Legal
A transparent explanation of how your data is collected, used, protected and shared.
We collect only the data needed to provide the service. This policy explains the personal data we process during contact, enrollment, tutoring, purchase and support, and your rights. Data controller: Uğur Varlıklı, operating under the ITMagic Academy brand. Details of your rights under Turkish law are in our KVKK Notice.
Contact details (name, email, phone, form message), account details (for login), education data (target exam, school, attendance, homework, practice test answers and scores, progress notes), purchase and payment records, support correspondence and refund requests, website preferences (language, cookie consent) and, if you switch them on, a browser notification registration.
Our services are aimed at high school students, so we process data of people under 18. This data is processed with the knowledge and consent of a parent or legal guardian, solely to deliver the educational service. Parents can view the student's progress reports and make data requests on the student's behalf.
Membership and digital product payments are made by bank transfer, directly to ITMagic Academy in Turkish lira. For these payments we keep only the transfer record (sender name, amount, date, reference). We do not take card details and no card details are stored on our servers.
We process your data to deliver the educational service, track your exam dates, produce parent reports, run payments, provide support, ensure security and prevent abuse. Legal bases: the conclusion and performance of a contract, our legitimate interests, our legal obligations and, where needed, your explicit consent. Your data is not sold to third parties for marketing.
We work with Cloudflare for website hosting and the database, and with an email service provider for transactional emails. Payments are received through our bank. If you allow it, Google and Meta tools are used for advertising measurement. These providers process data only to deliver the service and may change from time to time.
We use strictly necessary cookies for session, security and language preference. Cookies for visit statistics and advertising measurement run only if you consent, and you can change your choice at any time from the Cookie preferences link at the bottom of the site. Details are in our Cookie Policy.
Our service providers may be located outside Türkiye or the European Union. Our database and files are stored in Cloudflare's European region. Where a transfer is needed, the safeguards required by applicable law are applied.
We keep your data for the duration of our service relationship and afterwards until statutory retention periods expire. Purchase and payment records may be kept for applicable statutory limitation periods due to potential disputes and financial obligations. You can request deletion at any time; to the extent legal obligations allow, your request is completed within 30 days.
Under applicable data protection law (KVKK in Türkiye and, where applicable, the EU GDPR) you have the right to access, rectify or erase your data, object to processing and request data portability. Where processing is based on consent, you can withdraw it at any time; this does not affect processing carried out before the withdrawal.
We apply reasonable technical and organisational measures to protect your personal data: encrypted connections, role-based access and encrypted backups. However, no method of transmission or storage over the internet is 100% secure.
We may update this policy from time to time and will notify you of material changes. For privacy questions and requests: bilgi@itmagic.com.tr · +90 533 233 35 00.
