Privacy Policy

This Privacy Policy explains the privacy and information-security approach applied when using the Doktor Matbaa website, account features, order and quote workflows, personalization and proof services, payments and delivery.

For detailed information about processing purposes, legal bases, recipients, international transfers and your statutory rights, please refer to the KVKK Information Notice.

Doktor Matbaa aims to request only personal data required to provide its services and to keep processing limited to specified, explicit and legitimate purposes.

Customers should avoid entering or uploading information that is not required for orders, quotes, payments, invoicing, production, proofs, delivery or support.

Passwords are not stored in plain text and are protected using one-way password hashing.

Email verification, session management and authorization controls are used to reduce the risk of unauthorized account access.

Users are responsible for keeping their passwords confidential, avoiding unattended sessions on shared or untrusted devices and reporting suspicious account activity.

Card payments are processed through the payment-provider infrastructure of iyzico. Raw card data such as card number, expiry date and security code is not stored in the Doktor Matbaa application database.

Customer and transaction information required to initialize a payment may be transmitted to the payment provider. Payment results and transaction references may be recorded to manage the payment status of an order.

For bank transfer payments, bank-account details are presented to the customer and the payment status is updated after administrative verification.

Logos, artwork, print files, personalization information and proof content uploaded by customers are made available only as required for order, quote, production and support workflows.

Access to production and proof files is restricted through application authorization rules and operational access requirements.

Because Doktor Matbaa does not provide healthcare services, customers should not upload real patient health information or other unnecessary special-category personal data. Anonymous, fictional or sample data should be used for example printed material whenever possible.

Application data, production files and operational records may be processed in the server, database and S3-compatible object-storage infrastructure used by Doktor Matbaa.

Database and file-storage backups may be copied to separate backup infrastructure for business continuity and disaster recovery. Access to backups is restricted to operational needs and backups are retained according to defined retention policies.

If a service provider processes data outside Türkiye, the transfer is assessed under the international-transfer rules described in the KVKK Information Notice.

Service messages such as account verification, password reset, order, payment, quote, proof and delivery notifications may be sent through the configured SMTP infrastructure.

Transactional email is used to provide the requested service and protect account or order security. If marketing or commercial electronic messages are introduced, the separate legal requirements applicable to those communications will be followed.

Technical data such as IP address, transaction time, session information and application logs may be processed to protect the security and continuity of the service and prevent misuse.

Security records may be reviewed to detect unauthorized access, account takeover, fraudulent activity, abuse or technical failures.

Doktor Matbaa applies technical and organizational controls including restricted access, protection of secrets from direct exposure, one-way password storage and application-level authorization.

Third-party providers may be used for payment processing, email, hosting, databases, object storage, backups, shipping and security.

Access or transfer to those providers is intended to be limited to what is necessary to provide the relevant service.

Relevant notices will be updated when service providers or material processing methods change.

Personal data and customer files are not intended to be retained indefinitely. They are retained for the period necessary to provide services, meet legal obligations, maintain security and resolve potential disputes.

When retention is no longer required and no other legal basis applies, deletion, destruction or anonymization procedures are used as appropriate.

This policy may be updated when there are material changes to Doktor Matbaa's technical infrastructure, service providers, payment or delivery methods, or personal-data processing activities.

For personal-data requests, use the KVKK request channel identified in the KVKK Information Notice. For general service and order questions, use the support channels on the Contact page.