Privacy and Security

PRIVACY AND SECURITY POLICY

Last Updated: February, 2026

1. INTRODUCTION AND SCOPE

This Privacy and Security Policy regulates the principles regarding the processing, storage, and protection of personal data of visitors, members, and customers who use the www.tecof.com website, mobile applications, API services, and all related services (collectively the "Platform") operated by Tecof Teknoloji Anonim Şirketi (hereinafter referred to as the "Company" or "Seller").

Tecof Teknoloji Anonim Şirketi is committed to protecting the privacy of its users and maintaining its technological infrastructure at the most current security standards.

2. COLLECTED DATA AND PROCESSING ACTIVITIES

During your use of our services, the following categories of data may be collected and processed:

• Identity Information: Name, surname, Turkish Republic Identity Number (mandatory for sole proprietorships), tax identification number, signature circular information.
• Contact Information: E-mail address, phone number, company headquarters address, billing address, and delivery address.
• Customer Transaction Information: Purchased service packages, order history, request and complaint records, call center voice recordings.
• Financial Information: Tax office, bank account information (IBAN). Important Notice: Sensitive payment data such as credit card numbers, expiration dates, and CVV codes are strictly NOT stored on Tecof Teknoloji Anonim Şirketi servers.
• Transaction Security Information: IP address, website login/logout information, password and credential information, log records.
• Marketing Information: Shopping habits, survey responses, cookie records, and targeting information.

3. CREDIT CARD SECURITY AND PAYMENT INFRASTRUCTURE

Tecof Teknoloji Anonim Şirketi follows a zero-tolerance policy regarding payment security and implements the following security protocols:

• SSL (Secure Sockets Layer) Certificate: All data flow and payment pages on the Platform are encrypted with a 256-Bit SSL certificate. This technology prevents data between your browser and our servers from being read by third parties.
• PCI-DSS Standards: Our payment infrastructure is provided by Iyzico, a licensed payment institution compliant with the international payment security standard PCI-DSS (Payment Card Industry Data Security Standard).
• 3D Secure: The 3D Secure (SMS confirmation) secure payment method offered by your bank is supported for payment transactions.
• Card Storage (Tokenization): For subscription renewals, your card information is not stored in our company database but is stored as an encrypted "Token" in Iyzico's secure data centers with banking standards.

4. COOKIE POLICY

Our Platform uses cookies to improve user experience, analyze site traffic, and provide personalized services.

• Strictly Necessary Cookies: Required for the basic functions of the website to work (Login, cart processes, etc.).
• Functional Cookies: Ensure language preferences and user settings are remembered.
• Analytical and Performance Cookies: Allow us to anonymously analyze visitor numbers, viewed pages, and on-site movements (e.g., Google Analytics).
• Targeting and Advertising Cookies: Used to present content and advertisements suitable for your interests.

Users can block the use of cookies at any time by changing their browser settings. However, if strictly necessary cookies are blocked, some functions of the site may not work properly.

5. SHARING DATA WITH THIRD PARTIES

Tecof Teknoloji Anonim Şirketi does not sell or rent user data for commercial purposes. Your data may only be shared in the following cases:

• Legal Obligations: Court orders, prosecution requests, law enforcement units, and legal requests from other official authorities.
• Service Providers: Iyzico for payment processing, e-invoice integrators, SMS/E-mail delivery services, and cloud server providers (within the scope of confidentiality agreements).

6. DATA SECURITY MEASURES

Your personal data is stored on servers protected by Firewalls, intrusion detection systems, and encryption methods to protect against unauthorized access, loss, theft, or alteration. Access authorizations are limited, and only relevant personnel can access the data.

7. CONTACT INFORMATION

For any questions, opinions, or requests regarding our privacy and security policy, you can contact us below: