Privacy Policy
Effective Date: 1 August 2026
1. Scope
This Privacy Policy explains how personal data is processed in connection with the MaviHost website, customer panel, cloud infrastructure and related digital Services, support channels, transactions, and business operations.
This Policy primarily applies where MaviHost acts as a data controller. Where MaviHost processes personal data contained in Customer-controlled environments solely on behalf of a Customer, MaviHost may act as a data processor as described in Section 7.
2. Data Controller
For processing activities in which MaviHost determines the purposes and means of processing, the data controller is:
MaviHost brand.
Current corporate registration information, registered office, correspondence address, official contact details, and other legally required company information are available at:
[[[[[[[[[[ LINK: Company Information & Contact ]]]]]]]]]]
For the purposes of this Policy, “MaviHost,” “we,” “us,” and “our” refer to the MaviHost brand operated by the above company.
3. Privacy Notices and Consent
This Privacy Policy provides general information about MaviHost’s personal data processing activities.
Where required by the Turkish Personal Data Protection Law No. 6698 (KVKK) or other applicable legislation, MaviHost may provide a separate or activity-specific information notice at the point where personal data is collected, including where appropriate for account registration, identity or payment verification, support, marketing, cookies, or a specific Service.
Providing an information notice is separate from obtaining explicit consent. Acceptance of the Terms of Service or acknowledgment of this Privacy Policy does not constitute explicit consent where separate consent is legally required.
Where explicit consent is required, it is requested separately and specifically.
4. Personal Data We May Process
Depending on your relationship with MaviHost and the Services you use, MaviHost may process the following categories of personal data:
4.1. Identity, Account, and Contact Data
This may include name and surname, customer or account identifier, company name, authorized representative information, email address, telephone number, billing or correspondence address, and tax or business identification information where required.
4.2. Order, Billing, and Payment Data
This may include Services ordered, order and invoice information, billing period, transaction amount, currency, payment method, payment status, refund information, account balance, transaction identifiers, and limited payment-related information provided by payment institutions.
4.3. Verification Data
Where verification is reasonably required for payment security, fraud prevention, account security, or legal compliance, MaviHost may process information necessary to verify identity, account ownership, or payment authorization.
Depending on the verification process, this may include identity document information, verification photographs, masked payment card images, and related verification records or communications.
4.4. Service, Technical, and Security Data
This may include Service configuration, Service location, domain names, allocated IP addresses, resource information, activation and expiration information, renewal status, usage information, IP address, device or browser information, authentication records, login and access records, session information, security logs, and fraud or abuse indicators.
4.5. Support and Communication Data
This may include support tickets, email or chat communications, complaints, technical troubleshooting information, attachments, Service identifiers, and other information provided when communicating with MaviHost.
4.6. Website, Cookie, and Marketing Preference Data
Where applicable, this may include cookie or session identifiers, website interaction information, language preferences, marketing permission or rejection records, and related communication preferences.
5. How We Collect Personal Data
Personal data may be collected:
- Directly from you, including when you create an account, place an order, make a payment, complete a verification process, contact support, or provide information in connection with a Service;
- Automatically through MaviHost systems, including when you use the website, customer panel, Services, APIs, authentication systems, or infrastructure;
- From service providers or other parties involved in a transaction, including payment institutions, banks, fraud-prevention providers, domain registries or registrars, Certificate Authorities, software licensors, and infrastructure providers; and
- From your organization or authorized representative, where an account or Service is managed on your behalf.
6. Purposes and Legal Bases of Processing
MaviHost processes personal data only where a lawful basis under applicable legislation exists.
Depending on the relevant processing activity, personal data may be processed for the following purposes and legal bases:
Account, Order, and Service Management
Personal data may be processed to create and administer accounts, authenticate users, process orders, activate and provide Services, manage configurations, renewals and cancellations, provide support, and perform other contractual obligations.
Such processing may be based on the necessity to establish or perform a contract.
Billing and Payment
Personal data may be processed to process and verify payments, issue invoices, manage account balances and refunds, maintain financial records, and handle payment-related issues.
Such processing may be based on the establishment or performance of a contract, compliance with legal obligations, or the establishment, exercise, or protection of legal rights, depending on the activity.
Security, Verification, Fraud Prevention, and Abuse Prevention
Personal data may be processed to protect accounts and infrastructure, verify identity or payment authorization where necessary, detect and investigate unauthorized or fraudulent activity, prevent abuse, and maintain Service and network security.
Depending on the activity, such processing may be based on MaviHost’s legitimate interests where the fundamental rights and freedoms of the data subject are not overridden, the establishment, exercise, or protection of legal rights, contractual necessity, or compliance with a legal obligation.
Legal and Regulatory Compliance
Personal data may be processed to comply with tax, accounting, electronic commerce, record-keeping, judicial, administrative, regulatory, and other applicable legal obligations.
Such processing may be based on a legal obligation or where processing is expressly required or permitted by law.
Marketing
Personal data may be processed for marketing communications and management of marketing permissions where legally permitted. Where explicit consent or prior commercial communication approval is required, it is obtained separately in accordance with applicable law.
7. Customer Content and MaviHost as a Data Processor
MaviHost Services may enable Customers to store, host, transmit, back up, or otherwise process data relating to their own users, employees, customers, or other persons.
