Last updated: 2 November 2026

This English version is provided for information. In case of any discrepancy, the Turkish version prevails.

1. Parties

This Terms of Service Agreement (the "Agreement") is concluded electronically between ÇAP Teknoloji Danışmanlık ve Yazılım Hizmetleri San. Tic. Ltd. Şti., operating under the "CAP Hosting" brand ("CAP Hosting"), and the natural or legal person who creates an account or purchases a service on caphosting.net (the "Customer"), upon the Customer's electronic acceptance.

• Address: Barış Mah. 5003 Cadde Tübitak Marmara Teknokent Kadir Has Binası No:139/B Gebze / Kocaeli, Türkiye
• Phone: +90 262 606 06 74
• Email: [email protected]
• Tax ID: 2290645632

2. Subject and Scope

This Agreement sets out the terms for web hosting, domain registration and management, business email, SSL certificates, virtual and dedicated servers (VDS/VPS, dedicated), bulk SMS and other digital services provided by CAP Hosting (the "Service"). The resources, price, term and location of each service are shown on the product page and in the order summary; this information forms an integral part of the Agreement.

Where the Customer is a consumer, Turkish Consumer Protection Law No. 6502 and the Distance Contracts Regulation also apply; nothing in this Agreement limits the statutory rights of consumers.

3. Account and Security

• The Customer confirms that the information provided during registration and ordering is accurate and up to date, and is responsible for the consequences of incorrect billing or domain registrant details.
• The Customer is responsible for keeping the credentials of the client area, control panel (CWP), email and servers confidential. Actions performed with these credentials are deemed to be performed by the Customer. The Customer must notify CAP Hosting immediately of any unauthorised use.
• CAP Hosting may require a password reset, additional verification or temporary access restrictions for security reasons.

4. Service Activation

Services are activated, largely automatically, once payment is confirmed. Domain registrations take effect when approved by the relevant registry; dedicated servers are delivered within the time stated on the order page, subject to hardware preparation. The Customer is informed of any delay caused by technical issues or the registry.

5. Fees, Payment and Renewal

• Services are prepaid. Payment can be made by credit/debit card (via PayTR) or by bank transfer. Card details are not stored on CAP Hosting servers; they are processed by PayTR.
• Prices are as shown at the time of order; taxes are shown separately at checkout. CAP Hosting may change prices for the future; changes do not affect a period already paid for and are notified to the Customer before the renewal period.
• Renewal invoices are issued before the service expiry date, and reminders are sent by email 10, 5 and 1 days before the due date. If the Customer has saved a card and agreed to automatic payment, the renewal fee is charged to that card; the Customer can withdraw this consent at any time from the client area.
• A service that is not paid by its due date is suspended 4 days after the due date and cancelled 15 days after the due date. Data of a cancelled service may be permanently deleted and may not be recoverable.
• Expired domain names enter grace and redemption periods under the rules of the registry; during these periods renewal may incur additional fees, or the domain may be registered by someone else.

6. Acceptable Use

The Customer agrees to use the Service in compliance with the laws of the Republic of Türkiye and of the country where the service is located. The following are strictly prohibited:

• hosting or distributing unlawful, obscene or hateful content, or content that infringes third parties' intellectual property, personality or privacy rights;
• phishing, fraud, malware, botnets, open proxies/relays, unauthorised scanning and attacks (DDoS, brute force, etc.);
• sending unsolicited bulk email (spam) or commercial electronic messages without the recipient's consent;
• cryptocurrency mining, or continuously using the shared resources of a shared server (CPU, memory, disk I/O, email sending limits) to an extent that affects other customers;
• publishing unlicensed software, pirated content or illegal betting/gambling content.

On shared hosting, package features are provided under fair use; "unlimited" refers to the ordinary use of a website and does not cover use as a backup archive or file storage.

7. Bulk SMS Service

• Under Turkish Law No. 6563 on the Regulation of Electronic Commerce and its regulation, the Customer must obtain prior consent from recipients of commercial electronic messages and register these consents in the Message Management System (İYS).
• The Customer is responsible for the accuracy of the documents required for sender ID (originator) registration.
• The Customer is liable for all administrative fines and claims arising from the content of messages sent and the lawfulness of recipient lists. Unused SMS credits are not refundable in cash.

8. Domain Names

• Domain names are registered through an accredited registrar and are subject to the rules of ICANN and of the registry of the relevant extension (TRABİS for ".tr" domains). The Customer agrees to comply with these rules.
• A domain is registered in the name of the person shown as the registrant. The Customer is responsible for the accuracy of registrant details; incorrect details may lead to the domain being suspended.
• Registration, renewal and transfer operations cannot be reversed once performed by the registry.
• Domain disputes (UDRP, TRABİS dispute resolution procedures, etc.) are resolved under the rules of the relevant authority, and CAP Hosting implements their decisions.

