Privacy Policy

If the English and Turkish versions of this document differ, the Turkish version prevails.

This Privacy Policy explains how Muhammed Yeğenoğlu (trading as Targity, Kartal, İstanbul, Türkiye) handles personal data. For data subjects in Türkiye, our KVKK Notice gives the information required by Law No. 6698 in more detail.

1. Two roles

• As controller, we decide how we process the data of visitors to targity.com, of people who contact us, and of the users of our customers' accounts (store owners and their team). This policy covers that data.
• As processor, we process the data of our customers' own customers (shoppers) only on our customers' behalf, to run their messaging. The store is the controller of that data; its own privacy notice applies, and our obligations are set out in the Data Processing Agreement. Section 7 explains what this means for people who receive messages through Targity.

2. Data we collect

3. Legal bases

We process this data because it is necessary to conclude and perform our contract with you, to comply with legal obligations (for example tax and commercial record-keeping), and for our legitimate interests in securing and improving the Service. Where we rely on consent, for example to send you our own marketing, you can withdraw it at any time.

4. How long we keep it

• Account data: for as long as the account exists and then for the periods required by law (records relevant to tax and commercial law are kept for up to 10 years).
• Technical logs: up to 6 months, unless needed longer to investigate an incident.
• Contact requests: up to 2 years after the request is closed.
• Store data processed for our customers: deleted within 30 days after the account is closed (see the Data Processing Agreement).

5. Who we share it with

We do not sell personal data. We share it only with service providers who help us run Targity, under contracts that protect it:

We may also disclose data to public authorities when the law requires it.

6. Transfers abroad

Our servers are in the European Union (Finland), and some providers above operate outside Türkiye. Such transfers are made under the safeguards provided for in Article 9 of the KVKK, such as standard contracts, and, where the GDPR applies, under its rules for international transfers.

7. If you received a message through Targity

Messages sent through Targity come from the store you shopped with, which decides who gets them and why. To run that messaging, we process on the store's behalf your name, contact details, purchase and cart history and consent status, and we record whether the message was delivered, opened and clicked (emails contain a small tracking image and tracked links). You can unsubscribe with the link in every email; for anything else, contact the store. If you contact us, we will pass your request to the store.

8. Security

Data is transferred over encrypted connections. Each store's data is kept in its own database. Passwords are stored only as salted hashes, and credentials for connected services are encrypted. Access is limited to people who need it.

9. Your rights

You can ask us whether we process your data, get a copy, have it corrected or deleted, object to processing, and exercise your other rights under Article 11 of the KVKK and, where applicable, the GDPR. Write to privacy@targity.com. We answer within 30 days. You may also complain to the Personal Data Protection Authority (KVKK) or your local data protection authority.

10. Cookies

We only use cookies that the site and dashboard need to work. See the Cookie Policy.

11. Changes

We will publish any update here and, for significant changes, tell account users by email.

12. Contact

Muhammed Yeğenoğlu (Targity), Kartal, İstanbul, Türkiye · privacy@targity.com