Privacy Policy

Scope

This policy explains how personal data of figtures.com visitors and Figtures clients is protected. The service provider is Büşra Diba Aktaş Mert (Figtures). Purposes, legal bases, recipients, and retention are detailed in the KVKK Clarification Text.

Contact and project details are used to respond, prepare proposals, and communicate. If a contract is concluded, we keep delivery, billing, payment, and support records. We do not sell or rent your data or use it for marketing without your consent.

Payment security

Card payments are processed by İyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (iyzico), a payment and e-money institution licensed by the Central Bank of the Republic of Türkiye, using 256-bit SSL encryption and 3D Secure.

Card number, expiry date, and CVV are handled directly by iyzico; Figtures never sees or stores them. We only see the transaction reference, amount, and outcome.

Information security

Site traffic is encrypted with SSL. Access to personal data is limited to people who need it, with appropriate technical and organizational safeguards. Our service providers are bound by confidentiality and security obligations.

In case of a data breach, the Board and affected individuals are notified within the period required by KVKK Art. 12.

Projects involving third-party data

If project files contain employee, customer, or end-user data, confirm you are authorized to share it and use a secure channel. Security measures, subprocessors, breach notification, and return or deletion at project end are set out in the written agreement.

Children

Our services are intended for adults and businesses. We do not knowingly collect data from anyone under 18.

Cookies and updates

Cookie types and preference controls are described in our Cookie Policy. When this policy changes, the current version and effective date are published on this page.