Privacy Policy

This is an informational translation; the Turkish version prevails.

Last updated: October 14, 2026 · Version: 2026-10-14

This Privacy Policy explains how your personal data is collected, for what purposes it is used, with whom it is shared, how it is protected and how long it is retained when you use the Supomp website (supomp.com) and the Supomp Android app, make purchases, or correspond with our team or with our AI assistant İkra AI in the support chat. The legal grounds under Law No. 6698 on the Protection of Personal Data ("KVKK") and the details of your rights are set out in the Privacy Notice (KVKK).

1. Data controller and contact

Supomp is İkra Hidro Pompa's online store. The supomp.com website and the Supomp Android app are operated and published by İkra Hidro Pompa. The data controller with respect to your personal data is İkra Hidro Pompa, whose details are set out below (referred to in this text as "Supomp" or "we").

• Trade name: Mehmet Vehbi Kamacı – İkra Hidro Pompa (sole proprietorship; brand: Supomp)
• Tax office and tax number: Uludağ · 4941110888
• Address: Celal Bayar Caddesi, Sakarya Mahallesi No: 74/A, Gazcılar, Osmangazi / Bursa
• Phone: 0531 565 11 25
• E-mail: ikrahidropomp@gmail.com

You can send your privacy-related questions and applications to the addresses above or use the contact form. Application methods are explained in the Privacy Notice (KVKK).

2. Scope

This policy covers the supomp.com website and the Supomp Android app. The Android app displays the supomp.com site within the app; therefore, the same data is processed in the app for the same purposes as on the site. App-specific permissions and notifications are described in section 9 and on the Mobile App, Permissions and Notifications page.

Other services used on our site or linked from our site (for example PayTR, which provides the payment form, Google Maps, YouTube and WhatsApp) have their own privacy rules; when you use these services, those rules also apply.

3. The data we collect and how we collect it

We obtain your data directly from you when you fill in forms, place an order or write to us; by automated means while you use the site and the app; and, for information such as the payment result, from the payment institution. Information you send us by phone, e-mail and WhatsApp is collected by non-automated means.

Membership and account

• Your e-mail address and password. Your password is not stored by us in plain text but as an irreversible hash.
• The first name, last name and phone number in your profile. For individual membership, your profile name is initially the part of your e-mail address before the "@" sign; you can change this name under My Account › My user information.
• Your profile photo (optional): the photo you upload so that we can recognize you in support conversations is cropped and resized on your device before being stored; the location and device information (EXIF) in the photo is removed in the process. A customer's photo is seen only by the customer and the Supomp support team, and a team member's photo is seen only by the customers they correspond with. You can remove your photo from My Account at any time; when you remove it or delete your account, the file is permanently deleted from our server.
• The time you verified your e-mail address, your account type, registration information, the time you accepted the Membership and Terms of Use, and the version of the terms.
• Your preferences: read-receipt and online-status settings in the support chat and your notification preferences.
• Your address book: address title, first name and last name, phone, province, district, full address, postal code and, if you have entered them, company name, tax office, tax identification number or Turkish ID number. If your address book is empty, the address you enter at your first order is automatically saved to your address book.
• Your cart, your favorites and the products you have recently browsed.

Shopping without membership (anonymous session)

The first time you tap or click a button, press a key or scroll a page on the site or the app, we open an anonymous session with a random identifier that does not contain your name or e-mail address, so that your cart and favorites are not lost even if you are not a member. With this identifier, your cart, favorites and recently browsed products, together with the technical records required for session security (the time the session was opened and renewed, IP address and browser information), are kept on our server. In an anonymous session as well, a statistics record is kept only if you consent in the cookie notice. This processing is based on the establishment and performance of the contract (KVKK art. 5/2-c) and on our legitimate interest in session security (KVKK art. 5/2-f); it is not used for marketing purposes.

