Fotipoti

Information Notice on the Processing of Personal Data

Last updated: July 9, 2026

1. Data Controller

Pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by Talha Çoruh ("Fotipoti") as the data controller, within the scope described below.

  • Address: Fikirtepe Mah. Rüzgar Sok. No:29/1K Kadıköy / İstanbul, Türkiye
  • Phone: +90 533 375 35 77
  • E-mail: destek@fotipoti.com
  • Website: fotipoti.com

2. Personal Data Processed

  • Identity: full name; Turkish ID number for individual invoicing; title and tax number (VKN) for corporate.
  • Contact: e-mail, phone, delivery/billing address.
  • Customer transaction: order and shoot preferences (category, style, format, quantity/duration), order history, invoice details.
  • Financial: payment method and transaction reference (your card details are processed by the payment provider PayTR and are not stored by us); bank transfer/EFT receipt information.
  • Visual and audio: product images you send for the shoot and the photo/video content delivered to you.
  • Transaction security: IP address, session/device information, log records, cookie data.
  • Marketing: if you give explicit consent, your communication preferences and engagement data.

3. Purposes of Processing

Creating and managing membership and your account; providing the order and product shoot service; collecting payment; receiving products and handling shipping; invoicing and fulfilling legal obligations; informing you about your order process (e-mail/WhatsApp); responding to support requests; ensuring information security and preventing fraud; measuring and improving our services; and, where you give explicit consent, marketing activities.

4. Legal Grounds for Processing (KVKK Art. 5)

  • Establishment or performance of a contract (Art. 5/2-c): account, order, shoot, delivery.
  • Legal obligation (Art. 5/2-ç): invoicing/tax (TCKN/VKN) and statutory retention.
  • Legitimate interest (Art. 5/2-f): security, fraud prevention, service improvement.
  • Explicit consent (Art. 5/1): marketing messages, non-essential cookies and, where necessary, transfers abroad.

5. Method of Collection

Your personal data is collected electronically via the website/application through account creation, order placement, payment, contact forms and cookies.

6. Transfer of Personal Data

Limited to the purposes above:

  • Domestic: PayTR (payment infrastructure), Yurtiçi Kargo (delivery), accountant (bookkeeping), and competent public authorities upon request.
  • Abroad: Supabase (database – Frankfurt/EU), Vercel (hosting infrastructure), Resend (e-mail delivery – USA), Meta Platforms/WhatsApp (notifications – USA).

Transfers abroad are carried out based on appropriate safeguards and/or your explicit consent within the scope of KVKK Art. 9.

7. Retention Periods

  • Account/membership: while your account is active and for a reasonable period thereafter.
  • Order, invoice and financial records: 10 years under the Tax Procedure Law (VUK) and the Turkish Commercial Code (TTK).
  • Delivered visual content: deleted or anonymised after completion of the service and a reasonable access period.
  • Log records: for the period required by the relevant legislation.
  • Marketing consent data: until consent is withdrawn.

8. Rights of the Data Subject (KVKK Art. 11)

You have the right to: learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether it is used in accordance with that purpose; know the third parties to whom it is transferred domestically or abroad; request correction if it is incomplete or inaccurate; request its deletion or destruction where the conditions are met; request that correction/deletion be notified to third parties to whom the data was transferred; object to a result against you arising from analysis solely by automated systems; and claim compensation for damages arising from unlawful processing.

9. Method of Application

You may submit your requests in writing to destek@fotipoti.com or to the postal address above, using the Data Subject Application Form. Your application will be concluded within 30 days at the latest.

10. Changes

This notice may be updated; the current version is published on this page.