9. Server Services (VDS/VPS and Dedicated)

• Servers are hosted in partner data centres in Türkiye, France or Germany; the location is selected by the Customer when ordering.
• On unmanaged servers, the operating system, software, security updates and backups are the Customer's responsibility. If a management service has been purchased separately, its scope is as stated on the product page.
• In the event of attacks, spam or abuse complaints originating from a server, CAP Hosting may temporarily disconnect the server from the network to protect it.

10. Backups and Data Responsibility

The Customer is responsible for taking regular, up-to-date backups of their own data. CAP Hosting may take infrastructure backups for service continuity; however, these backups do not guarantee that Customer data can be restored and are not committed as part of the service. Where a package explicitly includes a backup service, the terms on the product page apply.

11. Customer Data and Personal Data Protection

The Customer's account and billing information is processed in accordance with the Privacy Notice prepared under the Turkish Personal Data Protection Law (KVKK).

The Customer is the data controller of personal data contained in content uploaded to the Service (website files, databases, emails, etc.); for this data, CAP Hosting acts only as a data processor providing hosting. CAP Hosting does not access such content except to provide the service, for technical support, to prevent security breaches, or where legally required.

12. Hosting Provider Obligations

CAP Hosting is a hosting provider under Turkish Law No. 5651 and is not obliged to monitor the content it hosts or investigate whether unlawful activity is taking place. Upon notification of unlawful content or an order from a competent authority, it may remove the content or suspend the service. As required by law, traffic data is retained for the period set by the legislation, which is no less than one year and no more than two years.

13. Suspension and Termination

• The Customer may end a service by not renewing it at the end of the term or by submitting a cancellation request from the client area.
• CAP Hosting may suspend a service without prior notice in the event of a breach of sections 6 or 7, non-payment, detection of false information or fraudulent payment, or a situation threatening other customers or the infrastructure. In the case of serious or repeated breaches, the Agreement may be terminated.
• Where the reason for suspension or termination can be remedied, the Customer is informed and given a reasonable period to remedy it.

14. Right of Withdrawal and Refunds

• A consumer Customer has the right to withdraw from the contract within 14 days of its conclusion without giving any reason. Notice of withdrawal can be sent by email to [email protected] or through a support ticket.
• However, under Article 15 of the Distance Contracts Regulation, the right of withdrawal does not apply to services performed instantly in electronic form or to services whose performance has begun with the consumer's consent before the withdrawal period expires. By completing the order, the Customer confirms that they request immediate activation of the service and have been informed that they will therefore lose the right of withdrawal.
• Accordingly, domain registrations, renewals and transfers, SSL certificates, software licences and SMS credits are non-refundable once the transaction has been performed.
• For hosting and server services, except where required by law and in the case below, no refund is made for the unused period when a service is cancelled before the end of its term.
• If a service cannot be provided for a reason attributable to CAP Hosting, the fee for the unusable period is refunded. Refunds are made to the original payment method within 14 days.

15. Service Continuity and Limitation of Liability

• CAP Hosting takes reasonable care to keep the service uninterrupted and secure. Planned maintenance is announced in advance wherever possible.
• CAP Hosting is not liable for interruptions caused by force majeure (natural disasters, pandemics, war, general power or internet outages, cyber-attacks, orders of public authorities, etc.), or by partner data centres and registries.
• Except for intent and gross negligence, which cannot be limited by law, CAP Hosting is not liable for indirect damages, loss of profit or loss of data, and its liability for direct damages is limited to the amount paid by the Customer for the relevant service in the last 12 months. This limitation does not affect consumers' statutory rights.

16. Notices

Notices between the parties are sent to the email address registered in the Customer's account, by SMS or via the client area. The Customer must keep their contact details up to date; notices sent to an outdated address are deemed valid.

17. Changes to the Agreement

CAP Hosting may update this Agreement. Material changes are notified to the registered email address at least 15 days before they take effect. If the Customer does not accept a change, they may cancel their service before the change takes effect, in which case the fee for the unused period is refunded.

18. Governing Law and Disputes

This Agreement is governed by Turkish law. Consumer Customers may apply to the Consumer Arbitration Committee at their place of residence or where the transaction took place, within the monetary limits set annually by the Ministry of Trade, and to the Consumer Courts for disputes above these limits. For disputes with merchant Customers, the Courts and Enforcement Offices of Gebze have jurisdiction; for merchant Customers, CAP Hosting's records constitute conclusive evidence under Article 193 of the Turkish Code of Civil Procedure.

19. Entry into Force

This Agreement enters into force when the Customer gives electronic acceptance while creating an account or placing an order, and remains valid for as long as the Customer's services continue. The current text is always available on caphosting.net; a copy is sent by email on request.

Last updated: 2 November 2026

This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform people who visit caphosting.net, create an account or purchase a service about how their personal data is processed. In case of any discrepancy, the Turkish version prevails.