• When you become a member, your anonymous identifier is converted into your account. When you log in to your existing account, your cart, favorites and recently browsed products are transferred to your account and the anonymous identifier is deleted. Orders, price and stock alerts, product questions and contact form messages are linked to your account only if they were submitted with your account's e-mail address; the others continue without being linked to the account, under the e-mail address with which they were submitted.
• When payment is received for an order you placed without becoming a member, we may send, at most once for that order, a non-promotional service e-mail to the e-mail address you entered in the order. Using the single-use link in the e-mail, which is valid for 7 days, you can set a password and create an account with the same e-mail address or, if you already have an account with this address, log in and add the order to your account. The account is created only if you open the link and set your password yourself; if you ignore the e-mail, no account is opened and your order is not affected. If you open the link in the browser in which you placed the order, your anonymous identifier is converted into your account; if you open it on another device or browser, or add the order by logging in to your existing account, only orders, price and stock alerts, product questions, contact form messages and newsletter subscription submitted with that e-mail address are linked to your account, and your cart and favorites are transferred when you log in with this account on the device on which you placed the order. The link itself is not stored; only its one-way hash is kept. The basis for this e-mail is our legitimate interest in enabling you to track your order from your account (KVKK art. 5/2-f); if you open the account, a membership relationship is established (KVKK art. 5/2-c).
• If you do not become a member, the anonymous identifier and the data linked to it are automatically deleted: 7 days after creation if never used; 30 days after last use if there is an entry in the cart, favorites or price and stock alerts or if membership verification is pending; or 180 days after the last action if an order has been placed (provided that you have no pending order). Your orders are kept as guest orders for the statutory period. The technical records of the anonymous session are kept for a maximum of 90 days.
• You can sever your link with this identifier at any time by deleting your browser's site data or, on Android, the app's data; if you want the data to be deleted immediately, you can write to us.

Business account application

Company name, authorized person's first name and last name, tax office, tax identification number or, for sole proprietorships, Turkish ID number, phone, city, field of activity, billing address and your note; the outcome of the application, any rejection or suspension reason and the business discount assigned to you. If you made the application while becoming a member, this information is also included in your account's identity verification record and in the session information on the device on which you logged in.

Order, quote and delivery

• First name and last name, e-mail address, phone number (mandatory for orders), delivery and billing address; if you have entered them for the invoice, company name, tax office, tax identification number or Turkish ID number.
• Order number, the products you ordered, amounts, the coupon you used, payment method and payment status, your order note, shipping company and tracking number, and the status history of the order.
• If you placed the order as a guest, the access key generated to allow you to track your order.
• The salted hash of the IP address of the connection from which you placed the order.
• Notes kept by our team regarding your order and customer record, which can be seen only by the team; copies of withdrawal notices, defect notifications and complaints you have communicated through the support chat and transferred to the order record.
• When you request a price quote: the products and quantities for which the quote is requested, your note, the unit price offered specifically to you, the quote's validity period, installment limit, any down payment and the remaining payment plan, and our employee who prepared the quote.
• Service area check: for services provided only in certain provinces, such as installation, when you tap "Check by my location" (or if location permission has already been granted), the location of your device is used only to determine the province you are in. The province is determined entirely on your device using the province border data that ships with our site; your location is not sent to our servers or to third parties, and is not recorded. If you do not grant permission, the service area is checked at the payment step based on the province of your delivery address. You can revoke the location permission at any time from your browser or phone settings.
• Information relating to payment is explained in section 6.

Support and contact

The data processed in the support chat is explained in section 7, and information about İkra AI is explained in section 8. In the contact form, we record your name, e-mail address, optional phone number, subject and message, the address of the page from which you submitted the form, and the hash of your IP address. When you contact us by e-mail, phone or WhatsApp, the information you provide is processed through these channels.

Review and question

• When you write a review: your profile name, your rating, your comment, the photos you add, the time you accepted the review rules, and whether or not you purchased and received the product from us (for the "Verified purchase" mark).
• When you ask a product question: the name you entered in the question form, your e-mail address, your question and the time you accepted the question rules.
• When you mark a review as "helpful": your account ID, or, if you are not a member, a random identifier generated in your browser at the moment you vote and used solely for this purpose, in order to prevent the same person from voting multiple times.
• When you report a review or question using the "Report" link: your reason for reporting, your optional explanation and, if you are logged in, your account ID.

