Personal Data Protection Notice (KVKK)

Son güncelleme: 25.07.2026

Last updated: 25.07.2026

1. Data Controller

This Notice has been prepared by the company identified below in its capacity as Data Controller under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and Law No. 5651. Wuffi Pet is a brand operated by this company.

Legal Entity Sfera Dijital Çözümler Bilişim Pazarlama İthalat ve İhracat Anonim Şirketi
Brand Wuffi Pet (wuffi.pet)
Tax Office / Tax ID Maslak Tax Office — 7692165393
Address Maslak Mah. Bilim Sk. Sun Plaza No: 5 A, Interior Door No: 13, Sarıyer / İstanbul, Türkiye
Activity Code 582901 — Publishing of other software
Data Protection Contact kvkk@wuffi.pet

2. Which Personal Data Is Processed?

  • Identity data: first name, last name, username
  • Contact data: e-mail, phone, address, province/district
  • Account data: password (irreversibly hashed), sign-in dates, IP address, device/session information
  • Pet data: animal name, species, breed, date of birth, photo, vaccination and health records
  • Transaction data: appointment, message, review and support-request history
  • Location data: saved address coordinates and/or province-district. Used to show nearby services and lost-pet reports. For adoption and lost-pet listings, precise location is not shown to visitors who are not signed in — only an approximate area is shared.
  • Usage data: records of posts/videos viewed — so content is not shown to you again and to order recommendations
  • Cookies and analytics: site usage statistics

3. Purposes and Legal Grounds of Processing

  • Membership and account management — establishment and performance of the contract (KVKK Art. 5/2-c)
  • Service matching, appointments and communication — performance of the contract
  • Legal obligations (KVKK, Law No. 5651, Tax Procedure Law) — legal obligation (KVKK Art. 5/2-ç)
  • Site security, abuse and fraud prevention — legitimate interest (KVKK Art. 5/2-f)
  • Campaign and marketing notifications — only with your explicit consent, which you may withdraw at any time
  • Location-based notifications (nearby lost-pet reports etc.) — can be turned off in settings

4. With Whom Is Your Data Shared?

Your personal data is never sold. It is shared only with the following parties, to the extent necessary:

  • The business you book with: only your name, phone and address are transferred to that business so the appointment can be fulfilled. Other businesses cannot see this information.
  • Hosting provider: within the scope of server services, under contractual confidentiality obligations
  • E-mail delivery provider: to deliver verification, notification and support e-mails
  • Legal authorities: upon a court order or where required by law

Payment data is not processed. No online payment is taken on our platform; the service fee is paid directly to the business, off-platform. Accordingly, card details, bank details or similar payment data are never collected or stored by us.

5. Is Your Data Transferred Abroad?

Within the scope of hosting, content delivery (CDN) and e-mail delivery services, your data may be processed in data centres located outside Türkiye. Such transfers are carried out under Article 9 of the KVKK with appropriate security measures and contractual undertakings.

6. Your Rights Under Article 11 of the KVKK

You have the right to:

  • Learn whether your personal data is being processed
  • Request information if it has been processed
  • Learn the purpose of processing and whether the data is used in line with that purpose
  • Know the third parties within or outside Türkiye to whom the data has been transferred
  • Request rectification if the data is incomplete or inaccurate
  • Request erasure or destruction under Article 7 of the KVKK
  • Request that rectification/erasure be notified to third parties to whom the data was transferred
  • Object where an adverse outcome arises from analysis by automated systems
  • Claim compensation for damage suffered due to unlawful processing

Applications

To exercise your rights you may write to kvkk@wuffi.pet or submit a written application to the company address above. Applications are concluded within 30 days at the latest.

The easy way: in the app and on the website, under Settings → Privacy & Data (KVKK), you can request a copy of your data with a single tap and delete your account. You can also delete your account from the web at wuffi.pet/hesap-sil without installing the app.

7. Retention Periods

  • Active account data: for as long as the account is active
  • After account deletion: up to 6 months for abuse investigation and identity verification, then anonymisation or destruction
  • Appointment and invoice-related records: 5 years under the Tax Procedure Law
  • Traffic/access logs under Law No. 5651: for the period prescribed by legislation
  • Cookie and analytics records: 26 months at most

8. Security Measures

  • Passwords are irreversibly hashed and never stored in plain text
  • All traffic is encrypted with HTTPS/TLS
  • Two-step verification (authenticator app or e-mail code) is offered
  • Authorisation and access logs are kept; administrator actions are written to an audit log
  • In the event of a data breach, the Personal Data Protection Board is notified as soon as possible and in any case within 72 hours

9. Changes

This notice is updated as needed. Material changes are announced by e-mail or in-app notification.

Last updated: 25.07.2026