Hello, I’m Lupi.

LUPİPAK / PRIVACY NOTICE

Quotations · Orders · Production

Privacy & your information

We use the information you share to understand your packaging requirements, prepare a quotation and, if you place an order, manage design, production and delivery.

Last updated: 1 November 2026

01

We contact you to respond to your enquiry.

02

Submitting a form does not subscribe you to marketing.

03

Your information requests: info@lupipak.com

01

Who is responsible and what this covers

This privacy notice covers quotation and order information you provide to Lupipak Ambalaj through our website, Facebook or Instagram lead forms, email, telephone and direct correspondence. Lupipak Ambalaj is the controller responsible for deciding how this information is used in these processes.

Contact: info@lupipak.com · +90 532 510 75 97. Address: DIALITY Business Center, Maltepe Mah. Gümüşsuyu Cad. No: 67 Office: 34, Zeytinburnu, Istanbul, Türkiye.

02

Information we collect

Depending on your enquiry, this includes your name, company and business type, work email, telephone number if provided, country and delivery location; the product, quantity, required delivery date, dimensions, print requirements, artwork and correspondence. If you order, we may also process necessary billing, payment-status, delivery and authorised-contact information.

Please share only information relevant to your project. Do not include identity documents, payment-card details or sensitive information such as health data in a quotation form. Required fields are marked. Without the necessary contact and product information we may be unable to prepare a suitable quotation. Optional fields, such as telephone number, can be left blank.

03

Why we use it and our legal bases

We use your information to assess your enquiry, clarify products and quantities, calculate pricing and delivery arrangements, and discuss your request. If you order, we use the necessary records for artwork approval, production planning, quality, dispatch, invoicing and after-sales support.

Where UK data protection law applies, our bases are steps you request before entering a contract or performance of your contract; legal obligations for applicable records; and our legitimate interests in responding to business representatives, managing business enquiries, securing records and protecting legal rights, subject to your rights and interests. Optional advertising measurement is based on your separate consent. An enquiry is not permission for general marketing messages.

Under Türkiye’s Personal Data Protection Law (KVKK), the relevant bases, depending on the activity, are establishment or performance of a contract (Article 5/2-c), legal obligations (5/2-ç), establishment, exercise or protection of a right (5/2-e), and legitimate interests that do not harm your fundamental rights (5/2-f). Where a separate activity requires explicit consent, we request it separately.

04

How we receive your information

We collect information from the forms you complete, emails and files you send, and telephone or message conversations with you. You can review information prefilled by Meta before submitting a Facebook or Instagram form.

When you submit the quote request form on our main website, your company, country, contact preference, selected products, quantities and technical notes are saved to our secure Back Office and assigned to authorised sales staff. A successful submission is confirmed on screen with a request reference. Submitting a request does not place an order; pricing and document delivery require separate review and authorised approval.

05

Who may receive it

Authorised sales, design, production, operations and accounting personnel may access information as needed for your enquiry or order. Email, hosting and IT service providers may process the communications and records supporting these services. Where an order requires it, production or print service providers, carriers and customs service providers receive the information necessary for their part of the work.

Necessary records may be shared with accounting or legal advisers and competent authorities for invoicing, legal obligations or legal claims. Meta also processes information under its own privacy rules when you use its advertising platform. This notice does not replace Meta’s privacy information for its own services.

06

Processing across countries

Lupipak operates in Türkiye, where enquiries received from other countries are handled. Meta and communication or IT services may also process information in systems outside Türkiye, the UK or your country of residence.

The applicable transfer conditions depend on the recipient, country and service. Cross-border transfers must meet the requirements of applicable law; submitting a form is not blanket consent to international transfers. You can ask info@lupipak.com for details of the recipients, countries and applicable safeguards relating to your enquiry.

07

How long we keep information

We retain quotation and correspondence records for as long as needed to assess the enquiry, conclude discussions and carry out reasonable business follow-up. If you order, relevant records are retained as needed for production, support, accounting, tax and commercial-record obligations and potential legal claims.

We consider whether the enquiry is still open, the last contact, any ongoing order or dispute and applicable statutory periods. When the purpose and any retention obligation end, information is deleted, destroyed or anonymised. We do not apply a single indefinite retention period to every category.

08

Eligibility questions in advertising forms

Some advertising forms ask about business type, product, quantity and delivery expectations. For burger boxes, fries boxes and paper bags in this campaign, the minimum is 10,000 units per product. Production takes 26 working days after artwork approval; shipping time is additional.

If your answers do not match the form’s minimum requirements, the form explains this and does not send a quote request to Lupipak. This is not an order rejection or a binding pricing decision. For a different requirement, email info@lupipak.com to ask our team to review your needs.

09

Optional advertising measurement

On this main website, Meta Pixel advertising measurement is enabled only if you separately allow it. If enabled, Meta may process pages visited, link clicks or a completed-request event, device and browser information and cookie identifiers to measure advertising performance. This measurement does not send the contents of the request or the contact details you enter to Meta; submitting a request is not a completed order.

You do not need to allow measurement to request a quotation. Your preference is stored in this browser’s local storage and in a one-year preference cookie for relevant Lupipak domains. You can change it below; the local-storage preference may remain until you change it or clear browser data. Withdrawing permission stops new Meta measurement events on this main website but does not automatically retrieve information already processed. Meta’s own platform settings also apply.

Optional Meta advertising measurement in this browser: off.

Meta Privacy Policy ↗

10

Your rights and how to contact us

Where UK law applies, you may request access, correction, erasure, restriction or portability, subject to the relevant conditions. You may object to processing based on legitimate interests and withdraw consent for future consent-based processing. Rights can be limited by obligations such as legally required record retention.

Under KVKK Article 11, you may ask whether your data is processed, obtain information about its use and purpose, learn the recipients in Türkiye or abroad, request correction of incomplete or inaccurate data and, where the conditions apply, deletion or destruction and notification of these changes to recipients. You may object to an adverse outcome produced solely by automated analysis and seek compensation for harm from unlawful processing.

Send your name, the contact address used and a description of your request to info@lupipak.com or the postal address above. We may request proportionate identity verification to avoid disclosing information to the wrong person. KVKK requests are answered within 30 days; UK GDPR requests normally within one month, subject to applicable exceptions. You may complain to Türkiye’s Personal Data Protection Board under the applicable procedure, or to the UK Information Commissioner’s Office (ICO), where relevant.

KVKK ↗ICO ↗

11

Changes to this notice

We update this notice and its date when our processes change. If we plan a new and different use, we provide further information before that use and request any permission required by law. For privacy questions, contact info@lupipak.com.

Talk to us about your information.

info@lupipak.com ↗Contact & quotation ↗