Cookie Policy
This Cookie Policy explains the cookies and similar technologies used when you visit www.ribbonflowers.com, why we use them and how you can manage your preferences.
1. Data controller
The data controller for personal data processed through cookies is:
- Company name: Ribbon Flowers Çiçekçilik Limited Şirketi
- Address: Kültür Mahallesi, Arnavutköy Yolu Sokak No: 66, Beşiktaş/İstanbul, Türkiye
- MERSİS No: 0735102793700001
- Phone: +90 212 323 00 42
- Data protection requests: [email protected]
You can find detailed information on how we process your personal data in our Privacy Policy (KVKK Information Notice).
2. What is a cookie?
Cookies are small text files saved in your browser when you visit a website. They help the site remember you and your preferences as you move between pages or return to the site.
- First-party cookies are set directly by our site.
- Third-party cookies are set and read by the service providers we use on our site (for example Google and Meta).
- Session cookies are deleted when you close your browser. Persistent cookies stay in your browser until they expire or you delete them.
In this policy, technologies that work in a similar way to cookies, such as pixels, tags and browser local storage, are also treated as cookies.
3. Cookie categories
We group cookies into the same three categories shown in the cookie banner at the bottom of our site:
- Strictly necessary cookies: Required for the site to work. They remember your basket, your sign-in, your order tracking, the language, currency and delivery area you choose, and your cookie preferences. They cannot be switched off in the cookie banner.
- Performance and analytics cookies: Help us improve our site by measuring the number of visits, traffic sources and how pages are used.
- Advertising and targeting cookies (marketing cookies): Set by our advertising partners. They are used to measure how well our ads perform, to show you ads that match your interests and to reach people who have visited our site before.
4. Third-party tools and their cookies
Third-party cookies are set and read by the relevant provider. Information collected this way may also be processed on the providers' servers outside Türkiye. Where the table says "Set by the provider", the duration is decided by the provider and may change. Names marked "examples" are some of the cookies the provider uses.
| Cookie name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| _ga, _ga_<id> | Google (Google Analytics) | Visit and traffic statistics; measuring how the site is used | Performance and analytics | Set by the provider |
| _gcl_au, _gcl_aw; IDE on doubleclick.net (examples) | Google (Google Ads) | Measuring visits and orders that come from Google ads; remarketing | Advertising and targeting | Set by the provider |
| _fbp | Meta (Meta Pixel) | Measuring the performance of Facebook and Instagram ads and ad targeting | Advertising and targeting | 90 days |
| _fbc | Meta (Meta Pixel) | Recording your visit when you arrive through a Facebook or Instagram ad link | Advertising and targeting | Set by the provider |
| _pin_unauth and cookies on ct.pinterest.com (examples) | Pinterest (Pinterest Tag) | Measuring the performance of Pinterest ads and ad targeting | Advertising and targeting | Set by the provider |
| __obref | OpenAI (ChatGPT ads measurement pixel) | Measuring visits and orders that come from ChatGPT ads | Advertising and targeting | 365 days |
| __oppref, __oaiq_consent (examples) | OpenAI (ChatGPT ads measurement pixel) | Other cookies that may be used for the same measurement purpose | Advertising and targeting | Set by the provider |
| __cf_bm, _cfuvid (on bzrcdn.openai.com) | OpenAI (Cloudflare infrastructure) | Security and traffic management on the domain that serves the OpenAI measurement script | Advertising and targeting | __cf_bm: less than 1 day; _cfuvid: for the session |
| _ttp, _tt_enable_cookie, ttcsid (examples) | TikTok (TikTok Pixel) | Measuring the performance of TikTok ads and ad targeting | Advertising and targeting | Set by the provider |
| enh_visitor_session, enh_source, enh_token, enh_last_access | Enhencer | Building audiences for Meta and Google ads based on visits and product views on our site, and measuring ad performance | Advertising and targeting | 120 days |
| enh_info_ex and other cookies starting with enh_ | Enhencer | Other cookies that may be used for the same purpose | Advertising and targeting | Set by the provider |
| Insider cookies | Insider | Measuring browsing and shopping interactions on our site to offer personalised content and campaigns | Advertising and targeting | Set by the provider |
The following tools do not write cookies to your browser:
- Google Tag Manager: Loads some of the tags listed above onto our site.
