TALKIDS PRIVACY POLICY

This Privacy Policy has been prepared to explain the data security practices within the scope of online therapy services, digital content, physical product sales, and expert management infrastructure offered by the Talkids digital platform (“Platform”).

This policy has been created in compliance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and relevant health legislation.

The KVKK Disclosure Text has been prepared as a separate document, and this policy explains the data security practices and technical-administrative measures.

1. DATA SECURITY COMMITMENT

Talkids:

     •           To prevent the unlawful processing of personal data,

     •           To prevent unauthorized access,

     •           To protect the integrity and confidentiality of data,

     •           To protect health data with special security measures

It takes all necessary technical and administrative measures for this purpose.

In particular, special categories of personal data (health data) are protected within the scope of enhanced security measures.

2. TECHNICAL SAFETY MEASURES

The following technical measures are implemented in the platform infrastructure:

2.1. Encryption

     •           SSL/TLS 256-bit encryption is used during data transmission.

     •           Sensitive data stored on the server is protected using cryptographic methods.

     •           Passwords are stored using irreversible hash algorithms.

     •           Payment information is processed through PCI-DSS compliant payment institutions.

2.2. Server and Infrastructure Security

     •           The platform is hosted in secure data centers.

     •           Server access is restricted with role-based authorization.

     •           Firewall and intrusion detection systems are actively used.

    •           Regular penetration tests and security checks are performed.

If server location and overseas transfer are involved, this is carried out with explicit consent within the scope of Article 9 of the KVKK (Personal Data Protection Law).

2.3. Log and Recording System

On the platform:

     •           Session logs,

     •           IP information,

     •           Transaction history,

    •           Appointment activity,

     •           Payment transactions,

     •           Consent and explicit approval records

is logged.

Log records:

    •           Resolving legal disputes,

     •           Detecting security breaches,

     •           Preventing unauthorized access

is stored for this purpose.

Only authorized technical personnel can access log records.

3. PROTECTION OF HEALTH DATA

Special categories of personal data that may be processed within the scope of the platform:

     •           Mental health information

     •           Development assessment information

     •           Session notes

     •           Therapy content

     •           Video recordings (if any and with explicit consent)

This data:

     •           Protected with a limited access model.

     •

     •         May be stored in separate database segments.

     •           Will not be shared with third parties without explicit consent.

Health data is processed only for the purpose of providing the service and in accordance with the legislation.

4. ADMINISTRATIVE SECURITY MEASURES

Talkids:

     •           Provides regular data security training to employees.

     •           Has confidentiality agreements signed.

     •           Restricts access rights.

     •           Implements internal control and audit mechanisms.

     •           Establishes contractual security provisions with data processors.

5. THIRD-PARTY SERVICE PROVIDERS

The platform may operate the following services through third-party providers:

     •           Payment infrastructure

     •           Cloud hosting service

     •           Email service providers

     •           Analytical services

Data processing agreements are made with these service providers and the necessary security commitments are obtained.

6. DATA BREACH PROCEDURE

In case of any data breach:

        1.        The incident is immediately analyzed by the technical team.

        2.        A risk assessment is performed.

        3.        If necessary, relevant individuals are notified.

       4.       Notification is made to the KVKK Board within the period stipulated in the legislation.

         5.       Technical and administrative measures to mitigate the effects of the breach are implemented.

Talkids adopts a zero-tolerance policy against data breaches.

7. STORAGE AND DESTRUCTION

Personal data:

     •           During the service period,

     •           For the periods stipulated in the relevant legislation

is stored.

When the storage period expires:

     •           Deletion,

     •           Destruction,

     •           Anonymization

One ​​of the methods is applied.

Destruction processes are recorded.

8. CONFIDENTIALITY AND PROFESSIONAL SECRECY

Therapy processes conducted through the platform:

     •           Are evaluated within the scope of the principle of professional confidentiality.

     •           Therapists are subject to professional ethics and the obligation of confidentiality.

     •           The platform does not interfere with the content of therapy. does not.

9. UPDATE

This Privacy Policy may be updated in accordance with legislative changes or system updates.

The updated text will be published on the Platform.

10. CONTACT

For questions regarding the Privacy Policy:

Email: info@talkids.com.tr