Data collected automatically

• Connection and security information: When you connect to the site and the application, your IP address, browser and device information and request information (the requested address and the time) are recorded in the technical logs of our servers and infrastructure providers. During member logins and password operations, the time, IP address and browser information are written to the logs of our authentication system. To prevent abuse, we keep rate-limit records for 2 hours; these records contain a hash of your IP address or your account ID.
• Statistics and error logs (only if you allow them): If you permit statistical measurement in the cookie notice or in the cookie preferences, the following are recorded: a random identifier specific to your device, a session identifier, the addresses of the pages you visit (the query part of the address is not recorded), the address of the site that referred you to our site, the products and categories you view, your search terms, your cart, checkout and order steps, interactions such as clicks and shares, campaign tags and the source of the ad click (for example Google or Facebook; the click ID itself is not recorded), device type, operating system and browser name, site errors and a hash of your IP address. If you are logged in, these records are linked to your account and the last activity time on your account is updated at most once every 5 minutes; this time may be seen by our support team. If you do not give permission, these records are not kept and no statistics identifier is created. Details are in section 10.

4. For what purposes do we use your data?

• To open your member account, verify your identity and manage your account.
• To store your cart and favorites when you shop without being a member (anonymous session).
• To take your order, conclude and perform the distance sales agreement, deliver the product; to carry out withdrawal, return, exchange and warranty processes.
• To collect your payment, carry out installment and down payment transactions, and process payment refunds.
• To issue invoices, keep accounting and commercial records, and fulfill retention obligations under the legislation.
• To evaluate your business account application, apply business pricing and, when you request, prepare a special price offer for you.
• To answer your questions, requests and complaints received via support chat, contact form, e-mail, telephone and WhatsApp; to reply with İkra AI outside working hours.
• To review, publish and answer reviews and questions, and to review reported content.
• To send transactional notifications such as order status and support responses.
• To ensure account and system security, to prevent fraud and abuse, and to make backups so that data is not lost.
• If you have given permission, to measure how the site and the application are used and to fix errors.
• To protect our rights in legal disputes and to respond to requests from authorized institutions.

The legal basis for each purpose is shown in a table in the Privacy Notice (KVKK). We do not send campaign e-mails, SMS or campaign notifications; if in the future we wish to send them, we will first obtain your separate consent. We do not sell or rent your data and do not give it to others for advertising purposes. No advertising is displayed on the site and the application; no ad network tracking tools are used.

5. With whom do we share your data?

We share your data only with the recipients listed below and only for the purposes stated in the table.

Recipients abroad

As a safeguard for transfers of personal data to recipients abroad, the standard contracts announced by the Personal Data Protection Board pursuant to Article 9 of the KVKK are used as the basis. The process of signing these contracts and notifying the Personal Data Protection Authority within 5 business days from the date of signature is ongoing; the notification dates of completed contracts are shown separately in this section. We use some of these services through our technical service provider, as its sub-processor. Onward transfers to sub-processors used by the recipients in providing their services are subject to the same safeguards. We do not request your explicit consent for transfers abroad. Data is transmitted to the services shown in the table as "Operation initiated by you" only when you choose to use that service and within the scope of the operation you initiate.

Recipients in Türkiye

Your orders, account and address details, business account applications, and support chat can be viewed by our employees who have administrator and editor privileges as required by their duties. Statistics records are viewed only by our fully authorized administrator.

