Last updated:
This Personal Data Protection Notice explains how Shofic collects, uses, stores, shares and protects personal data belonging to visitors and customers of shofic.com. It has been prepared with particular regard to the Turkish Personal Data Protection Law No. 6698 (KVKK) for customers residing in Türkiye, and it applies alongside — not instead of — our general Privacy Policy. Where the two documents overlap, the provision that gives you stronger protection prevails.
By using the site or placing an order, you acknowledge that you have read this notice. This notice does not, by itself, create contractual rights beyond those granted by applicable data-protection legislation; its purpose is transparency.
The data controller is Shofic, an online provider of digital social-media visibility services operating from Dubai, United Arab Emirates. For all matters related to personal data — questions, requests, objections or complaints — the controller can be reached at info@shofic.com or through the contact page on shofic.com. Shofic determines the purposes and means of processing described in this notice and is responsible for compliance with the obligations of a data controller.
We deliberately keep the data we process to a minimum. The categories are: identity and contact data (the email address you provide at checkout or registration, and a display name if you create an account); order data (the public links, usernames or post URLs you submit, the services purchased, quantities, timestamps and delivery status); payment confirmation data (transaction references, amounts, currency and payment status received from our payment providers — never full card numbers, bank credentials or crypto-wallet private keys); and technical data (IP address, browser type, device information and standard server logs generated when you use the site).
We never ask for, collect or store the passwords of your social-media accounts. Our services are delivered to public profiles and content and do not require login access of any kind. We also do not process special categories of data (such as health, religious or biometric data) and ask that you do not send us such data.
Your personal data is processed for the following purposes: establishing and performing the service contract between you and Shofic (receiving your order, delivering the purchased service, applying refill guarantees and processing refunds); communicating with you about your orders and responding to support requests; complying with legal obligations such as commercial record-keeping, tax and accounting requirements; preventing fraud, payment abuse and misuse of the platform; and improving the security, stability and quality of the site.
The corresponding legal bases under KVKK Articles 5 and 6 are: processing necessary for the establishment or performance of a contract; processing necessary for compliance with a legal obligation; processing necessary for the legitimate interests of the controller, provided your fundamental rights are not harmed; and, where none of the foregoing applies (for example optional marketing emails), your explicit consent, which you may withdraw at any time with effect for the future.
Personal data is collected through automatic and partially automatic means: the forms you fill in on the site (checkout, registration, contact and support forms), confirmation messages transmitted to us by payment providers after you complete a payment on their systems, and server logs generated automatically as you browse. We do not purchase personal data from data brokers and we do not enrich your profile from external sources.
We share personal data only where necessary to operate the service, and only with: payment service providers, which process card, bank-transfer and cryptocurrency payments over encrypted connections; hosting and infrastructure providers that store our systems and databases; and communication providers used to send order and support emails. Each recipient processes data under contractual confidentiality and security obligations and only on our documented instructions.
Because Shofic operates from the United Arab Emirates and uses international infrastructure providers, your data may be transferred to and stored in countries other than your country of residence. Where the data of Türkiye-resident customers is transferred abroad, we rely on the mechanisms permitted by KVKK Article 9, including your explicit consent where required, and we apply the same security standards regardless of where the data is held. We may also disclose data where a competent court or authority lawfully requires it.
We keep personal data only for as long as the purpose of processing requires. Order and payment-confirmation records are retained for the period required by applicable commercial, tax and accounting legislation. Account data is kept while your account remains active and is deleted or anonymized following account closure, subject to the statutory retention obligations above. Support correspondence is retained for as long as needed to resolve the matter and to evidence how it was handled. Technical logs are kept for short, rolling periods for security purposes. When a retention period expires, data is deleted, destroyed or irreversibly anonymized.
Under KVKK Article 11 and comparable data-protection rules, you have the right to: learn whether your personal data is being processed; request information about the processing; learn the purpose of processing and whether the data is used in line with that purpose; know the third parties, at home or abroad, to whom your data has been transferred; request correction of incomplete or inaccurate data; request deletion or destruction of data when the reasons for processing no longer exist; request that corrections and deletions be notified to third parties who received the data; object to a result produced exclusively by automated analysis of your data that is against your interests; and claim compensation for damage caused by unlawful processing.
You may exercise any of the rights above free of charge by sending a written request to info@shofic.com from the email address linked to your order or account, or through the contact page. Please describe your request clearly and include an order ID where relevant, so that we can verify your identity and locate your records; we may ask for reasonable additional verification before disclosing data. Requests are answered as soon as possible and in any event within thirty (30) days of receipt. If a request is refused in whole or in part, we will state the legal reason for the refusal.
We apply technical and organizational measures proportionate to the risks of the data we process: all traffic between your browser and the site is encrypted with TLS; payment operations take place on the encrypted systems of specialized payment providers; access to production systems and customer records is restricted to authorized personnel on a need-to-know basis; and systems are monitored and updated against known vulnerabilities. No system can be guaranteed absolutely secure, but if a breach occurs that is likely to affect your rights, we will notify the competent authority and affected users as required by applicable law.
If you believe your personal data has been processed unlawfully, please contact us first at info@shofic.com so that we can investigate and remedy the issue. If you are not satisfied with our response, customers residing in Türkiye may lodge a complaint with the Turkish Personal Data Protection Authority (KVKK Kurumu) under the conditions and time limits set out in the law, and customers in other jurisdictions may apply to the data-protection authority competent for their place of residence. Nothing in this notice limits your statutory complaint rights.
We may update this notice to reflect changes in our services, providers or legal obligations. The current version, with its last-updated date, is always published on this page. Material changes will be highlighted on the site; continued use of the service after publication of an updated notice signifies that you have been informed of the change. We encourage you to review this page periodically.