How to Build an E-Commerce Website: A Step-by-Step

As of 2026, building an e-commerce site is no longer just "pick a platform and upload products." It's a discipline that ties legal registration, payment integration, the shipping chain, data protection compliance, distance sales contracts, tax rules, an SEO foundation, and a performance budget into a single technical project. In Turkey, e-commerce volume crossed 3.16 trillion TRY in 2024 (Ministry of Trade ETBIS data) with active merchants exceeding 600,000. Entering the market is still possible, but the bar has clearly risen.

This guide is an end-to-end technical reference for entrepreneurs and businesses launching an online store from scratch. From choosing your platform to understanding the tax obligations that await you, from iyzico or PayTR virtual POS integration to shipping APIs, from KVKK privacy notices to Core Web Vitals optimization, every step is covered with real commands, real configurations and 2026 market data. We don't recommend brands; we teach the logic and the criteria, and you make the call.

Before You Build: The Decision Framework

Before you touch any technical setup, write down clear answers to four foundational questions. Founders who skip this step and dive straight into infrastructure tend to find themselves three months later stuck with the wrong platform, the wrong business entity and the wrong marketing budget.

Which model are you building? B2C (selling to end consumers), B2B (wholesale / dealer network), D2C (manufacturer-direct-to-consumer), C2C (peer-to-peer marketplace) or hybrid. The decision directly shapes your tax structure, invoicing module and payment integration.
What entity type? Sole proprietorship (fastest, cheapest, set up in 1-3 days), limited company (tax advantages, corporate image, ~7-15 business days), or joint-stock company (flexibility for partnerships and going public). If your annual turnover is under 2 million TRY, a sole proprietorship is enough for most founders.
What's your inventory model? Owned stock (warehouse + logistics), dropshipping (shipped directly from supplier), made-to-order (POD - print on demand), digital goods (software, e-books, courses). Each carries different shipping, invoicing and VAT behavior.
What's your scale expectation? 50 orders a month, 500, or 50,000? For 50 orders a hosted SaaS is plenty; for 5,000 you'll want self-hosted WooCommerce / OpenCart on your own server; for 50,000+ you need custom architecture and a dedicated team.

If you can't give clear answers to these four questions, stop the setup and write a business plan draft. Even a single-page Business Model Canvas can prevent major missteps. For market research try Google Trends, for keyword volume Google Ads Keyword Planner, and for competitive analysis Ahrefs / SEMrush. As a free alternative, the Ahrefs Free Keyword Generator delivers enough starter data.

Legal Setup for E-Commerce in Turkey

Opening an e-commerce site in Turkey is a process that begins with a technical decision but won't survive without a legal foundation. The Ministry of Trade and Law No. 6563 (the Law on the Regulation of Electronic Commerce) impose six core obligations on anyone selling online. Skipping them leads to administrative fines.

Tax registration: File a notice of commencement with your local tax office (sole proprietors can do this fully online via the Interactive Tax Office; corporate entities go through the chamber of commerce and MERSIS).
ETBIS registration: Registration to the Electronic Commerce Information System via eticaret.gov.tr/etbis is mandatory. It must be completed before the order + contract flow goes live.
KEP address: Registered Electronic Mail — mandatory for corporate entities, recommended for sole proprietors. Available from PTT KEP or licensed KEP providers (around 150-300 TRY/year).
KVKK compliance: Under Law No. 6698 you need a privacy notice, explicit consent statements, a cookie policy, and (above the threshold) VERBIS registration. Combine this with the security controls in our OWASP Top 10 2026 guide.
Distance sales contract + pre-contract information form: Must be shown to the customer and confirmed before order approval; the contract text must comply with the Distance Contracts Regulation.
Refund and right of withdrawal: A 14-day right of withdrawal is mandatory (exceptions: digital goods, made-to-order items, perishables). This text must be clearly published on the site.

ETBIS registration requires a verified email, verified mobile number, tax number, commercial activity details, and your website domain. You can't register before the site is live, so the correct order is: complete the legal process after domain + hosting setup, but before you start accepting payments.

Tax rules: In 2026 sole proprietorships can choose between the simplified regime (annual turnover under 300,000 TRY) or the standard regime (above that). Corporate entities are always subject to corporate tax and VAT. The standard VAT rate is 20% on most products; reduced rates of 1% or 10% apply to food, pharmaceuticals, books and education. The current rate tables are published on the Revenue Administration website.

Platform Choice: The Main Families and Decision Matrix

There's a fundamental truth in choosing an e-commerce platform: there's no single right platform — the right one is the one that fits you. You'll pick from three core families: open source (self-hosted), Turkey-based SaaS, and global SaaS. On top of these, the hybrid approach (Next.js 15 + headless commerce) is gaining traction in the mid-to-upper segment.