6. Your card information and payments

• Card payments: You enter your card information into the secure payment form shown on our checkout page, which belongs to the payment institution PayTR. Your card number, expiration date, and security code are transmitted directly to PayTR; Supomp does not see or store this information. Your bank may request additional verification during payment (for example, a 3D Secure password).
• Information we transmit to PayTR: For receiving the payment and for PayTR's security checks: your IP address, email address, full name, billing address, phone number, the name, price, and quantity of the products in your cart (including shipping), the payment amount, and the maximum number of installments allowed.
• Information we receive from PayTR: Transaction number, payment result, payment type, amount paid (including any installment surcharge), number of installments, and error code.
• Quote payment with down payment: The down payment and the remaining balance are collected as separate payments; the above information is processed in each payment.
• Bank transfer/EFT and cash on delivery: These payment methods are not accepted for orders placed on the site. If you make a payment to our bank account under a quote prepared specifically for you, your payment is matched with your quote; you can send the receipt via the support chat or by email.

Because the payment form belongs to PayTR, PayTR may use its own cookies on this form. In the Android app, third-party cookies are allowed within the app so that the card payment form and your bank's verification screen can work. You can learn how PayTR processes data from PayTR's own privacy and information notices.

7. Support chat

After signing in as a member, you can write to the Supomp support team from My Account › Support messages or using the "Ask Support" buttons on product and order pages. The support chat is available to members who have verified their email address.

For orders you place without becoming a member or without signing in, you can open an order chat tied only to that order using the "Send message" button in the "Need help?" section on your order page. For orders placed with a membership account whose email address has not yet been verified, this button likewise opens only an order chat tied to that order instead of a support chat. The order chat is accessed from the browser session in which you placed the order or from the order page opened via the link in your order email; a browser that enters the chat through this link remains linked to the chat for 30 days from the last time it uses the link. Because your order link provides access to your order and your order chat, do not share this link with others. When the support team replies to your order chat and you do not read the reply within a few minutes, we may send a notification reading "Your message has been replied to" (without the message content) to the email address you provided in the order (at most once every 15 minutes per chat). In the order chat, the support team sees your name, email address, phone number, and your order information from the order record. İkra AI does not reply to order chats.

Who can see your chat?

Your chat is viewed by you and Supomp's authorized support team (our employees with administrator and editor privileges). Outside of business hours, replies may be provided by our AI assistant İkra AI; in that case your chat is processed on Anthropic (USA) infrastructure to generate a response (section 8). Other customers cannot see your chat, your name, or your online status.

To be able to help you, during the chat the support team may see your name, email address, phone number, whether you are a business customer, your membership date, your last activity time, your recent orders, and a summary of your cart; they can add internal notes to the chat that only the team can see. Team members' viewing of chats and their actions on chats, such as deletion, assignment, status change, and quote operations, are logged without message content.

What information is processed?

• The messages you write and the photos, videos, PDF documents, and voice messages you send (voice messages up to 10 minutes).
• Product, order, and quote cards shared in the chat.
• Your location: only when you tap "Send location," your current location (latitude, longitude, and accuracy margin) along with the optional location description you write. Your location is not tracked in the background.
• The times when messages are sent, delivered, and read.
• The information that you are online and typing while on the chat screen (shown instantly, not stored).

Photos are downscaled on your device before being sent; during this, the location and device information (EXIF) within the photo are removed. Some image formats your device cannot process (for example, some HEIC files) may be sent as is. From My Account › Settings › Chat, you can turn off the read receipts and the display of your online status; when turned off, you will likewise not see the support team's read receipts and online information. When you hide your online status, your last-seen time is also not shown to the support team.

How is it stored?

Messages and files are stored, together with the site's other data, on our servers in an area with restricted access. Files are not published at a publicly accessible address; they are shown only to the parties of the chat through links valid for at most 1 hour. We do not sell your chat and do not use it for advertising; Supomp does not use your chat to train AI models. How İkra AI's service provider Anthropic processes this data is set out in section 8.

The map on the location card

The small map image of the shared location is generated from OpenStreetMap map tiles. These tiles are fetched via our server; your name, account, or IP address is not transmitted to OpenStreetMap. When you tap the "Open in map" link on the map, the location opens in Google Maps; in that case the location information is transmitted to Google and Google's privacy policy applies.

How long is it stored and how is it deleted?

