Privacy Policy and Data Protection Notice
This policy explains which personal data we process when you use the LiraX website and services, why, for how long, and how you can exercise your rights under Turkish Personal Data Protection Law No. 6698.
1Definitions
In this text "we", "our" and "LiraX" mean the party operating the platform, and "you" means the person who visits the site or opens an account. "Service" covers the website, registration forms, dashboard and support channels together.
2Personal data
Personal data is any information relating to an identified or identifiable natural person. In registration and contact forms we collect your first name, last name, phone number, email address and the content of your request. At identity verification, the documents listed on the AML / KYC page are also processed.
3Usage data
When you visit the site, technical data such as your IP address, browser type, device information, pages visited, time of visit and referring address may be recorded automatically. This data is used to run the site, keep it secure and improve the service.
5Data controller and processor
LiraX decides the purposes and means of processing your personal data and is the data controller in that respect. Part of the data is processed by service providers (data processors) acting on our behalf and under our instructions.
6Collection and use of information
We use your data to answer your request, open and manage your account, let your personal manager call you, carry out deposits and withdrawals, meet identity verification and anti-money-laundering obligations, keep the service secure, and analyse and improve it.
7Legal bases (KVKK)
Processing rests on these grounds: it is necessary to conclude or perform a contract, to comply with a legal obligation, our legitimate interest provided your fundamental rights are not harmed, and, for marketing communication, your explicit consent. You can withdraw your explicit consent at any time.
8Retention of data
We keep registration and contact data while your account is open and for the limitation period of any claim. Identity verification and transaction records are kept for the period set by anti-money-laundering legislation. Marketing permissions are kept until you withdraw consent. When periods end, data is deleted, destroyed or anonymised.
9Transfer of data
Your data may be transferred, limited to the purposes above, to the relevant licensed service provider, affiliated companies, IT and hosting providers, identity-verification providers and, where legally required, regulators. If a transfer abroad is needed, the conditions of KVKK are followed.
10Disclosure of data
We do not sell your data for marketing. When a lawful request arrives from a competent public authority, we may share information to the extent the law requires and in a limited way.
11Security of data
To protect data against unauthorised access, loss and misuse we apply technical and organisational measures such as encryption, access control, logging and regular review. Since no method of communication is completely risk free, we cannot give an absolute guarantee of security. See the Security page for details.
12Your rights as a data subject
Under Article 11 of KVKK you have the right to learn whether your data is processed, to request information if it has been processed, to learn whether it is used for its purpose, to know the third parties to whom it is transferred at home or abroad, to ask for correction if it is incomplete or wrong, to ask for deletion or destruction, to object to processing, and to claim compensation if you suffer damage.
You can send your request to [email protected] with information that lets us verify your identity. A reply is given, depending on the nature of the request, within thirty days at the latest. If a solution is not found you may complain to the Personal Data Protection Board.
13Service providers
We use third-party providers for hosting, email delivery, telephone and callback service, payment processing and identity verification. These providers can access only the data they need to do their task and are bound by confidentiality and security obligations.
14Analytics
To understand how you use the site we may prepare aggregated and, as far as possible, anonymous statistics. When an analytics tool is switched on, this policy is updated and, where needed, your consent is requested.
15Advertising and retargeting
We do not currently use third-party advertising or retargeting cookies. If we do in future, we will announce it on this page and ask for your explicit consent.
16Links to third-party sites
Our site may link to other sites. We are not responsible for the privacy practices of those sites, and we suggest you read the policy of every site you visit.
17Children's privacy
Our service is not directed at people under 18. If we notice that we have collected data belonging to a child we delete it immediately. If you become aware of such a case, please tell us.
18Changes to this policy
We may update this policy from time to time. The current version takes effect when published on this page; we also notify important changes to your registered email address.
19Contact us
For any question about privacy and personal data, write to [email protected]. Responsible department: Client Support & Compliance.