Open Source (Self-Hosted) Solutions

WooCommerce (WordPress plugin): Largest plugin ecosystem, free core, ~37% global market share. Turkish iyzico/PayTR/Param virtual POS plugins are available. Scales to 50,000+ products and 100,000+ orders per month on a single server. Requires WordPress know-how.
OpenCart: Lighter, MVC architecture, strong community in Turkey. Official Turkish package available; most shipping and virtual POS modules are free or in the 200-500 TRY range. Ideal for small-to-medium businesses.
PrestaShop: More common in the European market, multilingual structure by default. Module pricing is high (50-200 EUR per module).
Magento (Adobe Commerce): Enterprise tier with strong B2B and multi-store support. Server requirements are heavy (8GB+ RAM, dedicated DB). Setup + theme + integration costs can exceed 500,000 TRY.
Shopware / nopCommerce / Odoo eCommerce: Niche use cases — Odoo if ERP integration is a priority, nopCommerce if your stack is.NET.

The shared advantage of self-hosted solutions is full control: you can change source code, write your own payment integration, extend the database schema. The drawback: everything is your responsibility. Server security, backups, performance tuning, retaining GDPR/KVKK logs, automatic updates — all of it falls on you.

Turkey-Based Hosted E-Commerce Systems

The hosted e-commerce market in Turkey has matured. Local providers such as ikas, T-Soft, IdeaSoft, Ticimax, ePlatform, Faprika and Shopier offer Turkish support, TRY billing, local virtual POS integrations, ETBIS registration assistance, and e-invoice / e-archive add-ons. Typical monthly pricing — 2026 figures, varies by provider — looks like this:

Starter packages: 0-500 TRY/month (product cap of 100-500, 2-4% revenue commission)
Standard packages: 1,000-2,500 TRY/month (unlimited products, multi-payment integration, marketplace integration)
Pro / Enterprise: 4,000-15,000 TRY/month (B2B module, multi-store, custom API, SLA support)
Setup fee: 0-25,000 TRY (custom theme, migration, training)
Commission: Some providers add 0.5-2% per-order commission — read the contract

The advantage of a hosted platform: time-to-first-order drops to 1-7 days, no technical staff required, and you get template texts for ETBIS / KEP / KVKK. The downside: vendor lock-in — exporting your data may be difficult, custom requests cost extra development, and the monthly subscription can grow to 60-180 thousand TRY per year as you scale.

Global SaaS

Shopify: The world's largest e-commerce SaaS (~10% global market share). Basic 25 USD/month, Standard 65, Advanced 399 (2026 pricing). No TRY billing, exposed to FX. iyzico and PayTR offer official integrations for Turkish virtual POS.
BigCommerce: Strong in the US market with a solid enterprise B2B module. Local Turkish support is weak.
Wix eCommerce / Squarespace Commerce: Site-builder focused, practical for small catalogs (50-300 products). Turkish support is limited.
Webflow eCommerce: Design-led, suited to boutique brands. Limited product count (3,000), USD billing.

Decision Matrix

Under 100 orders/month + tight budget: Local SaaS starter package or WooCommerce + cheap hosting (setup 0-5,000 TRY).
100-1,000 orders/month + growth phase: Local SaaS standard package or WooCommerce/OpenCart + LiteSpeed/Nginx + Redis (setup 10-30,000 TRY).
1,000-10,000 orders/month: Local SaaS pro or WooCommerce/PrestaShop + dedicated VPS + CDN + Redis (setup 30-100,000 TRY).
10,000+ orders/month: Magento/Shopware or headless architecture (Next.js + Medusa/Saleor/Shopify Plus); custom architecture, dedicated DBA, full SRE (setup 200,000+ TRY).

Choosing and Registering a Domain

Your domain is your brand's identity on the internet; products may change, servers may change, even your platform may change — your domain has to stay the same. You can find a deeper guide in our What Is a Domain Name article. For e-commerce specifically, watch out for these:

Prefer.com.tr or.com: For Turkey-focused sales, .com.tr (NIC.TR accreditation) is safest, and .com is best for international sales. .com.tr may require chamber of commerce registration or a trademark certificate.
Trademark conflict check: Search the Turkish Patent and Trademark Office registry. A registered trademark with the same name carries legal risk.
Short, easy to pronounce, unambiguous to spell: Names of 7-12 characters drive 2.5% more direct traffic (Ahrefs study).
Avoid hyphens and digits: Weak for SEO and brand perception.
Annual price:.com 350-450 TRY,.com.tr 250-350 TRY,.net.tr/.org.tr 200-300 TRY (2026, varies by provider).

Make sure your domain's WHOIS data is accurate and current; during ETBIS registration the domain owner must match the business owner. Otherwise the registration is rejected. For WHOIS lookups you can use our WHOIS lookup tool.

