Privacy Policy
How Followoid collects, uses, shares, and protects your personal data — covering both Turkish KVKK and UK GDPR obligations.
Dual Jurisdiction Notice: Followoid operates under two legal entities — Serkan Kısa (Sole Proprietorship) in Turkey and Kisa Digital LTD (Companies House: 17087896) in the United Kingdom. This policy covers both jurisdictions.
Last Updated: 22 August 2026
Data Controllers
| Turkey | Serkan Kısa (Sole Proprietorship) · Tax No: 5581289828 · Atatürk Mah. Ertuğrul Gazi Sok. Metropol İstanbul Sitesi C1 Blok Kat 25, No:376, Ataşehir / Istanbul |
|---|---|
| United Kingdom | Kisa Digital LTD · Companies House: 17087896 · Office 17814, 182-184 High Street North, East Ham, London E6 2JA |
| info@followoid.com | |
| Phone | +90 850 307 6920 |
1. Overview
Your personal data is processed in accordance with this policy in connection with the social media growth services (Instagram, TikTok, YouTube, Twitter/X, Spotify, and other platforms — followers, likes, views, comments, saves, and similar engagement services) offered through the followoid.com domain.
2. Personal Data We Process
| Category | Examples | Source |
|---|---|---|
| Identity | First name, last name, username | Registration form |
| Contact | Email address, phone number | Registration / support form |
| Account & Security | Hashed password, IP address, session data | Automatic |
| Payment | Transaction reference, payment method (card number is never stored) | Payment provider |
| Order | Order ID, service type, quantity, amount, status | Platform usage |
| Target Account | Instagram / TikTok / YouTube username or profile URL | Order form |
| Technical | IP address, browser, device type, visit timestamp | Automatic / cookies |
| Communications | Support tickets, complaints | User |
3. Purposes and Legal Bases
| Purpose | KVKK Basis | UK GDPR Basis |
|---|---|---|
| Creating and managing membership | Art. 5/2(c) – Contract | Art. 6(1)(b) |
| Order processing and delivery | Art. 5/2(c) – Contract | Art. 6(1)(b) |
| Payment processing | Art. 5/2(ç) – Legal obligation | Art. 6(1)(c) |
| Customer support | Art. 5/2(f) – Legitimate interest | Art. 6(1)(f) |
| Security and fraud prevention | Art. 5/2(f) – Legitimate interest | Art. 6(1)(f) |
| Legal obligations (tax, accounting) | Art. 5/2(ç) – Legal obligation | Art. 6(1)(c) |
| Marketing (with consent) | Art. 5/1 – Explicit consent | Art. 6(1)(a) |
| Platform analysis and improvement | Art. 5/2(f) – Legitimate interest | Art. 6(1)(f) |
4. Sharing with Third Parties
- SMM Supplier Panels: Only the target account information (username / URL) and order details are shared for delivery purposes. No identity or payment data is passed.
- Payment Providers: iyzico, PayTR, Stripe, and similar PCI-DSS compliant providers. Card numbers are never stored by us.
- Infrastructure Services: Server hosting, CDN, and email delivery providers.
- Analytics Tools: Anonymous site usage statistics (e.g. Google Analytics).
- Legal Requirements: Competent public authorities when required by court order or applicable law.
5. Retention Periods
| Data Category | Retention Period |
|---|---|
| Membership and account data | Duration of active account + 3 years |
| Order and transaction history | 10 years (Turkish Tax Procedure Law and commercial law) |
| Payment records | 10 years (Laws No. 5411 and 6493) |
| Support correspondence | 3 years |
| Technical / log data | 1 year |
| Marketing consent | Until consent is withdrawn |
Section A — Turkey: Your Rights under KVKK Art. 11
Under Law No. 6698 (KVKK), you have the right to:
- Learn whether your personal data is being processed
- Request information about the processing if it is
- Learn the purpose of processing and whether data is used in accordance with that purpose
- Know the third parties to whom data has been transferred, domestically or abroad
- Request correction of incomplete or inaccurate data
- Request deletion or destruction of data where the legal conditions are met
- Object to a decision made solely by automated means that is to your detriment
- Claim compensation for damage suffered due to unlawful processing
Submit requests in writing to info@followoid.com. Requests are answered within 30 days.
Section B — United Kingdom: Your Rights under UK GDPR
Under the UK GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Complaints may be submitted to the Information Commissioner's Office (ICO) at ico.org.uk.
6. Security
Your data is protected by SSL/TLS encryption, secure server environments, access controls, and regular security audits. Payment processing takes place over PCI-DSS compliant infrastructure.
7. Children's Data
Our services are not directed at persons under the age of 18. If we discover that a minor is registered, the account will be closed immediately and the data deleted.
8. Policy Updates
We reserve the right to update this policy without prior notice. Material changes will be communicated by email or platform notification.
9. Contact
For privacy-related questions and requests: info@followoid.com · +90 850 307 6920