• Chat messages and files, including messages written by İkra AI, are stored for 2 years from the date they are sent and are automatically deleted when this period expires. Chat records containing no messages are deleted after 30 days.
• When you delete a message you have sent via "Delete," the message text is deleted immediately, and its attachment is also permanently deleted from the server within 10 minutes at the latest; in the chat, "This message has been deleted" appears in its place.
• "Clear chat" only hides the history on your screen and deletes the summary that İkra AI keeps for this chat; the cleared history is not sent to İkra AI either. The support team's records are kept for the period stated above. If you want your chat to be deleted entirely, you can write to the support team or use the contact details in section 1. Order chats do not have a "Clear chat" option; you can request deletion of the history through the same channels.
• Withdrawal notices, defect notifications, and complaints you transmit through the chat are transferred to the relevant order record and, as required by legislation, are stored for 3 years; these records are retained even if you delete your chat or your account.
• When you delete your account, your support chat, the order chats of orders tied to your account, and all files you have sent are permanently deleted. Order chats of orders placed without membership are deleted at the end of the 2-year period above; you can request earlier deletion using the contact details in section 1.
• The support team may remove from the chat content that is unlawful or that infringes the rights of others, as well as content you ask to be removed.
• The support team's chat action logs (which do not contain message content) are kept for 2 years.

What you should not share in the chat

Do not write in the chat sensitive personal data such as card information, passwords, verification codes, or health information, or personal information belonging to others. We do not need this information; if you share it by mistake, you can delete the message or write to us for it to be deleted.

Legal basis

Your personal data in the support chat is processed on the legal grounds of the conclusion and performance of the contract (KVKK art. 5/2-c) and our legitimate interest in carrying out customer service and responding to your requests (KVKK art. 5/2-f).

8. İkra AI (artificial intelligence assistant)

Outside our support team's working hours, during the hours set by management (by default every day 21:00–09:00, Türkiye time), your messages in the support chat may be answered by our artificial intelligence assistant called İkra AI. When İkra AI responds, this is indicated in the chat header and above the message input area; İkra AI's messages are shown under the name "İkra AI". İkra AI is an artificial intelligence assistant; its answers may contain errors. Your messages are processed on the infrastructure of Anthropic (USA) to generate responses.

During the hours when İkra AI responds, before you send your first message in a chat, an information banner is shown above the message input area; your messages are not sent to İkra AI unless you tap "Got it". If you select "Leave to the team" or send a message without making a selection, your message is not sent to İkra AI and is answered by our team during working hours.

