Legal
Privacy Notice (KVKK)
11 October 2026
1. Purpose
This notice is provided under Article 10 of Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the related Communiqué on the duty to inform. It explains how Blurpx Teknoloji Yazılım Ltd. Şti. processes your personal data through the blurpx.com website and our business services.
2. Data controller
Blurpx Teknoloji Yazılım Ltd. Şti.
Address: Şekerhane Mah. Hayri Emiroğlu Sok. No: 3/F, Alanya / Antalya, Türkiye
Tax office: Alanya · Tax number: 1781822778
Email: info@blurpx.com.tr
London correspondence address: Suite 10434, 5 Brayford Square, London E1 0SG, United Kingdom
3. Our role
Blurpx is the data controller for website visitors, people who contact us through the form or by email, newsletter subscribers, job applicants, and representatives of our clients, prospective clients and suppliers.
In the software we build for clients and the hosting, cloud, data centre and security services we provide, the client is the controller of the data it processes about its own employees and customers. Blurpx acts as a data processor and handles that data only on the client’s instructions. Those individuals should first contact the relevant controller to exercise their rights.
The Flactrum platform and our mobile apps have their own privacy notices and policies.
4. Personal data we process
| Category | Examples | Data subjects |
|---|---|---|
| Identity | Name, job title | Form users, applicants, client and supplier representatives |
| Contact | Email, phone, company name, address | Form users, newsletter subscribers, applicants, client and supplier representatives |
| Customer transactions | Request and message content, topic, proposal and contract details | Form users, client representatives |
| Financial | Invoice and payment records (no card details) | Client representatives |
| Professional experience | CV, education and work history | Job applicants |
| Transaction security | IP address, browser and device details, server and access logs, bot check result | Website visitors |
| Marketing | Newsletter subscription, language preference, consent-based analytics cookie data | Newsletter subscribers, website visitors |
We do not ask for special categories of personal data. Please do not include such information (health, religion, union membership, etc.) in forms or in your CV.
5. Purposes
- Receiving and answering contact and proposal requests and holding project discussions,
- managing contracts and services, and invoicing,
- sending the newsletter and managing subscription preferences,
- receiving and assessing job applications,
- running information security processes and preventing spam and abuse,
- with your consent, analysing website usage and improving the site,
- meeting legal obligations, responding to competent authorities and protecting our rights in potential disputes.
6. Legal bases
| Legal basis (KVKK Art. 5) | Where it applies |
|---|---|
| Entering into or performing a contract (Art. 5/2-c) | Proposal requests, project discussions, service contracts, invoicing |
| Legal obligation (Art. 5/2-ç) | Invoices and accounting records, requests from competent authorities |
| Establishing, exercising or defending a right (Art. 5/2-e) | Keeping records for potential disputes |
| Legitimate interest (Art. 5/2-f) | Answering enquiries, site security, server logs, bot protection |
| Explicit consent (Art. 5/1) | Newsletter, analytics cookies, keeping applications for longer, analytics services that involve transfers abroad |
You can withdraw your consent at any time. This does not affect the lawfulness of processing before withdrawal and does not prevent you from using the website.
7. How we collect data
We collect personal data electronically, by fully or partly automated means, through the contact and newsletter forms on our website, email, phone, job applications, contract and invoicing processes, server logs, and strictly necessary and consent-based cookies.
8. Transfers within Türkiye
Limited to the purposes above, your personal data may be shared with:
- our hosting, server and email infrastructure providers,
- our financial advisers, accountants and legal advisers,
- competent public authorities and courts, on request.
We do not sell or rent personal data or share it with third parties for their marketing.
9. Transfers abroad
Our website and the data submitted through its forms are hosted on servers in Türkiye. Limited technical data may be transferred to providers abroad for the following services:
- Google Analytics (Google): only if you accept analytics cookies in the banner. This covers the cookie identifier, approximate location derived from your IP address, browser/device details and page views.
- Cloudflare Turnstile: your IP address and browser signals, to check for bots on the contact form.
- YouTube: your IP address and browser details, if you play a video on one of our app pages.
These transfers are made in line with Article 9 of KVKK: adequate safeguards, standard contracts or, where applicable, your explicit consent. If a new transfer abroad becomes necessary, we will update this notice.
10. Retention
We keep personal data for as long as the purpose requires and for the retention periods set by law. When the period ends, it is deleted, destroyed or anonymised. The main periods are listed in our Privacy Policy.
11. Your rights
Under Article 11 of KVKK, you have the right to:
- learn whether your personal data is processed,
- request information about the processing,
- learn the purpose of processing and whether data is used accordingly,
- know the third parties in Türkiye or abroad to whom data is transferred,
- request correction of incomplete or inaccurate data,
- request erasure or destruction of data under the conditions in Article 7 of KVKK,
- request that third parties who received your data are notified of corrections, erasure or destruction,
- object to an outcome against you arising solely from automated analysis,
- claim compensation for damage caused by unlawful processing.
12. How to apply
You can submit requests regarding your rights, in accordance with the Communiqué on the procedures for applications to the data controller:
- in writing, in person or through a notary, to the address above,
- by email to info@blurpx.com.tr from the email address you previously gave us and that is registered in our systems.
Your request should include your name, Turkish ID number (or nationality and passport number for foreign nationals), address for notifications, email and phone if available, and the subject of your request. We respond within 30 days at the latest, as a rule free of charge. If your request is rejected, you find our answer insufficient, or we do not answer in time, you may complain to the Turkish Personal Data Protection Board.
13. Updates
We may update this notice as the law or our processing activities change. The current version is always published on this page.
This English text is a translation for convenience; in case of any conflict, the Turkish version prevails.