LEGAL

Privacy Policy

Last updated: 9 September 2026 · GDPR compliant · KVKK compliant (Turkish data protection law)
YOUR RIGHTS SUMMARY 

You have the right to access, correct, delete, and export your personal data at any time. Email hello@sosomak.com. We respond within 30 days. You are never required to consent to marketing to use the platform. By registering, you acknowledge and agree to the terms of the Privacy Policy set forth below. 

 

1. WHO WE ARE 

Sosomak Elektronik Ticaret ve Teknolojileri A.Ş. is a company incorporated in the Republic of Türkiye under Turkish law and is the data controller of the personal data collected through sosomak.com and its related applications. This policy explains what data we collect, why, how we use it, and your rights. 

 

2. DATA WE COLLECT 

Account and identity data 

  • Name, email, phone, and hashed password
  • Company name, registration number, country, and address
  • Identity documents uploaded during verification (stored encrypted)

Transaction data
 
  • RFQ details, quotes, order values, agreements and payment terms
  • Escrow transaction records and release confirmations
  • Shipping documents, invoices, and certificates in the vault

Usage and technical data
 
  • IP address, browser type, device, and operating system
  • Pages visited, search queries, and time on platform
  • Cookies and session identifiers (see our Cookie Policy)

 

3. HOW WE USE YOUR DATA
 
  • Contract performance: To operate your account, process escrow, and deliver our services
  • Legal obligation: To comply with KYC/AML, Turkish law, and GDPR
  • Legitimate interest: To prevent fraud, improve security, and send service communications
  • Consent: To send marketing emails (withdrawable at any time)

4. DATA SHARİNG

Sosomak does not sell personal data. We share data only with: platform parties (buyer info shared with manufacturers on RFQ), GDPR-compliant service providers (Supabase, Cloudinary, SendGrid, Algolia), and Law enforcement authorities, public institutions, and judicial authorities where required by law.



5. DATA RETENTİON

Account data retained while account is active. Transaction records retained 10 years (Turkish law). On account deletion, personal data is deleted within 30 days except where retention is legally required.



6. YOUR RİGHTS
 
Under GDPR (EU) and KVKK (Turkey) you have the right to: access, correct, delete, port, and object to processing of your data. Contact hello@Sosomak .com. If unsatisfied, file a complaint with your national DPA or Personal Data Protection Board.