Privacy Policy

Privacy Policy

This Privacy Policy explains how the Kahven Benden platform collects, uses, and protects your personal data. We value your awareness of your rights under the Turkish Personal Data Protection Law (KVKK, Law No. 6698) and related regulations.

Last updated: March 22, 2026

Data Collected

We collect the following personal data when you use our platform:

  • Name and contact information (phone number, email address)
  • Payment information — credit card details are securely processed by iyzico and are not stored on our servers
  • Location data (to show nearby cafes)
  • Device and browser information
  • Platform usage data and transaction history

How We Use Your Data

Collected data is used for the following purposes:

  • Account creation and identity verification
  • Processing Benden orders
  • Executing payment transactions
  • Providing customer support
  • Improving platform experience
  • Fulfilling legal obligations
  • Security and fraud prevention
  • Service-related notifications and announcements

Cookies and Tracking Technologies

Our platform uses cookies and similar technologies to improve your experience and analyze our services. Session cookies are essential for platform functionality. Analytics cookies help us understand how the platform is used. You can manage your cookie preferences through your browser settings.

Third-Party Sharing

Your personal data may be shared with the following third parties:

  • iyzico (for payment processing)
  • Partner cafes (minimum information necessary for order delivery)
  • Analytics service providers (anonymous usage data)
  • Authorized authorities when legally required

Your personal data is never sold to third parties for advertising purposes.

Data Security

Industry-standard technical and administrative measures are implemented to ensure the security of your personal data. All data transfers are protected with SSL/TLS encryption. Payment information is processed through PCI DSS compliant infrastructure. Our systems undergo regular security audits.

Data Retention

Your personal data is retained for the duration required by the purpose of collection and within the framework of legal obligations. When you close your account, data that has exceeded the legal retention period is securely deleted or anonymized.

Your Rights Under KVKK

Under KVKK (Law No. 6698), you have the following rights:

  • Learning whether your personal data is being processed
  • Requesting information about the processing
  • Learning the purpose of processing and whether data is used in accordance with its purpose
  • Learning about third parties to whom data is transferred domestically or abroad
  • Requesting correction of incomplete or inaccurate data
  • Requesting deletion or destruction under the conditions set forth in Article 7 of KVKK
  • Requesting that corrections or deletions be notified to third parties
  • Objecting to outcomes produced by automated data analysis that are against your interests

Children's Privacy

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from individuals under 18. If we become aware of such a situation, the relevant data will be immediately deleted.

Policy Changes

This Privacy Policy may be updated from time to time. Significant changes will be communicated through our platform and via email. We recommend reviewing the current policy regularly.

Contact and Data Requests

To exercise your rights under KVKK or for questions about your personal data, you can reach us at [email protected]. Your requests will be evaluated and responded to within legal deadlines.