• Provider: İkra AI runs on the Claude artificial intelligence models of Anthropic PBC (USA). Anthropic is a sub-processor processing data on our behalf through our technical service provider.
• Information transmitted: Your chat history: the most recent messages in this chat (at most 300 messages, each at most 600 characters) and, when your question requires it, the results of a search within older messages of the same chat (at most 10 messages per search, each at most 300 characters). This history includes messages our support team has written to you, location messages you have shared (latitude, longitude and description) and the titles of chat cards; the team's internal notes are not included. Messages before the moment you first tapped "Got it" in this chat, messages you sent via "Leave to the team" and the history you cleared via "Clear chat" are not sent. In addition, the photos you send, a short summary of the chat, your first name and whether you are a business customer; when your question requires it, information about your own orders (order number, date, status, amounts, coupon, products, notes visible to you, courier company and tracking number, delivery province and district), your account summary (partially masked e-mail address, membership date, business status and discount, number of orders, valid quotes, number of saved addresses, default province and district) and the products in your cart are transmitted.
• Information not transmitted: The content of voice messages, videos and documents; your phone number; your full e-mail address; your open address; the order access key; payment records; your IP address and its summary; the team's internal notes. Since anything you write in the chat may be transmitted for the response, do not type card information, passwords or verification codes in the chat.
• What it can do: Provide information about products, stock and prices; show product and selection cards; answer your questions about the status of your own orders and your account; only when you explicitly request, add products to your cart and create a price quote request; hand the matter over to the support team.
• What it cannot do: It does not place orders, take payments, modify or cancel your order, or set special prices or discounts for you. It hands over your return, cancellation and complaint requests to the support team. It cannot listen to voice messages, watch videos or open documents. You always complete the purchase yourself.
• Accuracy: Regarding price, stock, delivery time and order amount, the information shown on product cards, in your cart and on the order summary prevails. Your legal rights arising from the information provided by İkra AI are reserved.
• Agent: It is enough to write that you want to speak with an agent (for example, "agent"); İkra AI hands the matter over to the team and the team gets back to you in this chat during working hours. The support team sees İkra AI's responses and can take over the chat at any time.
• Report a response: You can report an İkra AI response you find incorrect or inappropriate to our team via "Report response" in the message menu.
• Automated decision: İkra AI does not make any decision about you that produces legal effects or significantly affects you.
• Retention: The temporary model history kept to generate a response is deleted when the chat has been idle for 1 hour and in any case within 1 day at the latest. The short chat summary that İkra AI keeps to remember the previous conversation is deleted when you clear the chat, when the chat or your account is deleted, and is retained for at most 2 years. The messages written by İkra AI are kept as part of your chat for the same period (2 years) as the other messages. Records kept for usage and cost tracking, which do not contain message content (customer identifier, operation duration, amount of processed text and cost), are retained for 400 days; if you delete your account, the customer identifier in these records is removed. How long the data transmitted to Anthropic is retained at Anthropic is stated in section 9 of the İkra AI page.
• Legal basis and transfer abroad: This processing is based on performance of the contract and responding to your support request (KVKK art. 5/2-c) and on our legitimate interest in providing support outside working hours (KVKK art. 5/2-f). Since Anthropic is located in the USA, this processing constitutes a transfer abroad; the transfer safeguard is explained in section 5.

Details: İkra AI — Artificial Intelligence Assistant.

9. Mobile application, permissions and notifications

The Supomp Android application displays the supomp.com site inside the app; your account, orders and chat are the same as on the site. No advertising is shown in the app; no advertising identifier and no third-party analytics or advertising software are used. Google's Firebase service is used only to deliver notifications; Firebase's statistics feature is not used.

The app does not request device permissions all at once at startup; each permission is requested only when you actually use the related feature, after briefly explaining why it is needed:

• Camera: when you want to take a photo or video in the support chat or in your review.
• Microphone: when you press the microphone button to record a voice message in the support chat.
• Location: when you tap "Send location" in the support chat, only to send your current location once; when you tap "Check by my location", to check the service area (province) on your device (section 3). If you have performed this check before, the app can, on pages where the service area is shown, perform the check without asking for the province again; during this check, the location does not leave your device. The app does not acquire location in the background.
• Notifications (Android 13 and above): if you have not granted permission, the app asks each time it is launched with a short explanation; Android's permission dialog opens only when you tap "Allow".

You can withdraw the permissions you have granted at any time from your phone's settings. Details: Mobile Application, Permissions and Notifications.

Notifications

If you grant notification permission, we send you only transactional notifications: when the support team or İkra AI replies in your chat and when the status of your order changes. We do not send campaign or advertising notifications. Administrator and editor accounts, on the other hand, receive business notifications for new orders, payments, reviews, product questions, business applications, contact form submissions and support messages from customers.

Notifications are delivered via Google LLC's (USA) Firebase Cloud Messaging service. When you grant notification permission, a notification token specific to your device is generated and recorded together with your account ID, device platform, app version, a random device ID produced by the app, and the session performing the registration; Firebase also uses an installation ID. If you do not grant notification permission, no notification token is generated on your device and no data is sent to Google for notifications. Notification texts do not include your name, email address, phone number, address or message content. The notification token is deleted when you log out, when you turn off notifications, when you delete your account, when the token becomes invalid, or when the app is not used for 270 days. You can turn notifications off by type from your phone settings or under My Account › Settings › Notifications.