Hosting / Server Selection

The hosting decision directly determines the fate of your e-commerce site. We covered the types in detail in the hosting types guide; for e-commerce specifically, here are 7 criteria to watch:

SSD/NVMe disks: HDD-backed hosting is unacceptable in 2026. NVMe is 30-60% faster than SSD on IOPS-heavy MySQL workloads.
RAM and CPU: Minimum 2GB RAM and 2 vCPU for WooCommerce. For 1,000+ products or heavy campaign periods aim for 4GB+, 4 vCPU.
PHP 8.3 with OPcache + JIT: WooCommerce checkout that takes 800ms+ on older PHP drops to 200-300ms with PHP 8.3 + JIT.
Redis or Memcached: For object cache. Cuts database query load by 60-80%.
HTTP/2 or HTTP/3: Combined with TLS 1.3 + HTTP/3, TTFB drops to the 100-200ms range.
Daily backups + disaster recovery: A minimum of 7-30 day rolling backup on a single server. Off-site (different data center) is mandatory.
Turkey data center option: For a Turkish customer base, data centers in Turkey, Germany or the Netherlands deliver the best latency (TTFB 30-80ms).

Hosting type selection framework:

Shared hosting (SSD, cPanel/Plesk): 100-300 TRY/month. Testing only, very small catalogs (max 100 products, <100 orders/month).
VPS (Virtuozzo/KVM): 300-1,500 TRY/month. Ideal for WooCommerce/OpenCart with 500-5,000 products. We recommend reading the VPS guide.
Cloud (Hetzner, OVH, Vultr, AWS): 600-5,000 TRY/month. Auto-snapshots, API access, minute-level scaling. Ideal for medium-to-large businesses.
Managed WordPress / WooCommerce hosting: 800-3,500 TRY/month. Handles all server-side tuning (Nginx + LiteSpeed + Redis + cron management).
Dedicated server: 5,000-25,000 TRY/month. For 10,000+ orders and special compliance needs.

For server security, make sure to apply the VPS security hardening guide. Changing the SSH port, installing fail2ban, configuring UFW or nftables firewall, disabling root login — these are baseline.

WooCommerce Setup From Scratch (Step by Step)

WooCommerce installation follows these steps in order. All commands assume a VPS running Ubuntu 24.04 LTS or Debian 12 with sudo root access.

1. Server Foundation (LEMP Stack)

2. Database Creation

3. WordPress Installation (with WP-CLI)

4. WooCommerce and Localized Plugins

5. Nginx Server Block

For advanced optimizations of this configuration, see the Nginx configuration guide. Adding FastCGI cache for dynamic page caching can reduce origin load by up to 80%.

6. SSL Certificate (Let's Encrypt)

For SSL setup details, see the Let's Encrypt guide and the How to get an SSL certificate guide. If you need a wildcard certificate, use the DNS-01 challenge method.

Alternative Setup with OpenCart

If you prefer OpenCart over WooCommerce, the install is lighter and faster. PHP requirements are the same; the only difference is how the application files are downloaded and the admin setup.

For OpenCart Turkish packages and official local modules you can use opencart-turkiye.com. Themes, shipping modules and virtual POS modules typically run 200-1,500 TRY. If you don't need massive customization, OpenCart is the fastest self-hosted option for catalogs in the 50-3,000 product range.

Theme Selection and UX Design

On an e-commerce site, the theme is far more than visual styling — it's an engineering decision that directly affects conversion rate. Bad themes load 5MB of JS, hit 6-second TTI on mobile, and push cart abandonment above 35%. Theme selection criteria:

Speed: Lighthouse performance score 80+ (mobile), CLS < 0.1, LCP < 2.5s. Test the demo URL with PageSpeed Insights.
Mobile-first: 72% of e-commerce traffic in Turkey is mobile. The theme must be designed for mobile screens first.
Bloat-free: If a theme bundles 30+ unnecessary plugins, walk away. "All-in-one" themes are typically performance killers.
Accessibility (WCAG 2.2 AA): Color contrast, keyboard navigation, ARIA labels. The European Accessibility Act (EAA) took effect in 2025; if you're exporting, this is mandatory.
Child theme support: So you can preserve customizations during automatic updates.
RTL and i18n: If you're going multilingual or expanding to Arabic markets.

Start with free themes (e.g., Storefront, Astra Free, or Blocksy Free for WooCommerce; Default + Journal demo for OpenCart) — then customize the design with Tailwind CSS or a child theme. Before paying for a premium theme, always benchmark the demo URL with Lighthouse.

Product Catalog Structure and Data Model

Your catalog grows with the site and is expensive to change later. Getting it right at the start is essential. Three core concepts:

Category: Hierarchical, mirroring the customer's mental model ("Men > Footwear > Sports"). Max 3 levels with 5-15 sub-categories per level — more than that overwhelms the user.
Tag: Flat, used for cross-cutting filters ("season-2026", "organic", "limited-edition").
Attribute: Variation-creating data such as color, size and material. Used in the filter sidebar.

At minimum, fill in 11 fields for each product: title (60 chars), short description (155 chars, used as meta description), long description (300+ words, schema.org Product description), SKU, price (incl./excl. VAT), stock count, weight, dimensions (for shipping calc), category, at least 4 images (1080×1080+ webp), 1 video (optional, can lift conversion by 30%).

