Your Privacy Matters: Your personal data is protected and processed under the KVKK (Law No. 6698).
1. DATA CONTROLLER
As Tosbaware, we are the data controller responsible for processing your personal data.
2. COLLECTED PERSONAL DATA
2.1. Account Creation
- Identity Information: Name, surname, username
- Contact Information: Email address
- Account Information: Password (encrypted), profile picture
2.2. Payment Transactions
Your payment information is processed by Shopier and not stored by us:
- Credit card information: Stored encrypted at Shopier
- Billing information: Stored for legal obligations
- Transaction history: Kept for accounting records
2.3. Technical Data
- IP address
- Browser information
- Device information
- Usage statistics
3. PURPOSES OF DATA PROCESSING
We process your personal data for the following purposes:
- Service Delivery: Providing platform services
- Customer Support: Technical support and assistance
- Payment Transactions: Processing purchases
- Security: Ensuring account security
- Communication: Sending important notifications
- Legal Obligations: Fulfilling legal requirements
4. DATA SECURITY
Our Security Measures:
- Encryption: All sensitive data is encrypted (AES-256)
- SSL/TLS: Secure connection via HTTPS
- Firewall: Advanced firewall protection
- Access Control: Limited personnel access
- Regular Backups: Protection against data loss
- Security Tests: Regular penetration tests
5. THIRD PARTY SHARING
We may share your data with third parties in the following cases:
5.1. Payment Provider
- Shopier: For payment processing (PCI DSS certified)
5.2. Legal Obligations
- Court orders
- Requests from legal authorities
- National security requirements
5.3. Service Providers
- Hosting provider
- Email service
- Analytics tools (anonymous data)
6. COOKIES
Cookies used on our platform:
- Essential Cookies: Session management, security
- Functional Cookies: Remembering your preferences
- Analytical Cookies: Usage statistics (anonymous)
7. USER RIGHTS (KVKK)
Your rights under the KVKK Law No. 6698:
- Learning whether your personal data is processed
- Requesting information if processed
- Learning the purpose of processing and if used appropriately
- Knowing third parties to whom it is transferred (domestic or foreign)
- Requesting correction if incomplete or incorrectly processed
- Requesting deletion or destruction
- Requesting notification of correction/deletion to third parties
- Objecting to a result against you due to automated analysis
- Demanding compensation for damages due to unlawful processing
To Exercise Your Rights:
You can make a request via our Contact page.
8. DATA RETENTION PERIOD
- Account Information: As long as the account is active
- Payment Records: Legal obligation (10 years)
- Log Records: 6 months
- Support Requests: 2 years
9. CHILDREN'S PRIVACY
Our platform is not intended for users under 18. We do not knowingly collect data from users under 18.
10. INTERNATIONAL DATA TRANSFER
Your data is stored in Turkey. In case of international transfer, it is carried out in accordance with KVKK provisions.
11. POLICY CHANGES
We reserve the right to update this privacy policy. Important changes will be notified via email.
12. CONTACT
For privacy-related questions:
You can reach us via our Contact page.
This policy was last updated on November 28, 2025 and is KVKK compliant.