10. Cookies, local storage and statistics

Our site's own code does not write HTTP cookies to your browser; instead, it uses your browser's local storage (localStorage) and session storage (sessionStorage) areas. In the Android app, the same records are kept in the app's own storage area. The list, purposes and durations of these records are provided in the Cookie Policy.

• Mandatory records: Records required for the service you request or the choice you make, such as your session (member or anonymous), your cart, your cookie preference, your favorites, your display preferences, your notification registration and your chat drafts. They do not depend on your consent and cannot be turned off.
• Functional records: Products you have recently browsed and your recent searches. They are on by default; you can turn them off from cookie preferences or under My Account › Settings.
• Statistics measurement: Operates only if you select "Accept" in the cookie notice or enable it from cookie preferences. If you do not consent, no statistics or error records are kept and no statistics identifier is generated.
• Use of statistics records: Only our fully authorized administrator sees these records. If you are logged in, the records are associated with your account, and our administrator may also view them at the individual or device level (e.g., pages browsed from a device, searches performed and order steps) for the purpose of reviewing site usage and finding problems and errors in the sales steps. The records are retained for 13 months; they are not used for advertising or automated decision-making and are not shared with third parties.
• Withdrawing consent: You can change your preference at any time via the "Cookie preferences" link at the bottom of the page. When you withdraw statistics consent, record-keeping stops immediately, the statistics identifiers on your device are deleted, and the statistics records belonging to this device and (if you are logged in) your account are deleted or anonymized within 30 days at the latest. Service records are not affected by this process; they are deleted when you delete your account.
• Third-party content: The card payment form (PayTR) is loaded at the payment step; PayTR receives your IP address and browser information and may use its own cookies. Google Maps opens only when you tap the "Open in maps" link. YouTube videos are loaded only when you tap the "Play" button, in YouTube's privacy-enhanced mode (youtube-nocookie.com); until then, no connection is made to Google and the video thumbnail is shown from our own server. Our infrastructure provider Cloudflare may use its own cookies for security purposes. No advertising or marketing pixels, Google Analytics, Google Tag Manager, Meta Pixel or any other third-party tracking tool is used on the site.

Real-time visitor count: In order to show how many visitors are currently on the site in the admin panel, as long as the page is open and visible, your browser or app sends to our real-time server only the device type (mobile or desktop) and the type of page you are on (e.g., home page, product, cart) with a random, temporary key. Your name, account or device ID is not added to this information; no cookie or persistent identifier is used. The information is kept only in the server's memory while the connection is open, is not recorded anywhere, and is deleted when the tab is closed or hidden. This count is not statistics measurement and operates independently of your cookie preference.

Service records

Whether or not you are a member (including anonymous sessions), the following are kept as service records on our server: adding products to the cart, removing them from the cart or changing quantities; placing an order, payment, cancellation or return of your order; requesting a quote or using a quote given to you; starting a support chat and sending messages; adding or removing favorites; setting a price or stock alert; opening your anonymous session, becoming a member, conversion of your anonymous session into a membership or linking it to your account, and logging in. A service record contains only your account ID (member or anonymous session ID), the type of transaction, the related product or order, amount, quantity and time; message content, email address, phone, IP address, device or session identifier, pages browsed and the referring site are not recorded. These records are independent of statistics consent; they are necessary for the fulfillment of your cart, order, quote and support request. Service records at the individual level are seen only by our fully authorized administrator; editors see only per-product totals. The records are retained for 13 months; they are not used for advertising or automated decision-making and are not shared with third parties.