Our e-commerce SEO guide covers this schema in detail along with product page optimization. Don't copy-paste product descriptions — Google's duplicate content algorithm will surface competing listings ahead of yours.

Payment Integration: Virtual POS, Wallets, and Aggregators

For payment processing in Turkey there are two main paths: a bank-issued virtual POS (apply to each bank separately, painfully slow) or a payment aggregator (iyzico, PayTR, Param, Paynet, Sipay, BirleşikÖdeme — a single application covers all banks). For SMBs, using an aggregator makes sense 95% of the time.

Aggregator Selection Criteria

Commission rate: Typically 1.75-2.49% + 0.25 TRY per transaction (2026, varies by contract). Negotiate discounts at higher volume.
Settlement time: Standard T+1 (next business day). Some packages offer T+0 with an extra 0.1-0.3% fee.
Installment support: 2-12 installments, including bank-sponsored installment campaigns (zero-cost installment offers).
3D Secure 2.x: Mandatory in 2026. Must support frictionless flow under PSD2 SCA.
Refunds and cancellation: Must offer APIs for partial and full refunds.
Webhooks and callbacks: Payment status must be push-notified; one-way API alone is insufficient.
BIN lookup: As the card number is typed, bank, installment options and card type should resolve in real time (frictionless UX).

iyzico Virtual POS Integration (PHP Example)

PayTR Token-Based Integration

Security note: Never commit API keys to your repository. Store them in a .env file, add it to .gitignore, and protect it on the server with chmod 600. Verify signatures (HMAC) on your webhook endpoint — otherwise spoofed payment notifications are possible. The signature verification logic in our JWT security guide applies here too.

BKM Express and Digital Wallets

BKM Express is the shared wallet infrastructure of Turkish banks; it offers a one-click checkout experience. Aggregators like iyzico and PayTR can enable BKM Express from their own panels. Apple Pay and Google Pay are available on iyzico Pro / Param Pro plans — a one-time technical integration has been reported to lift conversion by 15-25%.

Shipping and Logistics Integration

For shipping integration in Turkey there are two paths: contract directly with each carrier and integrate their APIs separately (Yurtiçi, Aras, MNG, PTT, Sürat, Hepsijet, Trendyol Express) or use a shipping aggregator (Kargon, KolayGelsin, KargoBul, Kargonomik, Sendeo). An aggregator gives you one panel for all shipping labels, price comparison, recipient notifications and returns management.

Contracted-rate advantage: Once you ship 100+ parcels a month, freight rates drop 40-60% below retail. Aggregators bring small businesses into discounted tiers as well.
Automatic labels: A WooCommerce/OpenCart plugin should generate PDF labels right after the order; manually printing barcodes destroys throughput.
Tracking webhook: Shipment status (accepted, in transit, delivered) should be auto-pushed to the customer via SMS and email.
Return shipping: Under the right of withdrawal, return shipping can be free or customer-paid; the site setting must spell this out.
Cash on delivery: Roughly 3-5% of Turkish order volume is still cash on delivery. Evaluate fraud risk before enabling it.

Inventory and Order Management

Once your order volume crosses 200/month, Excel + manual tracking falls apart. You'll need an ERP or OMS (Order Management System). Options for small-to-medium businesses:

Logo, Mikro, Netsis, Eta: Turkey's local accounting / ERP ecosystem. WooCommerce / OpenCart connectors run 5,000-25,000 TRY.
Odoo: Open source, free core. Storefront, inventory, invoicing, CRM in one bundle. Self-hostable; cloud subscriptions available too.
Shopify Flow / Zoho Inventory: Automation-focused; mid-tier.
SAP Business One / Microsoft Dynamics 365: Enterprise tier with 50+ users.

Marketplace synchronization: If you also sell on Trendyol, Hepsiburada, n11, Amazon TR, Çiçeksepeti or Pazarama, stock sync is critical. Double-selling on the same SKU (overselling) brings penalties and lost customers. Integrators include AkıncıSoft, Sentos, Logo Mind, Mikro Marketplace, Tekparçacı and Tigersoft. Typical 800-3,000 TRY/month.

Tax, Invoicing and E-Document Integration

In Turkey, e-invoice and e-archive invoice obligations apply, as of 2026, to taxpayers with annual gross sales exceeding 5 million TRY. E-archive invoice obligations cover any e-commerce business that makes a single online sale above 5,000 TRY.

e-Archive portal: For annual revenue under 3 million TRY, the free GIB portal is enough. No third-party integrator required.
Private integrator (ParaşütLogo, Mikro, e-Logo, Uyumsoft, Foriba, Idea, Mubasoft, etc.): 500-3,000 TRY/month — ERP integration, automated invoice issuance.
Direct integration: A SOAP API exists for the GIB UBL-TR XML format; you'll need technical resources.
e-Delivery note: Can be mandatory above 10 million TRY revenue; useful when warehousing and logistics are complex.

