About this Policy

This Privacy Policy describes how Dalil Turkey ("we", "us", "our") collects, uses, and discloses information when you use the dalil-turkey.com website and related services (the "Platform"). The Platform is a B2B marketplace that connects buyers with Türkiye-based suppliers. By using the Platform you agree to this Policy. If you do not agree, please do not use the Platform.

Information You Provide

When you register, edit your profile, contact a supplier, or submit a quote request (RFQ), you may provide us with your name, email address, phone number, country, company name, job title, profile photo, and the content of your messages. Supplier accounts may additionally provide business information, catalog files (PDF), opening hours, and website or social media links. We process this information so we can operate the Platform, route inquiries to the relevant supplier, and maintain your account.

Information Collected Automatically

When you visit the Platform we automatically receive certain technical information: a hashed (SHA-256 with a server-side salt) form of your IP address, your browser's user-agent string, the pages you view, and timestamps. We do not store raw IP addresses. We also issue an anonymous session cookie (dl_sess) used to deduplicate listing views and to support rate limiting against abuse. None of this technical data is sold.

How We Use Your Information

We use your information to create and manage your account; deliver quote requests to the supplier you are contacting and confirmation emails to you; display listings, reviews, and profile information you have voluntarily made public; detect and prevent abuse such as spam, automated scraping, and brute-force sign-up attempts; and to communicate operational notices about the Platform.

Sharing With Suppliers and Service Providers

When you submit a quote request (RFQ) to a supplier, we share with that supplier the information you entered in the form (name, email, phone if provided, company, country, message, product interest, and quantity). We use third-party service providers to operate the Platform: Cloudinary (image hosting), Cloudflare R2 (catalog PDF storage), Google and GitHub OAuth (sign-in), Upstash Redis (rate limiting), and an SMTP provider (transactional email delivery). These providers process data on our behalf under their own terms and we do not authorize them to use it for unrelated purposes. We do not sell personal data.

Cookies

We use a small number of cookies. Essential cookies include the anonymous tracking session (dl_sess) and authentication cookies set by NextAuth when you sign in. The Platform does not currently use third-party advertising cookies. You can disable cookies in your browser, but the Platform may not function correctly if authentication cookies are blocked.

Data Security

Passwords are stored as bcrypt hashes and never in plaintext. Connections to the Platform are encrypted in transit over HTTPS. IP addresses are hashed with a server-side salt before storage. We apply rate limits to sensitive endpoints (registration, contact, RFQ) to slow abuse. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Data Retention

We retain account information for as long as your account is active. If you ask us to delete your account, we will mark it as deleted; some content (such as past listings or reviews) may remain in an anonymized form to preserve the integrity of historical records on the Platform. RFQ records are retained for as long as they are needed to support the buyer-supplier relationship and to comply with applicable record-keeping obligations.

Your Rights Under KVKK

Under Turkish Personal Data Protection Law No. 6698 ("KVKK") you have the right to: learn whether your personal data is being processed; request information about how it is processed; access the data; request correction of inaccurate information; request deletion; object to outcomes of automated processing; and request damages for violations of KVKK. To exercise any of these rights, contact us at info@dalil-turkey.com.

Children's Privacy

The Platform is intended for users aged 18 or older and is not directed to children. If we learn that we have collected personal data from a child under 18 without parental consent, we will delete it.

Changes to this Policy

We may update this Policy from time to time. When we do, we will update the "Last Updated" date at the top of the page. Material changes will be communicated by a notice on the Platform.

Contact

For any questions about this Policy or to exercise your data rights, contact us at info@dalil-turkey.com.