11. Public content: reviews and questions

• Your review is published after being examined. In reviews, the name on your profile is published: your first name and the initial of your last name (e.g., "Ayşe Y.") are shown; if your profile has no name or your profile name is derived from your email address, "Supomp member" is shown. On the submission screen, you can see under which name it will be published. Your rating, comment, photos and, if applicable, the "Verified purchase" mark can be seen by everyone.
• Photos you add to a review are downscaled on your device before being sent and the location and device information (EXIF) inside them is removed; photos are not public until the review is published. If the review is not published or is removed from publication, the photos are also deleted.
• In product questions, the name you enter in the question form is published together with the question and answer; your email address is not published. The answer is published on the product page; your email address is used only to contact you when needed.
• We keep published reviews online for at least 1 year from the date of publication without distinguishing between positive and negative, unless you request their removal. If you want your own review or question to be removed, you can write to us.
• When you report content via the "Report" link, your report is forwarded to our team; your identity is not shown to the owner of the content.
• When you delete your account, the name on your reviews and questions is changed to "Deleted member" and your review photos are deleted; the review text and rating remain online. If you want these to be deleted as well, write to us.

12. How do we protect your data?

• The site and the app operate only over an encrypted connection (HTTPS); the app does not allow unencrypted connections.
• Access rules are applied in the database so that each user can access only their own records; our employees' access is limited by administrator and editor roles according to their duties.
• In our order, contact form, security and statistics records, your IP address is not kept in plain form but as a salted hash. In card payments, your IP address is forwarded to PayTR for the payment institution's security checks; IP addresses are also present in the technical logs of the servers and the authentication system.
• Chat files are not public and are only shown via links valid for at most 1 hour. The location and device information in photos sent in chat is removed before sending (except for some formats that your device cannot process, such as certain HEIC files); this information is also removed from review photos before upload.
• We do not store your card details.
• The support team's actions in chats are logged.
• Backups of the database and files are stored encrypted with AES-256.
• The Android app's on-device data is not included in the Android device backup.

These measures reduce risks; however, no system can guarantee complete security. If a security breach affects your personal data, we notify the Personal Data Protection Board and the affected individuals in accordance with the legislation.

13. How long do we keep your data?

Data whose retention period has expired is deleted, destroyed or anonymized; these actions are logged.

14. Deleting your account and data

You can delete your account yourself in the app or on the site via My Account › Settings › Delete my account; deletion occurs immediately and cannot be undone. If you cannot sign in, you can request deletion by writing from your registered email address to ikrahidropomp@gmail.com; such requests are concluded within at most 30 days.

• Deleted immediately: Your account, your profile (including business account application information), your addresses, your favorites, your cart, your recently viewed products, your transaction notifications, your quotes and quote carts, the team's customer notes about you, your chat preferences, your support chat and messages, İkra AI's chat summary and temporary model history, your notification tokens and device records, your review photos, statistics logs and service logs linked to your account. Chat files are also deleted from the server within at most 10 minutes.
• Anonymized: The name in your reviews and questions becomes "Deleted member"; the review text and rating remain published. The email address in product questions you submitted while signed in with your account is deleted, and the name, email and phone in contact form messages are anonymized.
• Retained: Order and invoice records, along with withdrawal notices, defect notifications and complaints transferred to the order record, with their link to your account removed, for the legal periods set out in section 13; the support team's chat action logs (not including content) for 2 years; İkra AI usage logs with the customer identifier removed for 400 days; authentication system security logs for at most 90 days; encrypted backups for at most 7 months.

You can request deletion of messages and questions you submitted without signing in through the same channels. Details: Account and Data Deletion.

15. Children's privacy

Supomp is not intended for persons under 18; membership and shopping are for persons aged 18 and over. If you notice that we are processing personal data of someone under 18, please notify us; we will delete such data.

16. Your rights

Under Article 11 of the KVKK, you have the right to learn whether your personal data is being processed, to request information, to request correction or deletion, to know the third parties to whom it has been transferred domestically or abroad, and to object. The full list of your rights and application channels is in the Privacy Notice (KVKK). Applications are concluded within at most 30 days and, as a rule, free of charge. You may withdraw at any time the consent you gave for statistics measurement based on your consent (Explicit Consent Statement).

17. Changes to this policy

We may update this policy in line with changes in our services or legislation. The current text is always published on this page; the last update date and the version of the text appear at the top of the page. We keep previous versions and will send them to you upon request. We will separately inform you before we begin processing your personal data for a new purpose.