Plugins like woo-fatura and opencart-paraşüt automatically issue invoices when an order is completed and send the customer a PDF + UBL. When choosing an integrator, test the refund invoice, e-delivery note and partial refund scenarios — many plugins fall short here.

KVKK and Privacy Notice Obligations

Under Law No. 6698 (KVKK), every piece of data collected on your e-commerce site (name, email, phone, address, IP, payment data, cookies) qualifies as personal data. Your obligations:

Privacy notice: Before collecting data, the customer must be informed which data is collected, why, for how long, and with whom it's shared. It must appear under the registration form, the order form and the newsletter form.
Explicit consent: A separate checkbox for marketing-purpose data use; it must not be pre-checked.
Cookie policy: A consent banner (CMP) is mandatory — if you use Google Analytics, Meta Pixel or TikTok Pixel, users must be able to reject them.
VERBIS registration: Mandatory for businesses with annual revenue above 100 million TRY or 50+ employees. Done via the KVKK portal at verbis.kvkk.gov.tr.
Data breach notification: Once a breach is detected, notify the Authority and affected individuals within 72 hours. Detailed logging is essential.
Data subject requests: Customers' requests to delete, correct, or port their data must be answered within 30 days.

The KVKK's official website is enough for a privacy notice template. Don't publish without legal review — especially the purpose of contact data use and third-party transfer sections, which differ by industry.

Performance and Cache Strategy

E-commerce performance maps directly to revenue: Amazon's research showed that every 100ms of latency cost 1% in sales. Walmart measured a 2% conversion lift for every 1-second improvement. Three critical layers for performance:

Object cache (Redis): Stores WooCommerce / OpenCart query results in RAM; cuts database load by 5-10x. Redis setup guide.
Page cache: W3 Total Cache, WP Rocket, LiteSpeed Cache for WordPress; OCMOD page cache modules for OpenCart. For static visitors, TTFB drops below 50ms.
CDN: Cloudflare, Bunny CDN, AWS CloudFront — global distribution + DDoS protection. Even Cloudflare's free plan delivers a 30-50% speed boost.

For deeper optimization read our site optimization guide and Core Web Vitals 2026. The minimum baseline for image work is WebP + AVIF conversion, font subsetting, and deferring/asyncing render-blocking JS.

Security: Attack Surface and Hardening

E-commerce sites — even when they don't actually carry card data (in aggregator-mediated setups it isn't transmitted directly) — remain a top target for attackers. Unless your niche is somehow shielded, an attempt is a matter of when, not if. Regularly test the ten core vulnerabilities in our OWASP Top 10 2026 guide.

WAF (Web Application Firewall): Cloudflare WAF, Sucuri, ModSecurity OWASP CRS. Filters SQL injection, XSS, RFI probing bots.
Brute-force protection: Fail2ban for WordPress wp-login, plus the WP Limit Login Attempts plugin.
2FA: Two-factor authentication on the admin panel (TOTP). A single leaked password is enough in 95% of incidents.
Automatic security updates: Core minor releases should auto-update. Plugins should be tested manually and updated at least once a month.
Backup + restore drill: Thinking you have a backup is not the same as having one. Test a real restore every 90 days.
SQL injection prevention: Prepared statements are mandatory. Details: SQL injection guide.
XSS prevention: HTML-escape user content (comments, product reviews) and ship a CSP header. XSS and CSP guide.

SEO: Technical Foundation and Content

E-commerce SEO is a discipline of its own; product pages, category pages, filtered collection pages, blog content, and guides answering customer questions all work together. Our e-commerce SEO guide goes deep. The minimum starter checklist:

SSL + a single www / non-www canonical: https://www.yourstore.com is the single canonical version; everything else 301-redirects to it.
Sitemap.xml: Should be auto-generated (Yoast / Rank Math / SEOPress) and include products, categories and blog posts.
Robots.txt: Cart, account, login pages and unbounded filter combinations (?color=...&size=...) should be Disallowed.
Schema.org Product / BreadcrumbList / Organization: Structured data on every product page.
Canonical tag: Prevents duplicates across product variant URLs.
Internal linking: Related products, category → product, blog → category links.
Page speed: Lighthouse 80+, Core Web Vitals in green — a Google ranking signal.
Mobile friendliness: Mobile-first indexing has been fully active since 2023.

For keyword strategy, the pillar + cluster model is the most efficient approach: the pillar page targets the broad category keyword ("men's sport sneakers"), while cluster pages target long-tail variants ("black leather men's running sneakers size 42"). Cluster pages link to the pillar; the pillar links back to clusters.