For personal data contained in Customer-controlled content or environments, the Customer may act as the data controller and MaviHost may act as a data processor where MaviHost processes the data solely on behalf of the Customer for the provision of the relevant Service.
The Customer is responsible for ensuring that its processing of such personal data is lawful and for fulfilling the obligations applicable to it as a data controller.
MaviHost does not acquire ownership of Customer Content merely because it is stored or processed through MaviHost Services.
Where MaviHost independently determines the purposes and means of a particular processing activity, MaviHost acts as a data controller for that activity.
8. Sharing of Personal Data
Personal data may be shared where necessary for the relevant purpose and permitted by applicable law.
Depending on the Service and processing activity, recipient categories may include:
- Banks, payment institutions, payment processors, and fraud-prevention providers, for payment, refund, verification, fraud-prevention, or payment-dispute purposes;
- Infrastructure, network, storage, security, communication, and technical service providers, where necessary to provide or operate the Services;
- Domain registries, registrars, Certificate Authorities, software licensors, and other product providers, where necessary to provide a Service requested by the Customer;
- Accountants, auditors, legal advisers, and other professional advisers, where necessary for legal, financial, compliance, or professional purposes; and
- Courts, law-enforcement bodies, tax authorities, regulators, administrative authorities, and other competent public bodies, where disclosure is required or permitted by law.
Only personal data reasonably necessary for the relevant purpose is shared.
9. International Transfers
MaviHost offers Services that may use infrastructure or Service locations inside or outside Türkiye.
Where a Customer selects a Service located outside Türkiye, Customer Content and Service-related data necessary to provide that Service may be processed in the relevant location.
Personal data may also be transferred outside Türkiye where a foreign infrastructure, technology, communication, security, or other service provider is actually used for the relevant processing activity.
Where personal data is transferred outside Türkiye, MaviHost carries out the transfer in accordance with Article 9 of KVKK and applicable secondary legislation.
10. Cookies and Similar Technologies
The MaviHost website and customer panel may use cookies and similar technologies for purposes such as authentication, session management, security, preferences, website functionality, analytics, and, where lawfully enabled, marketing.
Where consent is required under applicable law for non-essential cookies, the relevant cookies are activated only after the required consent has been obtained.
Further information concerning the cookies used, their purposes, duration, and available controls is provided in:
[[[[[[[[[[ LINK: Cookie Policy ]]]]]]]]]]
11. Marketing Communications
Marketing communications are managed separately from communications necessary to operate an account, process a transaction, provide a Service, maintain security, or comply with legal obligations.
Where prior approval is required for commercial electronic communications, MaviHost obtains the required approval separately.
Where applicable, commercial electronic communication approvals and rejection requests are recorded or managed through the İleti Yönetim Sistemi (İYS) in accordance with applicable Turkish electronic commerce legislation.
Withdrawal of marketing permission does not prevent MaviHost from sending necessary transactional, billing, security, support, or Service-related communications.
12. Data Security
MaviHost takes appropriate technical and administrative measures designed to protect personal data against unlawful processing, unauthorized access, loss, alteration, disclosure, or destruction, in accordance with applicable law and the nature of the relevant processing activity.
Access to personal data is limited according to operational need and authorization.
13. Data Retention
Personal data is retained only for as long as necessary for the purpose for which it is processed and for any additional period required by applicable tax, accounting, commercial, consumer, electronic commerce, data protection, or other legal obligations.
Retention periods may also reflect legitimate security, fraud-prevention, dispute-resolution, and legal-rights requirements where an applicable legal basis exists.
When the legal grounds and purposes requiring processing no longer exist, personal data is deleted, destroyed, or anonymized in accordance with applicable law.
Customer Content and hosted data are also subject to the applicable Service term, cancellation conditions, backup cycles, and technical deletion processes.
14. Rights Under KVKK and Applications
Where KVKK applies, data subjects may exercise their rights under Article 11 of KVKK, including rights relating to information about processing, correction of inaccurate data, deletion or destruction where the legal conditions are met, information concerning transfers, objection to certain exclusively automated processing, and compensation for damage caused by unlawful processing.
Requests concerning these rights should be submitted to the data controller using a method permitted under applicable KVKK legislation.
Current identity, address, and official contact information of the data controller is available at:
[[[[[[[[[[ LINK: Company Information & Contact ]]]]]]]]]]
MaviHost may request information reasonably necessary to verify the identity of the applicant and protect personal data against unauthorized disclosure or modification.
Requests are handled as soon as possible and, where the statutory maximum period applies, no later than 30 days. Requests are generally handled free of charge, subject to any fee permitted under the applicable tariff or legislation.
Data subjects may also exercise their right to apply to the Turkish Personal Data Protection Board in accordance with the conditions and procedures established by applicable law.
15. Changes and Contact
MaviHost may update this Privacy Policy where necessary to reflect changes in applicable legislation, Services, processing activities, technology, infrastructure, or operational practices.
The current version will be published together with its effective or last-updated date.
Where applicable law requires a separate information notice or explicit consent for a particular processing activity, an update to this Privacy Policy does not replace that requirement.
For questions concerning this Privacy Policy or personal data processing, current official contact information is available at:
[[[[[[[[[[ LINK: Company Information & Contact ]]]]]]]]]]