This Privacy Policy explains how personal data is processed when you visit btrscript.com, create an account or buy services, in line with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and applicable data-protection principles.
Seller / data controller details
Seller: [Company / Individual name] (“BTR Script”) · Address: [Full address] · Tax office / ID: [Tax details] · E-mail: [Support e-mail] · Phone: [Phone]
1. Data controller
The data controller is BTR Script, identified by the details above.
2. Data we process
- Identity and contact: name, e-mail, phone, company, address.
- Customer transactions: orders, invoices, payment status, licences, services, support tickets and correspondence.
- Billing: invoice details (tax office, tax/ID number). Card data is not stored by us; it is handled by the payment institution.
- Security: IP address, browser/device data, session and log records.
- Usage: pages visited, clicks and cookie data.
3. Purposes and legal bases
- Creating your account, taking orders and delivering services (performance of a contract).
- Issuing invoices and meeting accounting and tax duties (legal obligation).
- Answering support requests, verifying licences, sending service and payment notices (contract and legitimate interest).
- Protecting security, preventing fraud and abuse and defending legal claims (legitimate interest).
- Sending marketing messages and using optional cookies (your consent, which you can withdraw at any time).
4. Sharing
Data is shared only as needed with payment institutions and banks; e-mail/SMS providers; hosting, server and domain registration providers; e-invoice integrators and accountants; and public authorities or courts where legally required. We do not sell your data. Some providers may be located abroad; transfers follow the applicable legal safeguards.
5. Retention
We keep data for as long as the purpose requires and as required by law: invoicing and accounting records for the statutory period (generally 10 years), account and support records while your account is active and for limitation periods afterwards, security logs for the legally required period. After that data is deleted, destroyed or anonymised.
6. Cookies
We use essential cookies for sessions, cart, language/currency preferences and security. Analytics or marketing cookies, if used, are enabled only with your consent. You can delete or block cookies in your browser, but some features such as login and cart may stop working.
7. Security
We apply reasonable technical and organisational measures, including HTTPS, irreversible password hashing, encryption of sensitive settings, access controls, login/session limits and regular backups. No internet transmission is completely secure. Breaches are notified as required by law.
8. Your rights
You may ask whether your data is processed, request information, learn the purpose and recipients, request correction, deletion or destruction, object to results of automated analysis, and claim compensation for unlawful processing. Use the “Download my data / delete my account” options in your account or write to the e-mail above with identity verification. Requests are answered free of charge within 30 days; you may also complain to the Personal Data Protection Authority.
9. Children
Our services are not directed to people under 18 and we do not knowingly collect their data.
10. Third-party links
The Site may link to third-party sites whose privacy practices we do not control.
11. Changes
We may update this policy; the current version is always published on this page and material changes are announced.