1.Who is responsible
Ahmet Hakan Özcan — Goramedya operates TurkeyB2B, a directory and sourcing platform that connects international buyers with manufacturers and exporters in Türkiye.
Registered address: İsmetpaşa Mahallesi, Kamer Sokak No: 57/A, Bayrampaşa, İstanbul, Türkiye. Registration: Tuna Vergi Dairesi — VKN 32267227326.
Data-protection questions and requests: privacy@turkeyb2b.com.
Because the operator is established in Türkiye and serves buyers in Europe and elsewhere, this policy is written to satisfy both the Turkish Personal Data Protection Law (KVKK, No. 6698) and the EU General Data Protection Regulation.
2.What we collect, and why
We collect what the platform needs to work, and nothing on the side. In practice that is four groups:
- Your account. Email address, password (stored only as a hash — we never see it), your name, your company name, your role as buyer or supplier, and your language. Needed to give you an account at all.
- What you publish. A supplier's company profile, products, images, catalogues and certifications. This is intended to be public: it is the listing buyers come to read.
- What you send through the platform. Buying requests, quotations, messages and file attachments. Needed to deliver the service you asked for.
- Verification documents. Tax number, registration number, factory address and the documents you upload to prove them. Used only to decide whether your company carries the verified badge, and stored in a private bucket that only you and our administrators can open.
3.Buying requests and your contact details
This one deserves its own section, because it is the part people are most likely to be surprised by.
When you post a buying request, the request itself — what you need, the quantity, the destination country — is shown publicly. Your name, email address, telephone number, company name and target price are not. They are stored in a separate column set that the public view of a request does not select, so they cannot appear on a page by accident.
A supplier who has been matched to your request and holds a membership that includes contact access can choose to unlock those details. When they do, the release is recorded against their company with a timestamp. This is how the platform is paid for, and it is the reason a supplier contacts you at all — but it only ever happens for a request you chose to post, and only to a supplier matched to it.
If you would rather not be contacted at all, do not post a buying request: browse the directory and approach suppliers yourself.
4.Messages and email
Messages between buyers and suppliers are stored so both sides can read the thread. Our notification emails deliberately do not quote message content — they say that a message is waiting and link to it. An email forwarded, archived or left on a shared computer should not carry your conversation with it.
5.How we measure what happens on the site
We do not use Google Analytics, advertising pixels, or any third-party tracker. There is no consent banner on this site because there is nothing to consent to beyond the cookies that make it function.
We do count how many times a company profile or a product page was opened, so that suppliers can see whether their listing is working. To avoid counting the same reader repeatedly we store a one-way hash built from the visitor's IP address, their browser's user-agent string and the current date. The IP address itself is never stored, and because the date is part of the hash the key changes every day and cannot be used to follow anyone over time.
6.Cookies
Two, both strictly necessary:
- A session cookie that keeps you signed in. It is set when you sign in and removed when you sign out.
- A language cookie that remembers which language version you were reading.
7.Payments
Membership is charged through PayTR, a licensed Turkish payment provider. Card details are entered in PayTR's own hosted form and never reach our servers — we receive only a reference, an amount and whether the payment succeeded.
Membership prices are set in US dollars and charged in Turkish lira, because that is the currency our provider settles in. We record both figures, the exchange rate used and the date it came from, so a charge on your statement can always be traced back to the price you agreed to.
8.Who else processes your data
We keep this list short on purpose, and it is complete:
- Supabase — the database, authentication and file storage that the platform runs on. Data is held in the EU (Ireland).
- Resend — sends our transactional email: confirmation links, password resets and notifications.
- PayTR — processes membership payments, when you make one.
- Our hosting provider in Türkiye — runs the web server that serves these pages.
- We do not sell personal data, and we do not share it for anyone else's marketing.
9.Errors and abuse prevention
When something breaks we record the error message, the page it happened on and the browser's user-agent string, so that we can fix it. We deliberately do not record request bodies, form contents or message text — an error log is exactly where a password ends up if you let it.
To stop automated abuse we count how often certain actions are taken, keyed by the same kind of one-way hash described above. These counters are deleted within hours.
10.How long we keep things
Your account and the content you published stay until you delete them or ask us to. Error records are deleted after 90 days at most, and abuse counters within a few hours. Payment records are kept as long as Turkish accounting law requires.
11.Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Much of it you can do yourself from your dashboard: profiles, products and requests are editable and removable there.
For anything else, write to privacy@turkeyb2b.com and we will answer within 30 days.
If you are in the EU you may also complain to your national data-protection authority; in Türkiye, to the KVKK Board.
12.Changes
This policy was last changed on 2026-09-21. If we change it in a way that affects you, we will say so on the site rather than quietly updating the date.