Privacy Policy

1. Introduction

KOF ("we", "us") takes the privacy of its users seriously. This Privacy Policy explains how we collect, use, store and protect your personal data when you use the KOF platform. KOF provides its services from Turkey and processes personal data in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and related legislation. Where the EU General Data Protection Regulation ("GDPR") or the UK GDPR applies to the processing of your personal data, this policy also gives you the information required by those laws and describes the rights they grant you.

This policy is provided for your information. Where our processing relies on your consent, we ask for that consent separately, for example through the cookie settings.

2. Data Controller

The controller responsible for the processing of your personal data is KOF, the operator of the KOF platform, based in Turkey. For any questions, requests or applications concerning your personal data, including the exercise of your rights, you can contact us through the following channels:

• Email: [email protected]
• Web: kofbot.com/contact

3. Data We Collect

We collect the following data in order to provide our services:

• Identity Data: Username, email address and password (stored only as a hash).
• Contact Data: Email address and, if you choose to provide it, your phone number.
• Usage Data: Your activity on the platform, session information and preferences.
• Technical Data: IP address, browser type, device information and cookie data.
• Payment Data: Payments are processed by third-party payment providers; we do not store your credit card details.
• Advertising and Marketing Data: Anonymous usage data, ad interaction information and conversion data collected through advertising cookies, only with your consent.

The identity and contact data requested at registration are necessary to create an account; if you do not provide them, we cannot provide the services to you.

4. Purposes and Legal Bases for Processing

We process your data for the following purposes and on the following legal bases (where the GDPR or the UK GDPR applies, under Article 6(1) of those laws):

• Performance of a contract: Creating and managing your account, providing the services and processing payments
• Legitimate interests: Improving our services, keeping the platform secure, preventing fraud and producing statistical analyses; our legitimate interest is operating a secure and reliable service, and you can object to this processing (see section 9)
• Legal obligation: Complying with obligations under applicable law
• Consent: Marketing communications, personalised advertising, and analytics and advertising cookies; you can withdraw your consent at any time

5. Data Retention and Security

Your personal data is protected by industry-standard security measures. Passwords are hashed with the bcrypt algorithm before being stored. All data in transit is protected by SSL/TLS encryption. We keep your personal data only for as long as necessary to provide the services or for as long as required by legal obligations; after that, it is deleted or anonymised.

6. Cookies

Our platform uses several types of cookies in accordance with the Turkish KVKK (Law No. 6698), the GDPR, the UK GDPR and the applicable rules on cookies and similar technologies. All cookies other than strictly necessary cookies are enabled only with your explicit consent (opt-in). Until you give your consent, the Google and Meta measurement scripts are not loaded in your browser and no data is sent to these providers. We use Google Consent Mode v2.

6.1 Strictly Necessary Cookies

These are required for the basic functions of the site, such as signing in and remembering your language and cookie choices. They cannot be disabled and do not require your consent.

6.2 Analytics Cookies

Used to collect anonymous usage statistics through Google Analytics. Enabled only with your consent.

6.3 Marketing / Advertising Cookies

Used by Google Ads and the Meta (Facebook) Pixel to measure ad performance, track conversions and show personalised ads. Enabled only with your consent.

6.4 Manage Your Cookie Preferences

You can change your cookie preferences at any time using the button below. Under Article 7(3) GDPR and the KVKK, you have the right to withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before it was withdrawn. If you withdraw your consent, the related cookies are deleted and tracking stops. Our system also detects and respects your browser's "Do Not Track" signal.

7. Third-Party Services

We use the following third-party services to provide our services:

• Payment Processing: Third-party payment providers for a secure payment infrastructure
• Google Analytics: Platform usage analytics and visitor statistics (Google Privacy Policy)
• Google Ads: Ad conversion tracking and remarketing. Google may use cookies to show you personalised ads on other websites (Google Advertising Policy)
• Meta (Facebook) Pixel: Used for ad performance measurement and targeting (Meta Privacy Policy)
• Google reCAPTCHA: Bot protection and security (Google Privacy Policy)

These services have their own privacy policies and process data in accordance with them.

8. International Data Transfers

KOF provides its services from Turkey. Your personal data is processed in Turkey and on servers located in the European Union, and may also be processed in the countries where our service providers (such as Google, Meta and payment providers) or their servers are located. Some of these countries may not offer the same level of data protection as your country.

We transfer personal data internationally in accordance with Article 9 of the KVKK and, where the GDPR or the UK GDPR applies, only on the basis of an adequacy decision or appropriate safeguards, such as the standard contractual clauses approved by the European Commission. You can request more information about these safeguards by contacting us. These transfers are necessary to provide the services and are limited to the purposes described in this policy.

9. Your Rights

Depending on the law that applies to you, in particular the GDPR or the UK GDPR, you have the following rights regarding your personal data:

• Right of access: To obtain confirmation of whether we process your personal data and a copy of that data, together with information about the processing
• Right to rectification: To have inaccurate data corrected and incomplete data completed
• Right to erasure: To have your data deleted, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn your consent
• Right to restriction of processing: To have the processing of your data restricted in certain circumstances, for example while the accuracy of the data is being verified
• Right to data portability: To receive the data you provided to us in a structured, commonly used and machine-readable format and to have it transmitted to another controller
• Right to object: To object at any time to processing based on our legitimate interests and to processing for direct marketing purposes
• Rights related to automated decision-making: Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you
• Right to withdraw consent: To withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal
• Right to lodge a complaint: With the data protection supervisory authority of the country where you live or work or where the alleged infringement took place (in the United Kingdom, the Information Commissioner's Office)

You may also have the right to claim compensation for damage suffered as a result of the unlawful processing of your personal data. If you are located in Turkey, you also have the rights set out in Article 11 of the KVKK, as described in our KVKK Notice.

To exercise these rights, you can contact us at [email protected] or through our contact page. We will respond within the period required by applicable law and in any event within one month of receiving your request.

10. Data Sharing

We do not share your personal data with third parties except where required by law. Your data is shared only with the third-party service providers needed to provide the services (payment, analytics, advertising, etc.), and only to the extent necessary. Under no circumstances do we sell or rent your data for marketing purposes.

11. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect data from persons we know to be under 18. If we become aware of such a case, the data concerned is deleted immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will inform our users by email or through an in-platform notification. The latest version of the policy is always published on this page.