Data Deletion Instructions

1. Overview

This page describes how personal data collected through the Birtusla platform can be deleted. Under Turkish Law on the Protection of Personal Data No. 6698 (KVKK) and Meta Platforms requirements, you have the right to request deletion of data associated with your account.

2. Who Can Request Deletion?

• End Customer: Anyone who placed an order through WhatsApp/web/QR with a business using Birtusla.
• Business Owner / Manager: A registered business account holder on the Birtusla SaaS panel.
• Legal Representative: An authorized third party acting on behalf of the above.

3. How to Request Deletion

3.1. By Email

Send your deletion request to:

• Email: info@birtusla.com
• Registered Email (KEP): elektronix@hs01.kep.tr

Please include:

• Your full name
• The phone number you used (including WhatsApp)
• The name of the business you ordered from (if any)
• Subject: "Request for data deletion"
• Identity verification document (may be requested if needed)

3.2. Via WhatsApp

Send the message "DELETE MY DATA" to the Birtusla order line via WhatsApp. The system will send you a confirmation message; upon your approval, the deletion process begins.

3.3. Via the Business Panel (Business Owners)

Sign in at app.birtusla.com and:

• Go to Settings → Account → "Delete My Account"
• Or write directly to info@birtusla.com

4. Data That Will Be Deleted

• Name, surname and contact details (phone, email)
• Delivery address and location data
• WhatsApp profile information and message history
• Order notes and personal preferences
• Account profile (for business accounts: user info, session records)
• Marketing consents and preferences

5. Data Retained for Legal Reasons

Some records continue to be retained even after a deletion request, due to legal obligations:

• Invoices & financial records: Retained for 5 years together with identifying information under Law No. 213 (Turkish Tax Procedure Law). This is a legal obligation and these records fall outside the scope of deletion requests.
• Message content: Retained for a maximum of 6 months from the completion of the related order; at the end of this period it is deleted or anonymized.

Data whose legal retention period has expired is permanently deleted at the end of that period.

6. Process & Timeline

1. Request received: Email confirmation sent within 24 hours.
2. Identity verification: Verification information requested if needed.
3. Processing: Deletion completed within 30 calendar days after verification.
4. Confirmation: You will be notified by email when the process is complete.

7. Third-Party Data

• Meta Platforms (WhatsApp Business API): Messages and metadata on Meta's own infrastructure are subject to Meta's retention policies. You can also contact WhatsApp/Meta directly for your data on the Meta side (see section 9 below).
• The business you ordered from: For copies in the business's own records, you may need to contact that business separately.
• Courier / Logistics: Courier location data is deleted within a maximum of 30 days after delivery is completed.
• Cloud infrastructure providers: Up to an additional 30 days is allowed for full deletion including backups.

8. When Deletion May Be Refused

• Data retained under an active legal proceeding or investigation
• An ongoing order, courier process, or unresolved dispute
• Before the mandatory retention period under tax law has expired
• Identity claims that cannot be verified

9. Meta Platforms (Facebook / WhatsApp)

• For your data on the Meta side, you can also contact WhatsApp/Meta directly: WhatsApp Help Center
• For WhatsApp Business API, message retention on Meta's own side is subject to Meta's default policies.

10. Objections & Complaints

• Turkish Data Protection Authority (KVKK): www.kvkk.gov.tr