Privacy Policy

1. Scope

This Privacy Policy explains how information is processed for users who visit the SoloRota website, create a membership, submit a contact form, raise a support request or purchase a digital education package.

The purposes, legal grounds and data subject rights under Turkish Law No. 6698 on the Protection of Personal Data are set out separately on the KVKK Information Text page.

Details on cookies are provided on the Cookie Policy page.

2. Information We Collect

The following information may be collected from you or from your use of the Platform:

• Account information: name, surname, email address, telephone number and records relating to account security.
• Student and parent information: the student's name, grade/level, educational goal, and the parent's name and contact details.
• Order information: order number, package purchased, quantity, amount, currency, payment method, payment status and order note.
• Agreement approval records: the documents you approved at the payment step, the date and time of approval and the document version.
• Communication records: the content of contact forms, support requests and email correspondence.
• Usage data: pages visited, session information, referring source, device and browser information, and IP address.
• Educational process data: lesson planning, attendance records and, depending on the package, progress and performance assessments.

An identity number is requested only where the relevant payment method requires it, and solely for that transaction.

3. How We Use the Information

• Creating a membership account and maintaining account security
• Taking the order, concluding the agreement and providing the digital education service
• Creating a learning path and study plan appropriate for the student
• Carrying out teacher matching and lesson planning according to the package
• Tracking progress and reporting to the parent
• Concluding requests, complaints and support enquiries
• Managing cancellation, withdrawal and refund processes
• Measuring service quality and improving the Platform
• Sending campaign and announcement messages where you have given consent
• Meeting legal requirements such as tax, accounting and retention obligations

4. Payment and Card Data

For card payments, the transaction takes place on the secure payment page of a licensed payment service provider, to which you are redirected at the payment step.

Payment instrument details such as the card number, expiry date and security code are not requested on SoloRota pages, are not recorded on SoloRota systems and are not displayed by SoloRota. This data is processed solely within the payment service provider's PCI-DSS compliant infrastructure.

On the SoloRota side, only records relating to the outcome of the payment are kept (payment status, transaction reference, amount and date). These records are required to manage the order and any refund process, and to meet statutory retention obligations.

5. Sharing of Information

Your information is not sold and is not transferred to third parties for marketing purposes. Sharing occurs only in the following cases and is limited to what is necessary:

• Payment service providers: order and contact details required to execute the payment and manage refunds.
• Hosting and technology providers: server and infrastructure services used to operate the Platform.
• Teaching staff: student information shared with the relevant teacher or education adviser so that lessons can be delivered.
• Email delivery infrastructure: transmission of order and information emails.
• Competent public authorities: in the context of requests for information and documents arising from legislation.

Contractual arrangements are made with service providers requiring that data be processed only for the specified purpose.

6. Data Security

Technical and administrative measures are applied to protect data:

• The site and payment steps are protected with SSL/TLS encryption.
• Account passwords are stored in irreversibly hashed form.
• Access to the administration panel is restricted through authorisation.
• Payment instrument details are never held on our systems.
• Access and transaction logs are maintained.

Absolute security cannot be guaranteed for any transmission over the internet; however, reasonable and current measures are taken against known risks. If you become aware of anything that may affect the security of your data, please notify us through our support channels.

7. Retention Periods

Information is kept for as long as the purpose of processing requires and for the retention periods prescribed by applicable legislation.

• Membership data is retained while your account is active.
• Order, payment and agreement approval records are retained for the periods prescribed by commercial and tax legislation.
• Support and communication records are retained for a reasonable period after the request is concluded.
• Records based on marketing consent are retained until you withdraw your consent.

Upon expiry of these periods, data is deleted, destroyed or anonymised.

8. Children's Information

The Platform provides educational services to students. Registration and purchase on behalf of students under eighteen years of age are carried out by a parent or legal representative.

Student information is processed solely for the provision of the educational service and for parent reporting.

At the parent's request, information about the student's data is provided and deletion may be requested to the extent permitted by legislation.

9. Commercial Electronic Messages

Campaign, announcement and information messages are sent only where you have given separate and optional consent.

This consent is presented as a separate box at the payment step; ticking it is not mandatory and does not affect your purchase.

You may withdraw your consent at any time by using the opt-out link in the messages sent to you or by contacting our support channels. Upon your opt-out request, commercial messages are stopped.

Notifications relating to your order (order confirmation, access details, lesson planning) are not commercial messages and are sent as part of performing the service.

10. Your Rights and How to Apply

You have the rights listed in Article 11 of Law No. 6698 in relation to your personal data. The scope of these rights and the application procedure are explained in detail on the KVKK Information Text page.

You may submit your applications using the contact details in the Company information section at the end of this page.

11. Changes to This Policy

This policy may be updated in line with changes to our services or to legislation. The current text is always published on this page and shown together with the update date at the top of the page.

In the event of material changes, separate notice is given through appropriate channels.