Last updated: October 2026
1. Data Controller
This Privacy Policy explains how your personal data is processed when you use maafhub.com (“MaafHub”), in line with Turkish Personal Data Protection Law No. 6698 (“KVKK”) and our duty to inform you.
Data controller: Muhammed Tarrab (operator of MaafHub)
Address: Bursa / Türkiye
Contact: info@maafhub.com
2. Personal Data We Process and How We Collect It
Data processed:
- Account information: name, username, email address and password.
- Company profile information: company name, description, category, country, phone, address, website, logo and images that the user adds.
- Communication data: messages sent through the platform, favorites, and emails you send us.
- Order and payment records: package purchase requests, order and invoice information, and records related to bank transfers.
- Technical data: IP address, browser and device information, and access date and time (server logs).
How we collect it: Your data is collected entirely by electronic means: through registration and sign-up forms, company profile and content forms, order and package purchase forms, messaging on the platform, email correspondence, cookies and server logs.
3. Purposes of Processing
- Creating and managing your account,
- Publishing company profiles and enabling users to contact each other,
- Handling package sales, orders and payments,
- Responding to support requests and inquiries,
- Ensuring platform security and preventing misuse and unlawful content,
- Complying with legal obligations and responding to legal requests.
4. Legal Grounds
Your data is processed under Article 5/2 of KVKK on the following legal grounds:
- Account creation, publication of company profiles, messaging and order processing: processing is directly related to the establishment or performance of a contract (Art. 5/2-c).
- Keeping order, invoice and payment records: compliance with the data controller’s legal obligations (Art. 5/2-ç).
- Platform security, server logs and prevention of misuse: the legitimate interests of the data controller, provided that they do not harm your fundamental rights and freedoms (Art. 5/2-f).
- Responding to legal requests and protecting a right: establishment, exercise or protection of a right (Art. 5/2-e).
- Any processing outside the above: where applicable, we ask for your explicit consent separately.
5. Publicly Visible Information
The information you add to your company profile (company name, description, contact details, images, etc.) is published publicly on the platform and can be viewed by visitors worldwide. You decide what information to publish; we recommend that you do not add information to your profile that you do not want to be public.
6. Cookies
MaafHub uses the technical cookies needed for the site to work. These are the cookies that the WordPress and WooCommerce systems use for login, account security and order processing, and the cookie that the Polylang plugin uses to remember your language preference. These cookies are necessary to provide the service, and no separate consent is required for them.
If non-essential cookies (for example analytics or advertising cookies) are used, they are enabled only after your prior consent. You can delete or block cookies in your browser settings; however, some features such as login and language selection may then not work.
7. Sharing of Data
Recipient groups: Your data may be shared, only for the purposes above and to the extent necessary, with the hosting and email service provider of the platform, the bank that receives transfer payments (for payment records), and authorized public authorities. When you click the WhatsApp link on the platform, the communication takes place through the WhatsApp service and under that service’s own terms.
Your data is not sold and is not shared with third parties for advertising purposes.
Transfers abroad: If our service providers’ servers are located abroad, your data is transferred in accordance with Article 9 of KVKK and related legislation, on the basis of an adequacy decision, appropriate safeguards, or another condition provided by law.
8. Retention Period
Your personal data is kept for as long as required by the purpose of processing and for the legal retention periods set by applicable legislation. Account and profile data is kept while your account is active; order and payment records are kept for the period required by commercial and tax legislation; technical logs are kept for a reasonable period for security purposes. When the period ends, or if you request deletion of your account, your data other than what must be kept by law is deleted, destroyed or anonymized.
9. Security
Reasonable technical and organizational measures are applied to protect your data against unauthorized access, loss or misuse. Passwords are not stored as plain text; they are stored using one-way encryption (hashing). However, no transmission or storage method over the internet can be guaranteed to be completely secure.
10. Your Rights Under KVKK and How to Apply
Under Article 11 of KVKK, you have the right to: learn whether your data is processed; request information if it has been processed; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred in Türkiye or abroad; request correction if it is incomplete or inaccurate; request deletion or destruction; request that these actions be notified to third parties to whom the data was transferred; object to a result against you arising from analysis exclusively by automated systems; and claim compensation if you suffer damage due to unlawful processing.
You can send your application to info@maafhub.com in writing, through a registered electronic mail (KEP) address, with a secure electronic signature or mobile signature, or from the email address registered in our system. Please state your identity and request clearly; additional information may be requested to verify your identity. Your request is concluded as soon as possible depending on its nature and within 30 days at the latest. If you find the response insufficient, you have the right to complain to the Personal Data Protection Board within 30 days of learning of the response and in any case within 60 days of the application date.
11. Payments
Package payments are made by bank transfer. MaafHub does not collect or store bank card information.
12. Children’s Privacy and Changes to This Policy
MaafHub is a B2B platform and is not intended for persons under 18; we do not knowingly collect data from persons under 18. This policy may be updated from time to time, and the current version is always published on this page.
13. Contact
For any questions about privacy and your personal data: info@maafhub.com