1. Scope
This Privacy Policy explains how Moto Poyraz Motosiklet Servisi ("MotoPoyraz", "we") processes your personal data when you use the https://motopoyraz.com website, the web customer and staff panels and the MotoPoyraz mobile apps (the "Services"). The Turkish version prevails.
The statutory notice under Turkish Data Protection Law No. 6698 (KVKK) is available in the KVKK Privacy Notice: https://motopoyraz.com/en/kvkk
2. Data We Collect
- Account and contact data: first and last name, phone, email, address.
- Motorcycle data: make, model, year, licence plate, chassis/engine number, mileage.
- Service records: appointments, service requests, work orders, quote approvals, maintenance history, invoices and payments.
- Photos and videos: images taken at intake and during service, or uploaded by you when creating a request.
- Digital signature: your signature on intake and delivery forms.
- Device data: push token of your device/browser, device type and app version.
- Usage and security logs: IP address, session data, error and access logs.
- Cookies and local storage (see below).
3. How We Use Your Data
- To provide appointments and service, run work orders and hand over your vehicle,
- To inform you about service status, approval requests, appointment reminders and account security,
- For invoicing and to meet legal obligations,
- To keep your account secure, prevent misuse and fix errors,
- To measure and improve our service quality.
We do not sell your data. Advertising and analytics cookies are used only if you give explicit consent in the cookie banner (see Section 4). Promotional messages are sent only with your explicit consent.
4. Cookies and Local Storage
Strictly necessary cookies and browser storage are always used: session cookies (to keep you securely signed in), a language preference cookie, a record of your cookie choice and the service worker cache for offline use. In addition, ONLY if you select "Accept" in the cookie banner, Google Analytics, Google Ads and Meta Pixel cookies and tags are loaded to measure our advertising and show you relevant ads; these providers process data such as pages visited, appointment/phone/WhatsApp clicks, device and browser information and online identifiers on servers outside Türkiye. If you do not consent, these tags are never loaded and the site works the same. You can change or withdraw your choice at any time via the "Cookie Preferences" link at the bottom of the page.
The map view loads OpenStreetMap tiles, which transmits your IP address to the map server. You can delete or block cookies in your browser settings; however, sign-in and similar functions may not work if necessary cookies are blocked.
5. SMS, Email, WhatsApp and Push Notifications
We send transactional notifications about service and appointments via SMS, email, WhatsApp and push notifications, delivered through the respective providers.
Push notifications are only enabled once you allow them on your device/browser; you can turn them off at any time in your device settings or in the notification preferences of your panel. Security notifications such as password resets are sent regardless of preferences.
6. Photos, Videos and Signatures
Images taken at intake and during service, and your signature, are stored to document the condition of your vehicle, show the work performed transparently and protect rights in case of disputes. These files are kept in access-restricted storage and shown to you and authorised staff only via time-limited signed links.
7. Sharing and Service Providers
- SMS, email and WhatsApp messaging providers,
- Push notification infrastructure (Apple, Google Firebase, Expo, browser web push services),
- Hosting, storage and backup providers,
- Payment institutions and banks,
- Advertising and analytics providers (Google, Meta), only with your explicit consent,
- Accountants and legal advisers; competent authorities upon lawful request.
Providers process your data only on our behalf and under our instructions. Cross-border transfers comply with Article 9 KVKK.
8. Security
We apply technical and organisational measures such as HTTPS encryption, one-way hashing of passwords, role-based access control, short-lived access tokens, rate limiting, access logging and regular backups. No system is 100% secure; in the event of a data breach we make the notifications required by law.
9. Retention
We keep your data for as long as required for the purpose of processing and by law. Detailed retention periods are listed in the KVKK Privacy Notice: https://motopoyraz.com/en/kvkk
10. Deleting Your Account
- In the app: in the MotoPoyraz mobile app go to Profile > "Delete my account"; after verifying your identity your account is deleted.
- By email: send an email with the subject "Account deletion request" from your registered address to kvkk@motopoyraz.com; your request is completed within 30 days at the latest.
When your account is deleted, your profile, contact and device data is deleted or anonymised. Data subject to statutory retention, such as invoices and service records, is kept with restricted access for the legally required period and destroyed afterwards.
11. Children’s Privacy
Our Services are not directed at persons under 18 and we do not knowingly create accounts for them. If you become aware of such a case, please contact us.
12. Your Rights
You can exercise your rights under Article 11 KVKK (access, rectification, erasure, objection, etc.) by contacting kvkk@motopoyraz.com. The application procedure and the full list of rights are set out in the KVKK Privacy Notice.
13. Changes
We may update this policy to reflect changes in the Services or the law. The current version is published on this page with its "last updated" date; we will notify you of significant changes.
14. Contact
Moto Poyraz Motosiklet Servisi · Cumhuriyet Mah. İsmail Ogan Sk. No:5, 07425 Alanya/Antalya · Phone: +90 552 597 56 21 · Email: info@motopoyraz.com · Data protection requests: kvkk@motopoyraz.com