+90 850 309 65 02 Support

Personal Data and Privacy Agreement

Last updated: 9 October 2026

This notice explains how TiklaWeb processes your personal data, as required by Article 10 of Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the related communiqué on the duty to inform. Please read it together with our Terms of Service and Cookie Policy.

1. Data Controller

  • Data controller: Faruk Sancak TiklaWeb Bilişim Hizmetleri (sole proprietorship)
  • Tax Office / Number: Halkalı Tax Office / 7430527303
  • Address: Atatürk Mahallesi Dilek Sokak No: 12 Door No: 5, Küçükçekmece / ISTANBUL, Türkiye
  • Phone: +90 850 309 65 02
  • Email: info@tiklaweb.net

2. Personal Data We Process

To provide our services we process data in the categories below. We do not process, and do not ask you for, special categories of personal data (such as health, religion or biometric data).

  • Identity data: name, company name, national ID number or tax number (where needed for invoicing and .tr domain registration), tax office.
  • Contact data: email address, phone number, billing and contact address.
  • Customer transaction data: orders, service and domain records, invoices, support requests and correspondence, account credit movements.
  • Financial data: payment status and bank transfer details (sender name, amount, date). Card details are not passed to or stored by TiklaWeb; they are processed by the payment institution.
  • Transaction security data: IP address, session and access logs, device and browser information.
  • Domain registration data: the name or company name, address, email and phone you provide as the domain registrant.
  • Marketing data: only if you have given consent: communication preferences and campaign interactions.
  • Cookie and usage data: see our Cookie Policy.

3. How We Collect Data

We collect your data through forms you complete when creating an account, ordering and paying; the Client Area; support requests and WhatsApp messages; email and phone correspondence; cookies and similar technologies; and service processes involving payment institutions and domain/SSL suppliers, by automatic or partly automatic means.

4. Purposes of Processing

  • Managing memberships and accounts; forming and performing the contract
  • Providing, renewing and managing hosting, server, domain, SSL, email and software services
  • Carrying out payment, invoicing and accounting
  • Responding to support requests and communicating with you (notification emails and necessary SMS messages)
  • Ensuring information security and preventing fraud and abuse
  • Meeting legal obligations and providing information to competent authorities
  • Establishing, exercising and defending legal claims
  • Sending campaigns and announcements where you have consented
  • Measuring and improving the operation and performance of our website

We process your data on the following grounds under Article 5/2 of the KVKK: it is expressly provided for by law; it is directly related to the formation or performance of a contract; it is necessary for us to meet a legal obligation; it is necessary for establishing, exercising or protecting a right; and it is necessary for our legitimate interests, provided your fundamental rights and freedoms are not harmed. Processing such as marketing messages and optional cookies relies solely on your explicit consent, which you may withdraw at any time.

6. Recipients of Personal Data

Your data may be shared, limited to what is necessary for the purposes above and in line with Articles 8 and 9 of the KVKK, with the following parties.

Domestic recipients

  • PayTR: processing card and payment transactions (payment institution).
  • Netgsm: sending notification and verification SMS messages.
  • Competent public authorities: obligations under legislation (e.g. e-invoice/e-archive, tax, judicial and administrative requests).
  • Accountants and accounting service providers: accounting and tax obligations.

International recipients

  • WhatsApp (Meta): messaging, only if you contact us via WhatsApp.
  • Cloudflare (USA): DNS, security and content delivery for our website and Client Area.
  • Google (USA): website traffic analytics (Google Analytics) and email infrastructure.
  • MailBaby / InterServer (USA): sending system emails (orders, invoices, notifications).
  • AnyDesk / TeamViewer (Germany): remote support, only at your request and with your approval.
  • Domain registrars and registries (abroad): for registering, renewing and transferring domains, the name or company name, address, email and phone you provide as registrant are passed to these organisations under the rules of the relevant extension. This transfer is technically required for the domain service.
  • Hosting and server infrastructure providers: the infrastructure on which the Client Area and service data are hosted.

Transfers abroad are made in accordance with Article 9 of the KVKK: where the Personal Data Protection Board has issued an adequacy decision; failing that, with appropriate safeguards such as standard contracts; or under the exceptional cases listed in the law.

7. Retention Periods

  • Commercial books, invoices and accounting records: for the period required by law (generally 10 years).
  • Account and contract data: while your account and service continue; after that, for the statutory limitation period for possible disputes.
  • Support records: during the service relationship and afterwards for the limitation period.
  • Access and transaction security logs: for the period required by Law No. 5651 and related legislation.
  • Marketing data: until you withdraw your consent.

When these periods end, your data is deleted, destroyed or anonymised.

8. Data Security

We take reasonable technical and organisational measures to prevent unlawful processing of and access to your data, including encrypted connections (SSL/TLS), access authorisation, security updates, regular backups and log monitoring. No system is entirely risk-free, so please keep your account password safe.

9. Your Rights as a Data Subject

Under Article 11 of the KVKK you have the right to:

  • learn whether your personal data is processed,
  • request information if it has been processed,
  • learn the purpose of processing and whether it is used accordingly,
  • know the third parties in Türkiye or abroad to whom your data is transferred,
  • request correction if it is incomplete or inaccurate,
  • request deletion or destruction under the conditions in Article 7 of the KVKK,
  • request that such correction, deletion or destruction be notified to third parties to whom your data was transferred,
  • object to an outcome against you resulting from analysis of your data exclusively by automated systems,
  • claim compensation if you suffer damage because your data was processed unlawfully.

If you live outside Türkiye, local data protection laws may give you additional rights; contact us and we will assess your request under the applicable law.

10. How to Apply and Response Time

You can submit requests about your rights:

  • By email: from the email address registered to your account, to info@tiklaweb.net,
  • In writing: with a wet-signed petition and a copy of your ID to Atatürk Mahallesi Dilek Sokak No: 12 Door No: 5, Küçükçekmece / ISTANBUL,
  • In person: by presenting your ID at the address above.

Your application should include your name, signature (if in writing), national ID number (or nationality and passport number for foreigners), address for notification, email and phone if any, and a clear description of your request. An application on behalf of someone else requires a power of attorney. We conclude your application as soon as possible and within 30 days at the latest, free of charge; if the process requires a separate cost, the fee in the tariff set by the Board may be charged. If you find our response inadequate, you may complain to the Personal Data Protection Board within 30 days of learning of our response and in any case within 60 days of your application date.

11. Commercial Electronic Messages

Marketing emails and SMS messages are sent only with your consent, in accordance with Turkish Law No. 6563 on the Regulation of Electronic Commerce. You may withdraw your consent at any time through the link in each message or by writing to info@tiklaweb.net. Order, invoice, due-date and security notifications are not marketing messages and are sent as a necessary part of the service.

TiklaWeb is not responsible for the privacy practices of third-party sites linked from our website. Our services are intended for people aged 18 and over; we reserve the right to delete data of accounts we find belong to minors.

13. Changes

This notice may be updated as legislation and our services change. The current version is published on this page and the “Last updated” date above will change. Material changes are also announced by email or through the Client Area.

We use cookies to keep you signed in, remember your language and currency, and improve the site. Cookie Policy