Privacy Policy

1. Data Controller

Your personal data is processed by Senburc Software Technologies as the data controller.

2. Personal Data We Collect

Account and business information: restaurant name, address, phone, email, contact person details and billing/tax information.

Operational data: menu, product, table and order records, and subscription details.

Payment data: payments are processed through the iyzico infrastructure; your card details are never stored by us and are handled directly by the payment provider.

Technical data: IP address, device and browser information, usage/log data and cookies.

3. How We Use Data

We process your data to provide and maintain the service, process payments, provide support, protect security, comply with our legal obligations and improve the service.

4. Legal Bases

Processing is based on the performance of a contract, your explicit consent, our legitimate interests and our legal obligations under applicable law (Turkish KVKK Art. 5-6 and, where applicable, the GDPR).

5. Sharing and Transfers

We share your data only to the extent required to deliver the service: the payment provider (iyzico), hosting and infrastructure providers, and legally authorised public authorities. We never sell your personal data.

6. Cookies

We may use cookies that are strictly necessary for the site to function, as well as analytics cookies to improve the service. You can manage your cookie preferences through your browser settings.

7. Retention

We keep your personal data for as long as the service is provided and for the retention periods required by applicable law. At the end of these periods, your data is deleted, destroyed or anonymised.

8. Data Security

We apply appropriate technical and organisational measures such as encryption, access control and regular audits to protect your data. However, no transmission over the internet is 100% secure.

9. Your Rights

You have the right to access, rectify, erase, object to and restrict the processing of your data, as well as the right to data portability (KVKK Art. 11 / GDPR).

10. Changes

We may update this policy from time to time; the current version is always published on this page.