PRIVACY POLICY

Disclosure on the Protection and Processing of Personal Data

Please note: The binding version of this document is the Turkish one. This translation is provided for information only; in case of any discrepancy, the Turkish text prevails.

1. Data Controller and Introduction

As Turonay ("the Platform"), we treat the security of your personal data as our highest priority, in line with Turkish Law no. 6698 on the Protection of Personal Data ("KVKK") and the standards of the EU General Data Protection Regulation ("GDPR"). This document sets out why your data is collected, how it is processed, who it is shared with and what your rights are.

2. Personal Data We Process

In order to provide our services we process only the data that is necessary, following the principle of data minimisation:

Identity and Contact Data
  • Email address (for account verification and notifications)
  • Username (for identification within the platform)
  • Note: A national ID number or phone number is never requested.
Transaction Security Data
  • IP address (access logs)
  • Browser type and device information
  • Sign-in and sign-out timestamps (required by Turkish Law no. 5651)
Financial Data
  • Payment transaction ID
  • Payment amount and date
  • Important: Card numbers, expiry dates and CVC codes are never stored on our servers.
Service Usage Data
  • The service purchased (for example WhatsApp)
  • The virtual number assigned
  • The content of the incoming SMS (verification code)

3. Purposes of Processing

Your personal data is processed for the following purposes:

  • Carrying out membership operations and securing your account.
  • Technically delivering the virtual number and SMS verification services.
  • Detecting suspicious transactions, fraud and unauthorised access (anti-fraud).
  • Meeting obligations arising from legislation (log retention).
  • Managing customer support processes.

4. Transfer and Sharing of Data

As a rule, the Platform does not share user data with third parties. Data may be transferred in the following exceptional cases:

  • Public authorities: In the scope of a criminal investigation, data (IP addresses, logs) is shared with the relevant authorities upon official written requests from courts, public prosecutors or law enforcement.
  • Payment institutions: In cases of suspicious payment, a reported stolen card or a chargeback, data may be shared with the relevant payment provider as evidence of the transaction.

5. Data Security Measures

Your data is stored on servers meeting international security standards. Our measures include:

256-bit SSL encryption Web application firewall (WAF) DDoS protection Regular security scans

6. Cookie Policy

Our site uses cookies to improve the user experience. Cookies are small text files saved in your browser.

  • Essential cookies: Keep your session open and allow site features to work.
  • Analytics cookies: Help us analyse site traffic. This data is anonymous.

You can delete or block cookies at any time from your browser settings.

For questions about our data policy you can contact our Data Protection Officer:

privacy@turonay.com