Analytics and Conversion Tracking

You can't optimize what you can't measure. The minimum analytics stack for e-commerce:

Google Analytics 4 (GA4) Enhanced Ecommerce: view_item, add_to_cart, begin_checkout, purchase events. Sent via gtag.js or GTM.
Google Tag Manager: Manage all third-party pixels from one place — Meta Pixel, TikTok Pixel, LinkedIn Insight, Google Ads conversion.
Microsoft Clarity / Hotjar: Heatmaps and session recordings. Visually surfaces where customers drop out of the cart — free or low-cost.
Server-side tracking: After iOS 14.5's ATT and ad blockers, client-side tracking returns incomplete data. Send server-side events with Meta Conversions API and the GA4 Measurement Protocol.
Search Console: Organic queries, CTR, average position, indexing issues.
Internal dashboard: Build your own database-backed reporting with Metabase or Grafana. Our Prometheus + Grafana guide may help.

Marketing Channels and Funnel

Launching the site is the start; how you bring traffic is the real work. In Turkish e-commerce marketing, channels rank by efficiency roughly as follows:

Organic SEO (highest long-term ROI): 3-12 months of investment, then cheap traffic. SEO guide.
Google Ads (Performance Max + Shopping): Quick scale; upload your product feed to Merchant Center and set a target ROAS.
Meta Ads (Instagram + Facebook): Strongest channel for visual products (apparel, home decor, cosmetics). Use lookalike + retargeting.
TikTok Ads: The fastest-growing channel in 2025-2026 for the 18-35 female audience. Short video + UGC.
Email / SMS automation: Cart abandonment, cross-sell, seasonal campaigns. Mailchimp, Klaviyo, ActiveCampaign, Iletimerkezi.
Influencer marketing: Micro-influencers (10-100K followers) usually convert better than macros.
Affiliate / referral: Commission-based partnerships; low risk for high scale.
Marketplaces (Trendyol, Hepsiburada, n11): Use them for traffic and trust. Build the brand on your own site; use marketplaces for volume.

For a deeper channel strategy, read our digital marketing guide and local SEO guide together.

Mobile and PWA

72% of e-commerce traffic in Turkey is mobile, yet mobile conversion is 30-40% lower than desktop. Most of that gap is technical:

Tap targets ≥ 48×48 CSS px (Material Design guidance).
≤ 5 form fields — every extra field at checkout drops conversion by 5% (Baymard Institute research).
Auto-fill OTP: If you use SMS verification, add autocomplete="one-time-code".
Apple Pay / Google Pay one-tap: Can shrink mobile checkout time from 60 seconds to 8 seconds.
Lazy load + prefetch: Images via Intersection Observer; prefetch the next page on hover/touch.
Push notifications (PWA): A service worker via Workbox; cart abandonment reminders, campaign announcements.

For headless or full PWA architecture, see our Next.js 15 App Router guide. WooCommerce REST API with a React/Next frontend is currently the most common approach in the enterprise segment.

Multi-Language and Multi-Currency

If you're considering selling abroad (especially Europe, the Middle East, or expats living in Turkey) plan for multi-language and multi-currency from the start. Adding it later costs 3-5x more.

WPML / Polylang / TranslatePress for WooCommerce: 5-25 USD/month, page-by-page translation.
OpenCart core multi-language support: Add unlimited languages.
hreflang tag: Every language needs its own URL, linked via hreflang.
Currency conversion: Auto-update (TCMB API) or manual fixed rate.
VAT and customs: The OSS (One Stop Shop) scheme for EU sales, sales tax (state-by-state) for the US.

Cost Analysis (2026, Approximate)

The answer to "how much does it cost to build an e-commerce site?" is: anywhere between 0 and 5 million TRY is possible. Let's make three typical scenarios concrete.

Scenario A: Brand-New Micro Business

Domain (.com.tr) — 300 TRY/year
Shared SSD hosting (cPanel) — 150 TRY/month × 12 = 1,800 TRY/year
SSL Let's Encrypt — 0 TRY
WooCommerce + free theme (Storefront) — 0 TRY
Plugins (iyzico, SEO, cache, backup) — 0 TRY (free versions)
Payment commission (iyzico 2.49%) — variable
Setup labor (DIY) — 0 TRY, or freelance 2,000-5,000 TRY
Marketing (test budget) — 2,000-5,000 TRY/month
Annual total (setup + ops + marketing): 30,000-80,000 TRY range

Scenario B: Growing Brand (500-2,000 Orders/Month)

Domain (.com +.com.tr) — 700 TRY/year
VPS (4 vCPU, 8GB RAM, NVMe) — 800 TRY/month = 9,600 TRY/year
Managed services (server admin) — 1,500 TRY/month = 18,000 TRY/year
WooCommerce + premium theme (~150 USD lifetime) — 5,500 TRY
Premium plugins (WooCommerce Subscriptions, ACF Pro, etc.) — 8,000-15,000 TRY/year
Cloudflare Pro — 25 USD/month = 11,000 TRY/year
E-invoice integrator — 800 TRY/month = 9,600 TRY/year
Marketplace integrator — 1,500 TRY/month = 18,000 TRY/year
Marketing budget (Google + Meta + content) — 25,000-75,000 TRY/month
Annual total: 400,000-1,000,000 TRY

