.

ARTICLE 1 – END-TO-END ENCRYPTION AND INFRASTRUCTURE SECURITY (SSL / TLS) 1.1. 256-Bit Asymmetric Encryption:

Our website (www.netmilli.com) is protected end-to-end for data transmission using 256-bit SSL (Secure Socket Layer) and current TLS 1.2/1.3 encryption technologies, which are international military and financial security standards. 1.2. Lock Icon and Digital Certificate: The "lock" icon in your browser's address bar and the fact that the address begins with "https://" indicate that the data flow between your device and our servers is certified by independent global authorities to be secure against eavesdropping, copying, or tampering. 1.3. Global Server Security: Our site is hosted behind the cloud shields and firewalls of Shopify, one of the world's largest and most secure e-commerce infrastructures, protecting against cyber attacks (DDoS, SQL Injection, etc.).

ARTICLE 2 – INTERNATIONAL PAYMENT SECURITY (PCI-DSS & 3D SECURE) 2.1. PCI-DSS Level 1 Compliance:

NetMilli works with infrastructures holding PCI-DSS (Payment Card Industry Data Security Standard) Level 1 certification, the highest security standard in the credit card industry. 2.2. No Card Data Storage Principle: Financial data such as your credit card number, expiration date, and CVV/CVC security code entered during the transaction are never stored on our servers, recorded in our databases, nor visible even to our system personnel. 2.3. Direct Bank Connection: Your payment transaction is transmitted directly to your bank's virtual POS system through an encrypted tunnel between your device and BRSA-approved payment institutions (PayTR, etc.) and the Shopify Payments infrastructure, without any intermediaries. 2.4. Mandatory 3D Secure Verification: To protect against card duplication and the use of stolen cards, "3D Secure" (Encrypted Secure Payment) is mandatory for all orders on our site. No charges can be made to your account without entering the one-time SMS (OTP) password sent to your mobile phone by your bank.

ARTICLE 3 – PERSONAL DATA SECURITY AND PRIVACY (KVKK & GDPR)

3.1. All personal data you share when registering with our system or placing an order (name, address, phone, e-mail) is processed and protected in accordance with the standards of the Personal Data Protection Law No. 6698 (KVKK) and the European Union General Data Protection Regulation (GDPR). 3.2. Your data will never be sold, rented, or shared with third parties for commercial purposes without your explicit consent, except for legal obligations (invoicing) and operational necessities (cargo delivery). Data access is restricted within the company only to authorized personnel who "need to know."

ARTICLE 4 – AI-POWERED ANTI-FRAUD FILTERS

4.1. Risk Analysis: Our integrated algorithms instantly scan for abnormal purchase attempts from different IP addresses, inconsistent billing/delivery address matches, and transactions occurring at suspicious speeds. 4.2. Order Security Verification: When our AI-based "Anti-Fraud" system flags an order as suspicious (high risk), the NetMilli Security Unit may suspend the order and reserves the right to contact the cardholder to request additional verbal or written confirmation (e.g., bank authorization code) to ensure that the transaction was performed by the actual cardholder.

ARTICLE 5 – PHISHING AND SOCIAL ENGINEERING WARNINGS (ATTENTION!)

To prevent our customers from falling victim to cyber scammers, we clearly declare the following official rules: 5.1. No Password or Card Information Requested: NetMilli employees, customer service representatives, or courier personnel will NEVER request your credit card number, banking password, 3D Secure SMS code, or user account password via e-mail, SMS, phone call, or WhatsApp. 5.2. Verification of Official Communication Channels: Please ensure that any e-mails claiming to be from "NetMilli" are sent from our official servers with the @netmilli.com extension. Do not trust phishing messages that contain fake links, create a sense of urgency ("your account will be closed," "payment approval required," etc.), or redirect you to different addresses. 5.3. Notification Obligation: If you receive a suspicious e-mail, message, or call, please report the situation by contacting us through our official communication channels listed below before proceeding. NetMilli cannot be held legally liable for material/moral damages arising from a user's own negligence due to device security vulnerabilities or external phishing attacks.

ARTICLE 6 – CONTACT INFORMATION AND SECURITY NOTIFICATIONS

To obtain information about our security policies, report suspicious transactions, or submit requests regarding your personal data, you can contact our corporate operations center using the information below:

  • Company Name / Trade Name: Resul Ertuğrul (NetMilli)
  • Tax Office and No: Küçükçekmece Tax Office / 3740011366
  • Headquarters Address: Fatih Mah. Prof. Dr. Aziz Sancar Cad. No: 82 İç Kapı No: 27 Küçükçekmece / İstanbul
  • Cyber Security and General Support E-mail: info@netmilli.com
  • Official Registered E-mail (KEP): resul.ertugrul@hs09.kep.tr
  • WhatsApp Suspicious Transaction Report Line: 0541 209 08 32
  • Working Hours: Weekdays: 09:00 - 18:00 | Saturday 09:00 - 13:00 (Closed on Sundays)