Data protection & privacy

Tafric operates a B2B marketplace that connects Turkish manufacturers, across every sector it lists, with verified buyers throughout Africa. For the purposes of applicable data-protection law (including Türkiye's KVKK and, where relevant, the EU GDPR), Tafric is the data controller for the information described below.

We collect only what we need to run the marketplace and keep it trustworthy:

• Account data — name, company, email, phone and role, provided when you register.
• Company & verification data — trade-registry, tax and address details used to award the Verified badge.
• Marketplace activity — product listings, requests (RFQs), offers and messages you exchange.
• Technical data — IP address, device and browser information, and cookie identifiers.
• Usage data — pages you visit, clicks, scrolling and similar interactions on the site, analysed as aggregate statistics; and, only with your cookie consent, recordings of your sessions on the public site and the supplier panel, in which form fields, email addresses and phone numbers are masked. When you are signed in, this data is linked to your account (account ID, name, company, role and plan).

We process your data to create and secure your account, publish and match listings and requests, verify companies, prevent fraud, provide support, send service and (with consent) marketing messages, and comply with our legal obligations. Our legal bases (KVKK Art. 5–6 / GDPR Art. 6) are: performance of the membership contract, our legitimate interests in running a safe marketplace, compliance with legal obligations, and (for marketing messages and non-essential cookies) your explicit consent, which you may withdraw at any time. We also analyse how the site is used in order to measure and improve features and detect errors: aggregate, cookieless statistics on the basis of our legitimate interest, and analytics cookies and session recording only with your consent (see our cookie policy). We do not sell your personal data.

The very purpose of the marketplace is to connect Turkish suppliers with buyers in Africa. Business contact details you choose to share as part of a request (RFQ) or offer are therefore visible to the counterparty in that transaction, who may be located abroad. By using Tafric for this purpose you acknowledge that such cross-border sharing is necessary for the performance of the service you request. We also use vetted processors: hosting, email delivery, analytics and session recording (PostHog, EU data region), advertising measurement (Meta, Google, only with your consent) and local verification partners, some located outside Türkiye. We engage them under written contracts (and, where required, KVKK Article 9 safeguards) that require them to protect your data and use it only on our instructions. We do not sell your personal data and do not share it for third-party marketing without your separate consent.

We keep account and transaction data for as long as your account is active and for the period required by commercial and tax law afterwards. When data is no longer needed, we delete or anonymise it.

Under Article 11 of the KVKK (and, where applicable, the GDPR) you have the right to: learn whether your data is processed and request information about it; know the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred at home or abroad; request correction of incomplete or inaccurate data; request erasure or destruction; object to results arising exclusively from automated analysis; and claim compensation for damage caused by unlawful processing. You may also withdraw any consent at any time without affecting prior processing. We answer requests within 30 days at the latest; if you are not satisfied you may complain to the Turkish Personal Data Protection Authority (KVK Kurumu). To exercise any of these rights, contact us at privacy@tafric.com.

Questions about this notice? Reach our data-protection team at privacy@tafric.com or through our contact page.