Scenario C: Enterprise / 10K+ Orders

Magento Adobe Commerce license — 22,000+ USD/year (~750,000+ TRY)
Dedicated cluster + DBaaS — 25,000-60,000 TRY/month
DevOps + SRE team — 250,000-600,000 TRY/month
Headless frontend (Next.js + CDN) — 800,000-2,500,000 TRY in development
Marketing budget — 500,000-3,000,000 TRY/month
Annual total: 10,000,000+ TRY

At the same order volume, a hosted SaaS (local) starts 30-50% cheaper but limits customization. The decision: balance the technical energy you want to save against the monthly subscription you're willing to pay.

Is a Free E-Commerce Site Possible?

The answer to "how do I build a free e-commerce site" is: partially. The WooCommerce core is free, OpenCart is free, PrestaShop is free; themes like Storefront / Astra Free are free; Let's Encrypt SSL is free. The things that aren't free: the domain, the server (at least entry-level shared hosting), the transaction commission your payment processor charges, and your time.

Some local SaaS providers (e.g., ikas Start) offer completely free starter plans capped on products/orders — usable at limited scale.
Free domains (.tk,.ml, etc.) should not be used for e-commerce; they look untrustworthy and most payment processors reject them.
A truly free path: github.com + .github.io + Stripe Checkout or Lemon Squeezy and similar pay-per-link services — only meaningful for digital goods/services.

Go-Live Checklist

Even when the site looks ready, running through a 30-item checklist before launch prevents post-launch 2 a.m. panic calls.

✓ SSL active, A+ grade (passed the SSL Labs test)
✓ HTTP → HTTPS, non-www → www 301 redirects verified
✓ HSTS active (at least 1 year, includeSubDomains)
✓ Sitemap.xml + robots.txt live and submitted to Search Console
✓ GA4 + Tag Manager + Meta Pixel test events visible
✓ A real test order placed via the live virtual POS, invoice issued, e-archive received
✓ A test refund processed, refund returned to the customer's account
✓ Distance sales contract requires explicit confirmation on the order page
✓ KVKK privacy + explicit consent checkboxes on registration + newsletter forms
✓ ETBIS registration completed, the registration logo visible on the site
✓ Cookie banner working; rejection actually disables categorized cookies
✓ Schema.org JSON-LD and breadcrumbs visible on every product
✓ Custom 404 page with site navigation links
✓ Error reporting (Sentry, etc.) integrated
✓ Server cron jobs running (backup, invoicing, mailing)
✓ Backup taken + restore tested
✓ Fail2ban active, log monitoring running
✓ CDN live, cache hit ratio 85%+
✓ Lighthouse mobile performance 80+, LCP < 2.5s
✓ Mobile viewport meta tag present, footer responsive
✓ WhatsApp / live chat widget working
✓ Out-of-stock products can't be added to cart; if they can, an "Pre-order" badge is shown
✓ Shipping integration verified with a test shipment
✓ Switched iyzico/PayTR to live mode (test mode disabled)
✓ Admin panel 2FA mandatory, default "admin" username deleted
✓ All plugins up to date and active
✓ Server cron used instead of wp-cron (better baseline performance)
✓ Error messages don't leak technical details to users
✓ Social accounts and Google Business Profile linked
✓ First marketing campaign queued, launch email draft approved

First Month: Measurement and Optimization

The first 30 days after launch are the most critical period. During this window, map your conversion funnel: home → category → product → cart → checkout → payment. Record drop-off at each step.

Average bounce rate: 40-55% is normal. Above 70% suggests a homepage or speed problem.
Add-to-cart rate: 5-12% of traffic is normal. Lower than that points to product copy, imagery or pricing issues.
Cart → checkout conversion: 50-70% is normal. Lower numbers usually indicate shipping-cost shock or forced account creation.
Checkout → payment: 60-80% is normal. Lower means slow 3D Secure, weak installment options, or bank declines.
Overall conversion rate: The Turkish e-commerce average is 1.5-3%. Above 5% is excellent.

A first week without orders isn't a reason to panic — a brand-new site can take 2-6 weeks to be indexed in Google. Opening a marketing budget right away with a "let traffic come so I can measure" mindset is the right opening move.