- Cloudflare Web Analytics: Measures page views and how quickly pages load.
- Our visitor statistics: The visitor statistics of our e-commerce platform provider, İkost, do not include information such as your name, email address or phone number. Only on the order confirmation page, a marker linked to the order code is kept in your browser so that the same order is not counted twice.
5. Our own cookies (first-party)
| Cookie name | Purpose | Category | Duration |
|---|---|---|---|
| accessToken, refreshToken | Keeping your member or guest session open and renewing it securely | Strictly necessary | 365 days |
| userInfo | Using your account details (member number, first name, last name, email, phone and newsletter preference) on site pages when you are signed in as a member | Strictly necessary | Up to 365 days |
| isGuest | Indicating that you are shopping without an account (as a guest) | Strictly necessary | 1 day |
| cart_code | Linking your basket to you and preventing others from accessing it | Strictly necessary | 7 days |
| tracking_codes | Storing your permission to view your order on the order tracking page | Strictly necessary | 7–30 days |
| selected_location, bolgeid | Remembering the delivery area you chose and showing products and delivery options for that area | Strictly necessary | 30 days |
| NEXT_LOCALE | Remembering the language you chose | Strictly necessary | 365 days |
| IKOST_CURRENCY | Remembering the currency you chose | Strictly necessary | 365 days |
| cc_cookie | Storing the choice you made in the cookie banner | Strictly necessary | 182 days |
| pendingLoginEvent | A temporary technical marker that tells the page your Google sign-in has completed | Strictly necessary | 60 seconds |
| debug_mode | Marking debug mode, which is only turned on through a special link during technical support | Strictly necessary | 1 day |
| recently_viewed | Keeping the codes of the products you viewed most recently (up to 10) for the "Recently viewed" section | Strictly necessary (site feature) | 365 days |
| ikost_attr | When you arrive through an ad or social media link, storing campaign details so the visit can be matched with an order | Advertising and targeting | 90 days |
If you choose to sign in with Google, you are taken to Google's sign-in page. Google's own cookie and privacy rules apply on that page.
6. Local storage
We keep some information in your browser's local storage (localStorage and sessionStorage) instead of cookies, for example your basket code, the saved address you selected, your search history and notices you have closed. Some third-party tools, such as Meta, OpenAI, Enhencer and Insider, also use similar records for the purposes described above. You can delete these records by clearing your browser's site data.
7. How to manage your preferences
Cookie banner: When you first visit our site, a cookie banner appears at the bottom of the page.
- The "Accept" button allows all cookie categories.
- The "Settings" button opens the "Privacy Preference Center", where you can switch the Performance and analytics and the Advertising and targeting categories on or off separately. You can save your choice with "Save preferences" or choose "Accept all".
- If you do not want to allow the Performance and analytics and the Advertising and targeting categories, leave these two categories switched off in "Settings" and click "Save preferences".
Your choice is stored in the cc_cookie cookie for 182 days. When this period ends, or when you delete your cookies, the banner is shown again.
You can change your preferences at any time: Change my cookie preferences. If the link does not open, delete this site's cookies in your browser and reload the page; the banner will appear again.
When you withdraw consent for a category, some third-party cookies that were set earlier may remain in your browser. You can delete them in your browser settings.
Browser settings: In browsers such as Chrome, Safari, Firefox and Edge, you can view, delete or block cookies in the privacy section of the settings menu. If you block strictly necessary cookies, parts of the site such as the basket, sign-in and payment may not work properly.
8. Your rights under the KVKK and how to contact us
You can send requests about your rights under Article 11 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) to [email protected]. Requests are concluded free of charge within 30 days at the latest. Details of your rights are set out in our Privacy Policy (KVKK Information Notice).
9. Effective date and changes
This Cookie Policy is effective as of 18 October 2026. We may update this policy as the tools we use change. The current version is always published on this page.