Legal

Privacy & KVKK

What we process, why we process it, and the rights you hold under Turkey's Personal Data Protection Law (KVKK, Law No. 6698).

Last updated:

Template for the demoThis document is a plain-language template prepared for the Kvell demo and is subject to legal review before any production use.

Who we are

Kvell ("we") operates a payments platform for businesses in Turkey. For personal data processed through the platform, Kvell acts as the data controller (veri sorumlusu) within the meaning of KVKK.

What we process

Account and contact data (name, e-mail, phone, business details), transaction data (amounts, timestamps, payment method details), and technical data (device, IP address, logs) generated while you use the platform.

Card numbers are handled only inside Kvell's isolated, encrypted card vault. Merchants never receive or store card numbers — they see only masked digits and tokens.

Why we process it

To provide the services in your agreement; to meet legal obligations that apply to payment activity in Turkey (including identity verification and financial-crime screening); to keep the platform secure and prevent fraud; and, with your consent where required, to keep you informed about the product.

Who we share it with

Banks and payment counterparties involved in executing a transaction; service providers who process data on our behalf under contract; and public authorities where the law requires it. We do not sell personal data.

How long we keep it

For as long as your account is active and afterwards for the periods required by the laws that apply to payment and financial records. When no legal ground remains, data is deleted, destroyed or anonymised in line with KVKK.

Your rights (KVKK Art. 11)

Under Article 11 of KVKK you may:

  • learn whether your personal data is processed, and request information about it
  • learn the purpose of processing and whether data is used accordingly
  • know the third parties to whom data is transferred
  • request correction of incomplete or inaccurate data
  • request deletion or destruction where the legal grounds have ceased
  • object to results produced exclusively by automated analysis
  • request compensation for damages arising from unlawful processing

Contact

For any privacy request, write to privacy@kvell.group. We respond within the periods set by KVKK.