Privacy Notice

Last updated: 2 November 2026

This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform people who visit caphosting.net, create an account or purchase a service about how their personal data is processed. In case of any discrepancy, the Turkish version prevails.

1. Data Controller

ÇAP Teknoloji Danışmanlık ve Yazılım Hizmetleri San. Tic. Ltd. Şti. ("CAP Hosting")
Barış Mah. 5003 Cadde Tübitak Marmara Teknokent Kadir Has Binası No:139/B Gebze / Kocaeli, Türkiye
Email: [email protected] · Phone: +90 262 606 06 74
Tax ID: 2290645632

2. Personal Data We Process

• Identity: first and last name; Turkish ID number where required for e-invoicing.
• Contact: email address, phone and mobile number, address.
• Customer transactions: order, invoice, payment and service history; support tickets and correspondence; domain registrant (WHOIS) details.
• Financial: company name, tax office and tax number, payment amounts. CAP Hosting does not store full card numbers; for customers who choose to save a card, the token issued by the payment provider and the card's last 4 digits, brand and expiry date are kept.
• Transaction security: password (stored encrypted), security question, login records; IP address and port, country/city estimated from the IP, browser and device information (user agent), time zone.
• Service traffic data: access and traffic logs of hosting, email and server services (under Turkish Law No. 5651).
• Marketing: email and SMS marketing preferences, only where consent has been given.

Personal data contained in websites, databases and emails hosted by customers is outside the scope of this notice; the customer is the data controller for that data, and CAP Hosting acts only as a data processor providing hosting.

3. Purposes and Legal Grounds

• Creating accounts, taking orders, setting up and maintaining services, invoicing, collecting payments and sending renewal reminders: performance of a contract (KVKK Art. 5/2-c).
• Issuing invoices, retention under tax and commercial law, retention of traffic data as a hosting provider, responding to requests from competent authorities: compliance with a legal obligation (Art. 5/2-ç).
• Passing registrant details to the registrar and registry for domain registration: performance of a contract (Art. 5/2-c).
• Keeping accounts and systems secure, preventing fraud and abuse, blocking bot registrations: legitimate interest (Art. 5/2-f).
• Protecting our rights in disputes: establishment, exercise or protection of a right (Art. 5/2-e).
• Sending promotional and campaign messages: only with explicit consent (Art. 5/1). Not giving consent does not prevent you from using our services, and you can withdraw consent at any time.

4. How Data Is Collected

Personal data is collected electronically through the registration, order, contact and support forms on caphosting.net, the client area, email, phone and WhatsApp correspondence, and automatically during use of the site (cookies and server logs).

5. Recipients of Personal Data

Personal data may be shared, limited to the purposes above and only as necessary, with:

• In Türkiye: the payment provider (PayTR), banks, the domain registrar (DomainNameAPI) and TRABİS for ".tr" domains, the SMS provider (Netgsm), e-invoicing/accounting service providers, our financial advisor and legal advisors; and, upon request, competent public authorities and courts.
• Abroad:
  • Cloudflare, Inc. (USA) — content delivery and protection of the website against attacks; IP addresses and browser information pass through this infrastructure.
  • Google LLC (USA) — bot verification with reCAPTCHA on login and registration forms.
  • International domain registries and ICANN — registrant details for extensions such as ".com" and ".net".
  • Partner data centres in France and Germany — service details only for customers who purchase servers in these locations.
  Transfers abroad are made in accordance with the conditions of KVKK Art. 9 (appropriate safeguards, standard contracts, or occasional transfers necessary for the performance of a contract).

6. Retention Periods

• Invoices and accounting records: 10 years, as required by the Turkish Tax Procedure Law and Commercial Code.
• Contract and service records: 10 years from the end of the contract, the general statute of limitations.
• Traffic data: the period set by Law No. 5651 and its regulation (no less than one year and no more than two years).
• Marketing consents: until withdrawn; after withdrawal, for the period required by law for evidence purposes.

Data whose retention period has expired is deleted, destroyed or anonymised.

7. Data Security

CAP Hosting applies technical and organisational measures such as storing passwords in encrypted form, using HTTPS on all pages, restricting access rights, firewalls and access logging. Payment card details are processed by the payment provider.

8. Your Rights under KVKK

Under KVKK Art. 11, you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of processing and whether data is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data and, where legal conditions are met, its deletion or destruction; to request that these actions be notified to third parties to whom the data was transferred; to object to a result against you arising exclusively from automated analysis; and to claim compensation for damage caused by unlawful processing.

9. How to Apply

You can submit requests, together with information verifying your identity, in writing by post to the address above, with a secure electronic or mobile signature, or from the email address registered in our system to [email protected]. Requests are concluded free of charge within 30 days at the latest; if the action involves an additional cost, the fee set by the Personal Data Protection Board may apply.

10. Cookies

For details of the cookies used on our site, please see our Cookie Policy.

11. Changes

This notice may be updated in line with changes in legislation or in our data processing activities. The current version is always published on this page.