This is an English translation provided for convenience. In case of any discrepancy, the Turkish version prevails.
Last updated: October 7, 2026
SEOBAZ BİLİŞİM LİMİTED ŞİRKETİ ("Seobaz" or "we") processes your personal data as the data controller under Law No. 6698 on the Protection of Personal Data (Kişisel Verilerin Korunması Kanunu, "KVKK"), Türkiye's personal data protection law, within the scope described below. This notice has been prepared in accordance with Article 10 of KVKK and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.
1. Data Controller
SEOBAZ BİLİŞİM LİMİTED ŞİRKETİ
Address: Limonluk Mah. 2453 Sk. No: 3/C Yenişehir / Mersin
Phone: 0850 840 95 39 · Email: info@seobaz.com
Tax Office / No: İstiklal V.D. / 2951041457 · MERSİS No: 0295104145700001
Web: www.seobaz.com
2. Categories of Personal Data Processed
- Identity: First and last name; Turkish ID number for individual invoicing.
- Contact: Email address, phone number, billing address.
- Customer Transactions: Order, cart, support ticket and correspondence records; the content, files, images and target website details you add to your order; coupon and campaign usage.
- Finance: Billing details, tax office and tax ID, payment and refund records. Your card details are not seen or stored by Seobaz; they are processed by the payment institution.
- Transaction Security: IP address, device and browser information, session and on-site activity logs, sign-in logs, security cookie ID.
- Marketing: The channel or campaign through which you reached the site (campaign parameters, ad click ID), your commercial message preferences, cookie data.
- Visual: Your Google account profile photo when you sign in with Google, or the profile image you upload.
3. Processing Purposes and Legal Grounds
| Purpose | Legal ground (KVKK Art. 5/2) |
| Creating member accounts, receiving orders, performing and delivering services, providing the Customer Panel | (c) Establishment or performance of a contract |
| Invoicing, accounting, tax and commercial bookkeeping obligations, responding to requests from authorized institutions | (ç) Compliance with a legal obligation |
| Responding to support requests; sending notifications about order and transaction status (email, SMS) | (c) Performance of a contract |
| Ensuring information and transaction security; detecting fraud, campaign/discount abuse and multiple accounts belonging to the same person; account security | (f) Legitimate interest |
| Establishing, exercising and protecting rights in legal disputes | (e) Establishment, exercise or protection of a right |
| Measuring service quality, reporting on the channels customers come from, setting business strategy | (f) Legitimate interest |
| Sending commercial electronic messages containing campaigns, announcements and promotions | The separate commercial electronic message consent you give (Law No. 6563) |
| Non-essential analytics and marketing cookies, and cases where transfer abroad depends on explicit consent | Explicit consent (KVKK Art. 5/1) |
4. Method of Collecting Personal Data
Your personal data is collected electronically, by automated or partly automated means, through membership, order, payment, support and contact forms, the customer panel, email, phone and WhatsApp correspondence, Google sign-in, cookies and server logs.
5. Transfer of Personal Data
Your personal data may be transferred to the following groups of recipients, limited to the purposes above and to the extent necessary:
- Payment institutions and banks (PayTR, iyzico): payment and refund transactions.
- E-invoicing and accounting service providers (Paraşüt) and our financial advisor: invoicing and statutory records.
- Communication service providers: SMS (NetGSM; Twilio for international numbers), email delivery (Amazon Web Services).
- Infrastructure and hosting service providers: server, domain name, content delivery and security (Cloudflare) services.
- Google: Google sign-in, form security (reCAPTCHA) and, if you allow it, analytics and ad measurement.
- Publishers and service suppliers: the content, images and target website details needed to fulfill your order, only for the relevant publication.
- Authorized public institutions and organizations, judicial authorities: within the scope of legal obligations and requests.
- Legal and financial advisors: for the protection of rights and compliance with legal obligations.
Transfer abroad: Some of the service providers we use (Google, Amazon Web Services, Twilio, Cloudflare and, if you allow it, Meta and Microsoft) have servers abroad. These transfers are based on the appropriate safeguards (standard contracts) set out in Article 9 of KVKK.
6. Retention Periods
- Invoice, accounting and contract records: for the period required by the relevant legislation (up to 10 years under the Tax Procedure Law and the Turkish Commercial Code).
- Membership and order records: for the duration of the membership and, after it ends, for the general statute of limitations period.
- On-site activity and security logs: 90 days; where abuse or a dispute is detected, until the dispute is resolved.
- Commercial electronic message consent and opt-out records: 3 years from the withdrawal of consent.
- Cookies: the periods stated in the Cookie Policy.
Data whose retention period has expired is deleted, destroyed or anonymized.
7. Your Rights Under Article 11 of KVKK
- To learn whether your personal data is processed and, if so, to request information about it,
- To learn the purpose of processing and whether it is used in line with that purpose,
- To know the third parties in Türkiye or abroad to whom it is transferred,
- To request correction if it is incomplete or inaccurate,
- To request its deletion or destruction under the conditions set out in Article 7 of KVKK,
- To request that correction, deletion and destruction be notified to the third parties to whom it was transferred,
- To object to an outcome against you that arises from analysis carried out exclusively by automated systems,
- To claim compensation if you suffer damage due to unlawful processing.
8. How to Apply
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit requests regarding your rights in writing to our address above, together with information identifying you; by email to info@seobaz.com from the email address registered in our system; or with a secure electronic signature or mobile signature. Your application will be concluded free of charge within 30 days at the latest. If the process involves an additional cost, the fee schedule set by the Personal Data Protection Board may apply.