Tomrin — Data Deletion Requests

How to request data deletion

1. Email info@softcaveware.com, Tomrin’s official business contact address.
2. Use the subject “Data Deletion Request” or “Veri Silme Talebi”.
3. Preferably write from the email address associated with your Tomrin account. If you no longer have access to it, explain this so support can arrange appropriate verification.
4. State whether you want some or all of your personal data deleted. For a partial request, describe the data concerned. Identify any relevant stores to help us locate the records.
5. The support team will verify your identity and check your authority and relevant store ownership before taking action. We will explain any effect on account access before proceeding.
6. Authorized administrators will delete or anonymize eligible personal data. You will receive a response explaining the action taken, any refusal and its reasons, and any data retained under applicable legal obligations.

Do not email passwords, one-time codes, identity documents, payment card details or other sensitive credentials.

Data that may be deleted

You may request deletion of any personal data we hold about you, including:

• Personal account, profile and contact information, such as your name, email address and phone number, where held.
• Device and session information associated with you, including mobile and browser notification registrations.
• Other records containing your personal data, such as registration details and support communications.

These examples do not limit the scope of your request. Following review, eligible personal data is deleted or anonymized so that it can no longer be associated with you. The appropriate action depends on the data concerned and applicable legal obligations.

Data that may be retained

Certain records must be retained where applicable law requires it. Depending on the legal obligation and the record, these may include:

• Order, billing, accounting and payment transaction records subject to legal retention requirements.
• Registration, consent, security and audit records, where their retention is required by applicable law.

The applicable retention period depends on the legal obligation for each record. Our response explains any personal data retained and the reason. You may also request information about the applicable retention period.

Request handling and timing

Requests qualifying under the Turkish Personal Data Protection Law (KVKK) are concluded as soon as possible and no later than 30 days. The response explains acceptance or the reasons for refusal. This is not a blanket promise that every record, including information subject to a lawful retention obligation, is permanently erased within 30 days.

Your personal data and your store’s records

A Tomrin user can have access to more than one store. A request to delete your personal data does not authorize deletion of another user’s data, another organization’s records or an entire store and its business history. Ownership and authority are checked separately for each store.

Your personal data within business records is still assessed for deletion or anonymization, subject to applicable legal retention obligations. We distinguish that personal data from records belonging to other users or businesses.

Data deletion and account deletion

You may request partial or complete deletion of your personal data. Some partial requests can be fulfilled while your account remains usable. Deleting or anonymizing information needed for sign-in, such as your account email, may prevent continued account use or require account closure. We will explain these effects before proceeding. Closing a store and cancelling its subscription are separate matters; a personal-data request does not automatically perform either action.