Privacy and Personal Data Protection Policy
Last updated: August 29, 2026
At ComSuite ("ComSuite," "we"), we value the privacy and security of your personal data. This Privacy Policy explains the purposes for which your personal data is processed, who it is shared with, how long it is retained, and what rights you have when you visit comsuite.com.tr, sign up for our services, build a site, or contact us.
This policy has been prepared on the basis of applicable legislation, primarily Turkey's Personal Data Protection Law No. 6698 (KVKK) and the European Union's General Data Protection Regulation (GDPR).
1. Data Controller
Your personal data is processed by ComSuite in its capacity as the data controller (the "data controller" under the GDPR), using the contact details below:
- Company name: ComSuite
- Address: Nidakule Ataşehir, Barbaros Mahallesi, Begonya Sk. No:1, Ataşehir / İstanbul
- Email: info@comsuite.com.tr
- Phone: +90 850 305 20 85
2. Personal Data We Process
To provide our services, we may process the following categories of personal data:
| Data Category | Examples |
|---|---|
| Identity Information | First name, last name, username |
| Contact Information | Email address, phone number, address |
| Customer Transaction Information | Subscription/plan details, invoice and payment records, request and complaint records |
| Financial Information | Billing information (we do not store your credit card details; payments are processed through licensed payment institutions) |
| Transaction Security / Technical Data | IP address, browser and device information, log records, session information, cookie data |
| User Content | Site content you create on the platform, and text, images, and media files you upload |
| Marketing Information | Your communication preferences and, where you have given explicit consent, electronic message details |
3. Our Purposes for Processing Personal Data
- Membership and account creation, authentication, and account management
- Providing, operating, and improving the website builder and related services
- Carrying out subscription, billing, and payment processes
- Responding to requests, questions, and complaints, and providing customer support
- Ensuring the security, integrity, and continuity of the service, and preventing abuse
- Fulfilling legal obligations (tax, commercial, e-commerce, and communications legislation)
- Sending marketing and informational messages where you have given explicit consent
- Statistical analysis and measuring service performance
4. Legal Bases for Processing
We process your personal data based on the following legal grounds under KVKK Articles 5–6 and GDPR Article 6:
- Establishment or performance of a contract: Processing is necessary to establish and perform the service agreement.
- Legal obligation: Processing is necessary to fulfill our obligations under applicable legislation.
- Legitimate interest: Our legitimate interests, such as service security, fraud prevention, and service improvement (provided that your fundamental rights and freedoms are not harmed).
- Explicit consent: Your explicit consent, particularly for marketing messages and non-essential cookies.
5. How Personal Data Is Collected
Your personal data is collected through automated or partially automated means, including registration, contact, and request forms on our website, cookies and similar technologies, communication by email and phone, and your use of the services.
6. Transfer of Personal Data
Your personal data may be shared with the following groups of recipients, solely for the purposes described above and in accordance with KVKK Articles 8–9 and the relevant provisions of the GDPR:
- Service providers: Server and hosting providers, content delivery network (CDN) providers, email delivery services, and analytics providers.
- Payment institutions: Licensed payment and electronic money institutions that process payments (e.g., iyzico, PayTR).
- Authorized institutions and organizations: Competent public authorities and judicial bodies, upon request, in line with our legal obligations.
International Transfers
Some of our service providers, such as hosting, email, CDN, and analytics providers, may have servers located outside Turkey (particularly in European Union countries). In that case, your personal data may be transferred abroad with the necessary safeguards in place, in accordance with KVKK Article 9 (adequate protection / undertaking / explicit consent and decisions of the Board) and GDPR Chapter V (appropriate safeguards such as adequacy decisions and standard contractual clauses).
7. Cookies
Our website may use essential cookies required for the site to function, functional cookies that remember your preferences, and analytics/performance cookies that measure site usage. Non-essential cookies are used only with your explicit consent. You can manage your cookie preferences through your browser settings or delete cookies; however, blocking some cookies may affect certain functions of the site.
8. Retention Periods
We retain your personal data for as long as required by the purpose of processing and for the limitation/retention periods set out in applicable legislation:
| Data | Retention Period |
|---|---|
| Membership / account data | For as long as your membership continues, and thereafter for the periods set out in applicable legislation |
| Invoices and financial records | 10 years under the Tax Procedure Law and the Turkish Commercial Code |
| Communication / request records | A reasonable period after the request is resolved |
| Log / traffic records | The period prescribed by applicable legislation (e.g., Law No. 5651) |
Data whose retention period has expired is deleted, destroyed, or anonymized.
9. Data Security
To prevent unlawful processing of, access to, and loss of your personal data, we apply appropriate technical and administrative measures such as SSL/TLS encryption, access authorization, firewalls, regular backups, and an up-to-date software infrastructure. That said, please note that no data transmission over the internet is 100% secure.
10. Your Rights as a Data Subject
Under Article 11 of Turkey's data protection law (KVKK) and the GDPR, you have the following rights regarding your personal data:
- To learn whether your personal data is being processed and, if so, to request information about that processing,
- To learn the purpose of the processing and whether the data is used in accordance with that purpose,
- To know the third parties to whom your data is transferred, whether in Turkey or abroad,
- To request correction of incomplete or inaccurately processed data,
- To request deletion or destruction of your data (including the "right to be forgotten"),
- To request that corrections, deletions, and destruction be notified to the third parties to whom your data has been transferred,
- To request restriction of processing and the portability of your data (GDPR),
- To object to processing and to withdraw your consent at any time,
- To object to any adverse outcome resulting from the analysis of your data exclusively by automated systems,
- To request compensation for damages if you suffer harm due to unlawful processing.
11. Requests and Complaints
To exercise your rights, you can send your requests by email to info@comsuite.com.tr or in writing to our postal address above. In accordance with the "Communiqué on the Procedures and Principles of Applications to the Data Controller," your requests will be concluded within 30 days at the latest.
If your request is rejected or you find the response inadequate, you have the right to file a complaint with Turkey's Personal Data Protection Board. If you reside in the European Union, you also have the right to contact the competent data protection supervisory authority in your country.
12. Children's Data
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18, and if we become aware that such data has been processed, we will delete it as soon as possible.
13. Changes to This Policy
This Privacy Policy may be updated from time to time due to legislative changes or updates to our services. The current version is always published on this page, and we may notify you separately of any significant changes. You can follow the "Last updated" date at the top of the policy.
For any questions or requests regarding the protection of your personal data, you can reach us through our contact page or at info@comsuite.com.tr.