Privacy Policy
Last updated: May 2026
1. Data controller and contact
The data controller for this privacy notice is NOWTOPRINT BASKI ÇÖZÜMLERİ SANAYİ VE TİCARET LTD.ŞTİ (vergi dairesi: Üsküdar Vergi Dairesi, vergi no: 6321579148, merkez adres: Acıbadem Mahallesi Derin Sokak A Blok No: 8A İç Kapı No: 150, Üsküdar, İstanbul, Türkiye), a company incorporated in Türkiye. Personal data requests can be submitted through support@nowtoprint.com, the NowToPrint contact page, or by written notice to Acıbadem Mahallesi Derin Sokak A Blok No: 8A İç Kapı No: 150, Üsküdar, İstanbul, Türkiye.
2. Data we process
The platform processes personal data in the following categories: (a) Account data: name, email address, telephone number, company information, user role; (b) Communication data: support requests, in-platform messages; (c) RFQ (request for quote) data: job descriptions, technical specifications, quantities, delivery information; (d) File and PDF preflight data: uploaded files, preflight analysis results, file metadata; (e) Producer offer data: price quotations, production capacity information, lead-time declarations; (f) Payment and invoicing data: billing address, tax identification number, payment method details, transaction records; (g) Support data: customer service correspondence, feedback; (h) Security, log and cookie data: IP address, browser information, session data, access logs, cookie identifiers.
3. Purposes of processing
Your personal data is processed for the following purposes: operation of the platform and provision of services; creation of RFQs, producer matching and management of the quotation process; provision of the PDF preflight service; processing of payments and invoicing; compliance with legal obligations; service quality improvement and analytics; implementation of security measures and prevention of fraud; handling of customer support requests. Data is not processed for purposes other than those specified herein.
4. Legal bases (KVKK and GDPR where applicable)
Your personal data is processed on the following legal bases: (a) Performance of a contract (KVKK Art. 5/2-c, GDPR Art. 6(1)(b) where applicable): processing necessary for the provision of platform services and the execution of RFQ processes; (b) Legal obligation (KVKK Art. 5/2-ç, GDPR Art. 6(1)(c) where applicable): compliance with tax, accounting and statutory reporting obligations; (c) Legitimate interest (KVKK Art. 5/2-f, GDPR Art. 6(1)(f) where applicable): ensuring platform security, fraud prevention and service improvement analytics; (d) Explicit consent (KVKK Art. 5/1, GDPR Art. 6(1)(a) where applicable): marketing communications and non-essential cookies. Consent may be withdrawn at any time.
5. Data recipients
Your personal data may be shared with the following categories of recipients: (a) Service providers: hosting, cloud infrastructure, email delivery and analytics partners; (b) Payment service providers: licensed institutions that process payment transactions; (c) Print producers: producer firms matched to provide quotations and fulfil orders within the RFQ scope; (d) Shipping and logistics companies: for the provision of delivery services; (e) Legal and accounting advisors: in the context of fulfilling legal obligations; (f) Public authorities: competent administrative and judicial authorities where required by law. Data processing agreements are concluded with all third-party recipients.
6. International data transfers
NowToPrint is a Türkiye-based company. Data may be processed in Türkiye, the EU/EEA or other countries depending on the technical location of the cloud infrastructure and service providers used. For international data transfers under KVKK, transfers are carried out in accordance with the decisions of the Personal Data Protection Board (KVKK Kurul) and applicable legislation. Where the GDPR applies, appropriate safeguards are provided pursuant to Art. 46 GDPR, including Standard Contractual Clauses (SCCs) or European Commission adequacy decisions. Appropriate technical and organisational measures are implemented for every country and recipient to which data is transferred.
7. Retention periods
Your personal data is retained for the period necessary to fulfil the processing purpose and in accordance with statutory retention obligations. Account data is retained until the expiry of statutory retention periods following account closure. Commercial books and invoice records are retained in accordance with the Turkish Commercial Code, the Tax Procedure Law and other applicable legislation. RFQ and order data is retained for the applicable limitation periods following termination of the contractual relationship. Data that has exceeded its retention period is securely deleted or anonymised.
8. Security measures
Industry-standard technical and organisational security measures are implemented to protect your personal data. These measures include TLS encryption in transit, server-side data encryption, access control mechanisms, regular security audits and penetration testing, staff training and authorisation policies. In the event of a data breach, affected individuals and competent authorities shall be notified within the time limits prescribed by KVKK Art. 12 and, where applicable, Art. 33–34 GDPR.
9. Cookies and similar technologies
The platform uses essential cookies (session management, security), functional cookies (language preferences, user settings) and analytics cookies (usage statistics). Essential cookies are necessary for the basic operation of the platform and do not require consent. Functional and analytics cookies are activated only with the user's explicit consent. You may change your cookie preferences at any time via our cookie management panel. Where third-party analytics services are used, their own privacy policies also apply.
10. Data subject rights (KVKK and GDPR)
Under KVKK Art. 11 and, where applicable, Art. 15–22 GDPR, you have the following rights: to obtain confirmation as to whether your personal data is being processed; to request information about such processing; to learn the purpose of processing and whether data is used in accordance with that purpose; to know the third parties to whom data has been transferred domestically or internationally; to request rectification of inaccurate or incomplete data; to request erasure or destruction under KVKK Art. 7 and GDPR Art. 17 where applicable; to request restriction of processing; the right to data portability; to object to automated decision-making; and to claim compensation for damage caused by unlawful processing.
11. Requests and complaints
Privacy and personal data requests can be submitted with information suitable to verify your identity through the NowToPrint contact page, support@nowtoprint.com, or by written notice to Acıbadem Mahallesi Derin Sokak A Blok No: 8A İç Kapı No: 150, Üsküdar, İstanbul, Türkiye. Requests are answered as soon as reasonably possible and within applicable statutory periods. Please include the relevant account, quote request, or transaction context where possible.
12. Children's data
NowToPrint is a business-to-business (B2B) marketplace and is not intended for use by individuals under the age of 18. Personal data is not knowingly collected from minors. If personal data belonging to a child is found to have been collected inadvertently, such data will be deleted immediately and the requisite legal notifications will be made.
13. Changes
This Privacy Policy may be updated to reflect changes in legislation, platform features or business processes. Material changes will be communicated to users via in-platform notification and/or email before taking effect. The updated policy takes effect on the date of its publication on the platform. Users are encouraged to review this policy periodically.
14. Updates
This privacy notice may be updated to reflect platform features, data processing activities, service providers or legal changes. The current version takes effect when published on the website.