Privacy & Data Protection Policy

1. Data Controller

In accordance with the Law on the Protection of Personal Data ("KVKK") and GDPR principles, UnverPay (UnverTech), acting as the data controller, processes your personal data within the framework explained below. For inquiries, please contact info@unverpay.com.

2. Processed Data Categories

Card data is processed via a PCI-DSS compliant payment infrastructure provider using tokenization principles; UnverPay does not store full credit card numbers.

3. Processing Purposes and Legal Grounds

Your personal data is processed for the execution of payment processes, fulfillment of contractual obligations, compliance with legal regulations, fraud prevention, and customer support operations.

4. Data Transfer

Your data may be shared with payment service providers, technical infrastructure providers, auditing firms, and authorized public institutions to the extent necessary and in accordance with the law.

5. Retention Period

Data is retained for as long as necessary within the scope of relevant financial, tax, and commercial record obligations. Expired data is deleted or anonymized.

6. Your Rights

You have the right to learn whether your personal data is being processed, request correction of incomplete/incorrect data, request deletion, and object to processing. Requests can be sent via email or mail.