1. Data Controller

ÇAP Teknoloji Danışmanlık ve Yazılım Hizmetleri San. Tic. Ltd. Şti. ("CAP Hosting")
Barış Mah. 5003 Cadde Tübitak Marmara Teknokent Kadir Has Binası No:139/B Gebze / Kocaeli, Türkiye
Email: [email protected] · Phone: +90 262 606 06 74
Tax ID: 2290645632

2. Personal Data We Process

• Identity: first and last name; Turkish ID number where required for e-invoicing.
• Contact: email address, phone and mobile number, address.
• Customer transactions: order, invoice, payment and service history; support tickets and correspondence; domain registrant (WHOIS) details.
• Financial: company name, tax office and tax number, payment amounts. CAP Hosting does not store full card numbers; for customers who choose to save a card, the token issued by the payment provider and the card's last 4 digits, brand and expiry date are kept.
• Transaction security: password (stored encrypted), security question, login records; IP address and port, country/city estimated from the IP, browser and device information (user agent), time zone.
• Service traffic data: access and traffic logs of hosting, email and server services (under Turkish Law No. 5651).
• Marketing: email and SMS marketing preferences, only where consent has been given.

Personal data contained in websites, databases and emails hosted by customers is outside the scope of this notice; the customer is the data controller for that data, and CAP Hosting acts only as a data processor providing hosting.

3. Purposes and Legal Grounds

• Creating accounts, taking orders, setting up and maintaining services, invoicing, collecting payments and sending renewal reminders: performance of a contract (KVKK Art. 5/2-c).
• Issuing invoices, retention under tax and commercial law, retention of traffic data as a hosting provider, responding to requests from competent authorities: compliance with a legal obligation (Art. 5/2-ç).
• Passing registrant details to the registrar and registry for domain registration: performance of a contract (Art. 5/2-c).
• Keeping accounts and systems secure, preventing fraud and abuse, blocking bot registrations: legitimate interest (Art. 5/2-f).
• Protecting our rights in disputes: establishment, exercise or protection of a right (Art. 5/2-e).
• Sending promotional and campaign messages: only with explicit consent (Art. 5/1). Not giving consent does not prevent you from using our services, and you can withdraw consent at any time.

4. How Data Is Collected

Personal data is collected electronically through the registration, order, contact and support forms on caphosting.net, the client area, email, phone and WhatsApp correspondence, and automatically during use of the site (cookies and server logs).

5. Recipients of Personal Data

Personal data may be shared, limited to the purposes above and only as necessary, with:

• In Türkiye: the payment provider (PayTR), banks, the domain registrar (DomainNameAPI) and TRABİS for ".tr" domains, the SMS provider (Netgsm), e-invoicing/accounting service providers, our financial advisor and legal advisors; and, upon request, competent public authorities and courts.
• Abroad:
  • Cloudflare, Inc. (USA) — content delivery and protection of the website against attacks; IP addresses and browser information pass through this infrastructure.
  • Google LLC (USA) — bot verification with reCAPTCHA on login and registration forms.
  • International domain registries and ICANN — registrant details for extensions such as ".com" and ".net".
  • Partner data centres in France and Germany — service details only for customers who purchase servers in these locations.
  Transfers abroad are made in accordance with the conditions of KVKK Art. 9 (appropriate safeguards, standard contracts, or occasional transfers necessary for the performance of a contract).

6. Retention Periods

• Invoices and accounting records: 10 years, as required by the Turkish Tax Procedure Law and Commercial Code.
• Contract and service records: 10 years from the end of the contract, the general statute of limitations.
• Traffic data: the period set by Law No. 5651 and its regulation (no less than one year and no more than two years).
• Marketing consents: until withdrawn; after withdrawal, for the period required by law for evidence purposes.

Data whose retention period has expired is deleted, destroyed or anonymised.

7. Data Security

CAP Hosting applies technical and organisational measures such as storing passwords in encrypted form, using HTTPS on all pages, restricting access rights, firewalls and access logging. Payment card details are processed by the payment provider.

8. Your Rights under KVKK

Under KVKK Art. 11, you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of processing and whether data is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data and, where legal conditions are met, its deletion or destruction; to request that these actions be notified to third parties to whom the data was transferred; to object to a result against you arising exclusively from automated analysis; and to claim compensation for damage caused by unlawful processing.

9. How to Apply

You can submit requests, together with information verifying your identity, in writing by post to the address above, with a secure electronic or mobile signature, or from the email address registered in our system to [email protected]. Requests are concluded free of charge within 30 days at the latest; if the action involves an additional cost, the fee set by the Personal Data Protection Board may apply.

10. Cookies

For details of the cookies used on our site, please see our Cookie Policy.

11. Changes

This notice may be updated in line with changes in legislation or in our data processing activities. The current version is always published on this page.