Privacy Policy

Last updated: July 29, 2026

This Privacy Policy explains how personal data collected through the basitkargo.com website, mobile applications and related services (the "Platform"), operated by Gemen Bilgi Teknolojileri Ve Ticaret Limited Şirketi (the "Company"), is processed, stored and transferred in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and related legislation. This policy is an annex to, and an integral part of, the User Agreement concluded with Platform users. In case of any discrepancy between this English translation and the Turkish version, the Turkish version shall prevail.

1. Data Controller

2. Personal Data We Collect

The following categories of personal data may be collected while you use the Platform:

• Identity and contact data: name, surname, phone number, e-mail address and address details; for corporate users, company title, tax office and tax number.
• Shipment data: recipient name, recipient address, recipient phone number, shipment content description, tracking numbers and delivery status information for the shipments you create.
• Financial data: invoicing information, cash-on-delivery amounts and the IBAN / PTT account details to which collections are transferred. Credit card details are not stored by the Company; payments are processed through a licensed payment institution.
• Integration data: store URLs, API keys and order data of the marketplace / e-commerce platforms (e.g. WooCommerce, OpenCart, Shopify, ikas, Ticimax) that you voluntarily connect to your account.
• Transaction and usage data: session records, IP address, browser/device information, and date and content records of the operations you perform on the Platform.

3. Purposes of Processing

Collected personal data is processed for the following purposes:

• Creating, verifying and managing your account,
• Creating shipments, transmitting them to contracted cargo carriers and tracking them,
• Collecting cash-on-delivery payments and transferring them to you,
• Issuing invoices and fulfilling legal and financial obligations,
• Notifying users and shipment recipients about delivery status via SMS, e-mail or WhatsApp,
• Handling support requests and communicating with users,
• Measuring and improving service quality and producing statistical analyses,
• Complying with legal obligations and responding to requests of competent authorities,
• Detecting fraud and misuse and ensuring the security of the Platform.

4. Legal Grounds for Processing

Personal data is processed on the legal grounds set out in Article 5 of the KVKK, namely the establishment and performance of a contract, compliance with legal obligations, establishment, exercise or protection of a right, and the legitimate interests of the Company provided that your fundamental rights and freedoms are not harmed; where none of these grounds apply, processing is based on your explicit consent.

5. Transfer of Personal Data

Limited to the purposes listed above, personal data may be transferred to the following categories of recipients:

• Contracted cargo carriers: shipment and recipient data, for the carriage and delivery of your shipments (e.g. Aras Kargo, Sürat Kargo, PTT Kargo, MNG Kargo, Yurtiçi Kargo, HepsiJet, Sendeo, Kolay Gelsin, Kargom Sende),
• Payment institutions, electronic money institutions and banks: for receiving payments and transferring cash-on-delivery collections,
• Notification service providers: for sending SMS, e-mail and WhatsApp notifications,
• IT infrastructure and hosting providers: for the secure storage and backup of data (some server and cloud storage services may be located abroad; such cross-border transfers are carried out on the basis of the explicit consent given through the KVKK consent text approved during registration),
• Competent public authorities: for the fulfilment of obligations arising from legislation.

Personal data is not sold, rented or shared with third parties for marketing purposes outside the scopes described above.

6. Data of Shipment Recipients

Recipient name, address and phone details entered by users while creating a shipment are processed solely for the carriage and delivery of that shipment and for delivery-related notifications, and are transferred to the relevant cargo carrier. Users represent and warrant that they have lawfully obtained the personal data of third parties (recipients) they enter into the Platform and that they have duly informed those persons.

7. Cookies

The Platform uses strictly necessary session cookies to maintain your session securely. Third-party cookies of the live-support provider may also be used in order to provide live chat services. If strictly necessary cookies are disabled, the parts of the Platform that require a session may not function.

8. Retention Periods

Personal data is retained for as long as required by the processing purpose and, in any case, for the minimum retention periods prescribed by applicable legislation (e.g. obligations arising from tax, commercial and e-commerce legislation). Upon expiry of these periods, data is deleted, destroyed or anonymised.

9. Data Security

The Company takes the technical and organisational measures required under Article 12 of the KVKK to prevent the unlawful processing of and unlawful access to personal data and to ensure its safekeeping.

10. Your Rights under the KVKK

Pursuant to Article 11 of the KVKK, everyone has the right to apply to the data controller and, with respect to their own data:

• To learn whether their personal data is processed,
• To request information if it has been processed,
• To learn the purpose of processing and whether the data is used in line with that purpose,
• To know the third parties to whom the data is transferred, in Türkiye or abroad,
• To request rectification of incomplete or inaccurate data,
• To request erasure or destruction of the data under the conditions set out in Article 7 of the KVKK,
• To request that rectification, erasure and destruction operations be notified to the third parties to whom the data has been transferred,
• To object to a result arising against them through analysis carried out exclusively by automated systems,
• To claim compensation for damages incurred due to unlawful processing of their data.

11. How to Apply

You may submit requests regarding the rights listed above, together with information verifying your identity, by e-mailing destek@basitkargo.com or by writing to the postal address stated above. Applications are, as a rule, concluded free of charge within the period prescribed by the KVKK and in any case within thirty days at the latest; where the response requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.

12. Changes

The Company may update this Privacy Policy at any time in line with changes in legislation or updates to its services. The current version enters into force on the date it is published on the Platform.