Privacy Policy

1. Introduction

Gloyd Teknoloji A.Ş. ("Gloyd", "we", "our", "us") values your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our services.

Company Information:

2. Data We Collect

We may collect the following personal data when you use our services:

2.1. Account Information

• Name and surname
• Email address
• Phone number
• Company name and title
• Billing address

2.2. Usage Data

• IP address
• Browser type and version
• Pages visited
• Visit duration
• Device information

2.3. Business Data

• Customer and supplier information
• Product and order data
• Invoice and payment information
• Communication history

3. How We Use Your Data

We use the data we collect for the following purposes:

• Providing and improving our services
• Managing your account and ensuring its security
• Providing customer support
• Fulfilling our legal obligations
• Communicating with you (including marketing with your consent)
• Analytics and statistical studies

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary for providing our services
• Legal Obligation: Processing required by law
• Legitimate Interests: Processing necessary for our legitimate business interests
• Consent: Processing based on your explicit consent (e.g., marketing communications)

5. Data Security

We implement industry-standard security measures to protect your data:

• SSL/TLS encryption
• Secure data centers
• Access control and authorization
• Regular security audits
• Employee training

6. Data Sharing

We do not share your personal data with third parties except in the following circumstances:

• With our service providers (hosting, payment processors, etc.)
• When required by law
• With your explicit consent
• In the event of a company merger or acquisition

6.1. Data Processors (Sub-processors)

We work with the following categories of service providers to deliver our services:

We have signed data processing agreements with all sub-processors to ensure compliance with applicable data protection laws.

6.2. International Data Transfers

Your data may be transferred outside of Turkey depending on the location of our service providers. In such cases:

• Appropriate safeguards are implemented as required by Turkish KVKK (Article 9)
• Standard Contractual Clauses (SCCs) are used for transfers to the EU
• We do not transfer data to countries without adequate protection levels

7. Cookies

We use cookies on our website to improve your experience.

7.1. Essential Cookies

These cookies are necessary for the website to function properly, including session management and security. These cookies cannot be disabled.

7.2. Analytics Cookies

These cookies are used to anonymously analyze user behavior. They can be disabled based on your preferences.

7.3. Cookie Preferences

You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect your use of our services.

8. Your Rights

8.1. Rights Under Turkish KVKK

Under the Turkish Personal Data Protection Law (KVKK), you have the right to:

• Learn whether your personal data is being processed
• Request information about the processing
• Learn the purpose of processing and whether data is used accordingly
• Know the third parties to whom your data is transferred
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data under Article 7 conditions

8.2. Rights Under GDPR (EU Residents)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

To exercise your rights, please contact us at privacy@gloyd.com.

8.3. Complaints

If you believe your data protection rights have been violated:

• Turkey: You may file a complaint with the Personal Data Protection Authority (KVKK)
• EU: You may file a complaint with your local Data Protection Authority

9. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected. When this period expires, your data will be deleted or anonymized.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from individuals under 18.

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you. If any automated decision-making processes are implemented in the future, you will be informed separately.

12. Policy Changes

We may update this privacy policy from time to time. When significant changes are made, we will notify you via email or through the platform.

13. Contact Us

For questions about this privacy policy or your personal data, please contact us:

---

For detailed information under Turkish law, please see our KVKK Disclosure Text (in Turkish).

Related documents: Cookie Policy - Distance Sales Agreement - KVKK Information Notice (Turkish Data Protection Law) - Subscription Agreement - Terms of Service