12 Common Mistakes

Skipping legal steps: No ETBIS, no distance sales contract, no KVKK notice — three months in, you'll get a Ministry of Trade warning.
Wrong platform: Magento for 50 orders/month, free shared hosting for 5,000 orders/month.
A single payment method: Cash on delivery only, or bank transfer only; you lose 60%+ of potential customers.
Not mobile-friendly: A theme that looks gorgeous on desktop but unreadable on mobile.
No image optimization: A 5MB JPEG hero image; the page takes 12 seconds to load.
No backups: Thousands of e-commerce sites in 2026 still don't take backups. The first breach or disk failure is the end.
No stock and price sync: Marketplace and site prices differ; no one notices until orders come in.
SEO as an afterthought: Changing URL structure, category hierarchy or schema later means a 1,000+ 301-redirect risk.
One person doing everything: Customer service + content + marketing + tech in one person. Burnout in 6 months.
Unclear return policy: Customers have to interpret it themselves on every call.
No competitor price monitoring: Use a Trendyol price-tracker browser extension at minimum, weekly.
Hidden contact information: Phone, physical address and KEP details are mandatory under distance-selling regulations — both for legal and trust reasons.

Scale Transitions: 1,000 → 10,000 → 100,000 Orders

Each order-volume tier requires a different infrastructure transition. Brands that don't plan these moves in time end up watching the site collapse on campaign day and the crisis spread on social media.

1,000 orders/month → 10,000: From shared/small VPS to a medium VPS + Redis object cache + Cloudflare. Turn on the database slow query log and add the missing indexes (SQL query optimization).
10,000 → 100,000: From a single server to a dedicated cluster (separate web + DB + Redis). Read replicas, autoscaling. DB tuning becomes critical.
100,000+: Headless architecture, Kubernetes orchestration (Kubernetes guide), CDN edge cache, microservices (separate services for orders, payments, inventory), event-driven systems (Kafka/RabbitMQ).
Use blue-green deployment or canary releases for zero-downtime migrations at every transition.
Backup strategy also evolves with scale: daily → hourly → PITR (backup strategies).

Maintenance and Operational Routine

An e-commerce site is not a "set it and forget it" project. Daily, weekly and monthly routines:

Daily: Order tracking, customer-service tickets, shipping status checks, stock updates.
Weekly: Backup verification, sales report, campaign performance review, plugin update testing.
Monthly: Product listing audit (archive old products, add new ones), SEO ranking review, competitor analysis, KPI report, price updates.
Quarterly: Security audit, SSL renewal check, hosting contract review, contracted shipping rate negotiation.
Annually: Major-version theme/platform upgrade, full disaster-recovery test, contract renewals.

What Order Should You Do Things In?

Reading this whole guide can leave the sequence fuzzy. A practical 30-day launch calendar:

Days 1-3: Business plan, niche decision, brand name, domain check.
Days 4-7: Sole proprietorship/limited company setup, tax registration, KEP application.
Days 8-10: Domain purchase, hosting decision, server build (LEMP stack).
Days 11-15: WooCommerce/OpenCart install, theme selection and customization, homepage + category + product templates.
Days 16-20: Catalog upload of the first 50 products (photos, copy, price, stock).
Days 21-23: iyzico/PayTR virtual POS application (1-3 business day approval), shipping aggregator setup, e-archive integrator.
Days 24-26: KVKK texts, distance sales contract, cookie banner, About + Contact pages.
Days 27-28: ETBIS registration, GA4/GTM/Pixel setup, baseline SEO settings (sitemap, robots, schema), test order.
Day 29: Complete the go-live checklist, soft launch (friends and family only).
Day 30: Public launch, kick off the first marketing campaign.

Advanced Topics

Headless commerce: Frontend (Next.js/Nuxt/SvelteKit) and backend (Medusa, Saleor, BigCommerce headless, Shopify Storefront API) decoupled; unlimited design flexibility.
Subscriptions / memberships: WooCommerce Subscriptions, Shopify Subscriptions; SaaS-like recurring revenue.
B2B customization: Dealer login, VAT-inclusive/exclusive pricing, customer-specific price lists, credit limits, open accounts.
Marketplace model: Multi-vendor (Dokan, WC Vendors, Webkul Marketplace) — you can launch your own marketplace.
POS integration: If you have a brick-and-mortar store (Hugin, Beko POS), sync stock and loyalty points.
AI product recommendations: Algolia AI, Klevu, or your own vector DB (PostgreSQL pgvector) for semantic search.
Structured data enrichment: FAQ schema, Product schema variants, Video schema.

Resources

eticaret.gov.tr — official Ministry of Trade e-commerce portal
ETBIS — Electronic Commerce Information System
kvkk.gov.tr — Personal Data Protection Authority
gib.gov.tr — Revenue Administration
woocommerce.com docs
docs.opencart.com
iyzico developer docs
PayTR developer docs
schema.org/Product
web.dev — Google web standards
SSL Labs Test
Baymard Institute — checkout research
Google Search Console
Google Analytics 4

You don't have to build your e-commerce stack alone

For end-to-end help with domain selection, hosting setup, WooCommerce/OpenCart integration, payment/shipping plugins, KVKK and performance tuning, reach out to our team get in touch

Readers of this article also read these

web-kurulum 27 min

Software Development

SEO & Optimization

API & Integration

Web Hosting

VPS Server

Dedicated Server

Domain & SSL

Why KEYDAL?

Projelerimiz

About Us

Contact