1. Introduction
This Privacy Policy applies to the Marka Gold application (hereinafter referred to as "Application") for mobile devices, TV and web services created by İbrahim Ethem Karabıyık (hereinafter referred to as "Service Provider"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Application. This notice has been prepared in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
By using the Application, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please discontinue use of the Application immediately.
This document is for INFORMATION purposes only (compliant with KVKK Principle Decision 2026/347); processes requiring explicit consent, if any, are presented separately through a dedicated consent dialog and independently of this notice.
Important Note: Personal data of end customers of the jeweler firm (such as the customer's phone, name, certificate, repair record) is outside the scope of this notice. A separate privacy notice for end customers is displayed within the Platform.
2. Information Collection and Use
The Application collects certain types of information to enhance user experience and improve service quality. The collected data may include:
A. Automatically Collected Information
When you access and use the Application, we may automatically collect:
- Device Information: Your device model, operating system, and unique device identifiers.
- Usage Data: The pages or features you access, time spent on those pages, and interactions within the Application.
- IP Address & Location: General geographic location (not precise) to improve service functionality.
- Crash Reports and Performance Data: Information about app crashes and bugs to improve stability.
- Session Information and Audit Log: System login times and the audit trail of your actions on the platform.
B. User-Provided Information
To provide a better user experience, the Application may require users to provide personally identifiable information, including but not limited to:
- Full Name
- Email Address
- Phone Number (optional)
- Company Information (jeweler firm's trade name, your role, your assigned branch)
- Password (stored as a one-way bcrypt hash; not visible to us in plain text)
- Customer Support Communications
- Billing Information (subscription plan, payment date — card details are not stored by us)
- Marketing Preference (only if you have given explicit consent)
This information is voluntarily provided by users and is used strictly for the purposes described in this Privacy Policy. Marka Gold does not request or process special categories of personal data such as health, biometric, criminal conviction, religion or ethnic origin.
3. How We Use Your Information
We may use the information collected for the following purposes:
- To Provide and Improve the Service: Personalize user experience and enhance functionality (KVKK Art. 5/2-c, necessary for performance of contract).
- To Issue Your Invoice: Legal obligations arising from tax and commercial legislation (KVKK Art. 5/2-ç, legal obligation).
- To Communicate with Users: Important notices, updates and service notifications.
- To Ensure Security and Prevent Fraud: Detect unauthorized access or suspicious activity (KVKK Art. 5/2-f, legitimate interest + Art. 12 data security obligation).
- To Analyze Performance and Improve Features: Use aggregated data to improve usability and functionality.
- For Commercial Electronic Communications: Announcements and campaigns only if you have given explicit consent; you may withdraw consent at any time.
4. Third-Party Access
We may share certain types of data with third-party service providers strictly for operational purposes. Third parties may include:
- Cloud Storage Services (AWS S3 — Frankfurt, EU): To securely store user-generated data and files.
- Database Services (MongoDB Atlas — Frankfurt/Ireland, EU): For management of account and transaction data.
- SMS Provider (Netgsm — Türkiye): For account activation, certificate and repair notifications.
- Email Provider (Google Gmail SMTP — USA): For account activation, invoice and notification emails.
- Competent Public Authorities (Courts, prosecutors, KVKK Authority): Only within the scope of legal obligations.
Cross-border transfers are made under Standard Contractual Clauses (SCC) in accordance with KVKK Art. 9 and Board Decision No. 2024/959, and are notified to the Authority within 5 business days of signature.
We do not sell, rent, or trade personal data to third parties for marketing purposes.
5. Data Retention and Deletion
We retain collected data for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Users may request deletion of their data by contacting our support team at support@markaglbl.com.
Upon user request or account deletion, we will:
- Permanently erase all user-provided data, except where legally required to retain records.
- Ensure that backup data is also deleted after a reasonable retention period.
Retention periods by category:
- Account information: 10 years after account closure (Turkish Code of Obligations Art. 146, general statute of limitations)
- Invoice and payment records: 5 years (Tax Procedure Law)
- Customer support correspondence: 24 months (proportionality principle)
- System audit logs: 24 months
- Contract and explicit consent records: 10 years (burden of proof)
6. Opt-Out Rights
Users may opt out of certain data collection practices by:
- Disabling Analytics Tracking: Adjusting device settings to limit tracking.
- Uninstalling the Application: This will stop all data collection.
- Requesting Data Deletion: Contact support@markaglbl.com for further instructions.
Your rights under KVKK Art. 11:
(a) To learn whether your personal data are processed,
(b) To request information if such processing has taken place,
(c) To learn the purpose of processing and whether the data are used in accordance with that purpose,
(ç) To know the third parties to whom data are transferred domestically or abroad,
(d) To request rectification if the data are incomplete or incorrect,
(e) To request erasure or destruction under conditions permitted by law,
(f) To request that rectification, erasure or destruction be notified to third parties to whom data have been transferred,
(g) To object to a result adverse to you arising from analysis of the data exclusively by automated systems,
(ğ) To claim compensation for damages suffered due to unlawful processing.
Your requests will be answered within 30 days at the latest pursuant to KVKK Art. 13.
7. Children's Privacy
The Application is not intended for children under the age of 13. We do not knowingly collect or solicit personal information from children. If we become aware that we have collected such data, we will take immediate steps to delete it. Parents or guardians can contact us at support@markaglbl.com for assistance.
8. Security Measures
We implement reasonable administrative, technical, and physical security measures to protect user data against unauthorized access, loss, or alteration (KVKK Art. 12). These include:
- HTTPS/TLS encrypted data transmission
- Passwords stored as one-way bcrypt hashes
- Immutable audit log retention with AWS S3 Object Lock
- Regular security reviews and event monitoring
- Multi-layer authorization against unauthorized access
However, no system is entirely secure, and users should exercise caution when sharing personal data online. In case of a data breach, affected data subjects and the KVKK Authority will be notified within 72 hours pursuant to KVKK Art. 12/5 and Board Decision No. 2025/2451.
9. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Any significant changes will be communicated via:
- Email notifications (if applicable)
- In-app announcements
- Updates on our website
Continued use of the Application after any updates constitutes acceptance of the revised Privacy Policy.
10. Contact Us
For any questions, concerns, or requests related to this Privacy Policy, you can contact us at:
Marka Gold
İbrahim Ethem Karabıyık
Kocasinan Merkez Mah. Mahmutbey Cad. 235A
Bahçelievler, Istanbul, Turkey
Email: support@markaglbl.com