As Sakla Teknoloji Limited Şirketi ("Sakla" or "we"), we act as the data controller under Turkey's Law on the Protection of Personal Data No. 6698 ("KVKK").
This policy explains which data is collected while you use the Sakla app, and how that data is processed and protected.
We process certain personal data about you for as long as you use the app. This includes identity and contact information such as your name, username, phone number and email address. We also store your profile photo, listing images and descriptions in our systems.
Your purchase history, order status and in-app messaging records are treated as transaction and communication data. Technical data such as device information, session data and your IP address are also collected automatically while you use the app. We only access your location if you grant permission, and only while the app is open.
We use your data only to provide the service to you. This includes creating your account, publishing listings, carrying out shopping transactions and verifying your identity. Delivering notifications, resolving complaints and disputes, and fulfilling our legal obligations are also among the reasons we process your data.
All of these processing activities rely on one of the legal grounds set out in Article 5 of the KVKK: performance of a contract, our legitimate interest, or a legal obligation.
We only share your data with parties that are necessary for providing the service. We work with payment institutions for secure payment processing, courier companies for order delivery, and cloud infrastructure providers for data storage. Notifications are delivered to your device through intermediary providers.
If a legal obligation arises, we may also share your data with authorized public institutions. We never sell your data for advertising purposes or share it with unauthorized third parties.
We apply technical measures such as SSL/TLS encryption, PCI-DSS compliant payment infrastructure and access restrictions to protect your data. Your card details are never stored by us. Our systems are regularly tested through security audits.
If a security breach is detected, we notify you and the relevant authority within the legally required period.
We retain your data for as long as your account remains active. If you delete your account, your profile and account information is removed from our systems within 6 months. Transaction and order records are kept for 10 years under the Turkish Tax Procedure Law, messaging records for 3 years, and technical log data for 2 years.
Once the legal retention periods expire, we securely delete or anonymize your data.
Under Article 11 of the KVKK, you have a number of rights regarding your data. You can learn which of your data has been collected and request correction of inaccurate or incomplete information. You also have the right to request deletion or destruction of your data, to learn which third parties it has been transferred to, and to object to outcomes produced solely by automated systems that are to your detriment.
To exercise any of these rights, you can write to [email protected] or submit a request through the support section in the app. We respond to requests within 30 days at the latest.
Parental or legal guardian consent is required for anyone under the age of 18 to use the app. If we become aware that we have collected data belonging to a minor, we delete it immediately.
We may need to update this policy from time to time. When a significant change is made, we notify you in advance via an in-app notification or email. You can always find the current version of this text on this page.
You can send any question or request regarding our privacy policy to [email protected]. You will receive a response within 30 days at the latest.