Legal
KVKK Privacy Notice
Last updated: November 3, 2026
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for the Obligation to Inform. It is for everyone who uses FluxWP software, the update service or fluxwp.com. The Turkish version is the binding one.
Data controller
- Name: FluxWP
- Address: [To fill: Address]
- MERSIS no: [To fill: MERSIS no]
- Tax office / no: [To fill: Tax office / no]
- Email: hello@fluxwp.com
- Registered email (KEP): [To fill: Registered email (KEP)]
- VERBIS: [To fill: VERBIS registration]
What we process
1. Update service (on every update check)
FluxWP Panel regularly contacts our update server (updater.fluxwp.com) to see whether your FluxWP packages are up to date. Each request carries:
- the names and versions of the FluxWP plugins and themes installed,
- the FluxWP Panel version,
- a random install ID created by FluxWP Panel when it was first installed (not derived from your site or from any person),
- your site key, if you were given one,
- your IP address, as a technical part of the connection.
IP addresses are not written to statistics and are not used to identify sites. They are logged only for requests with an invalid site key, to prevent abuse. Our hosting provider’s server logs also record IP address, browser details and request time.
2. Usage data (only with your consent)
If you tick “Help us improve FluxWP” in the setup wizard or in FluxWP Panel > Settings, we also receive:
- added to update checks: site address, WordPress version, PHP version, time zone and site language, from which we derive the country,
- at most once a day, anonymous usage data sent to fluxwp.com (or the address you set in Settings): a random telemetry ID (unrelated to the site key and install ID), WordPress version, PHP major version (e.g. 8.2), site language, names and versions of active FluxWP plugins and themes, and PHP errors and warnings raised by FluxWP plugins (type, message, file path inside the plugin, line, count),
- setup wizard usage: how far the wizard got, packages picked and dropped, chosen preset and colour, whether it was finished, and roughly how long it took.
Server paths, domain names, URLs, email and IP addresses are removed from error messages before they are sent. Anonymous usage data never includes your site address, IP address, user details, email, site content or non-FluxWP plugins.
3. fluxwp.com
- Newsletter: your email address, chosen language and sign-up time. A hash of your IP address is kept for one hour to limit repeated attempts.
- Contact: emails you send us and what they contain.
- Server logs: IP address, browser details, page requested and time.
Purposes and legal grounds
| Data | Purpose | Legal ground (KVKK Art. 5) |
|---|---|---|
| Update check data | Deliver updates and packages, manage site keys | Formation and performance of a contract (5/2-c) |
| Security and server logs | Service security, abuse prevention, legal obligations | Legal obligation (5/2-ç), legitimate interest (5/2-f) |
| Usage data and wizard usage | Find bugs, measure compatibility, improve the product | Explicit consent (5/1) |
| Newsletter | Send release notes and announcements | Explicit consent (5/1) |
| Contact | Answer questions, provide support | Performance of a contract (5/2-c), legitimate interest (5/2-f) |
How we collect it
Electronically: through automatic requests that FluxWP Panel on your site sends to our servers, through forms on fluxwp.com, and by email.
Who receives it
- Hosting and infrastructure providers: the servers are located in: [To fill: Server country]. Where servers are abroad, the transfer relies on your explicit consent or the other safeguards in KVKK Art. 9.
- Email delivery service: only for the newsletter and contact.
- Competent public authorities: only when required by law.
We do not sell data, use it for advertising, or share it with third parties for marketing.
Retention
- Update statistics: daily counters 120 days, site records 180 days after the last check.
- Security log: 90 days.
- Anonymous usage data: 90 days.
- Newsletter: while you are subscribed; deleted when you leave.
- Correspondence: for the applicable limitation periods.
Data past its retention period is deleted or anonymised.
Your rights (KVKK Art. 11)
You may ask the data controller to:
- tell you whether your personal data is processed and, if so, give you information about it,
- tell you the purpose of processing and whether it is used for that purpose,
- tell you the third parties in Turkey or abroad it is transferred to,
- correct incomplete or inaccurate data,
- delete or destroy it under the conditions of KVKK Art. 7,
- notify third parties it was transferred to of such corrections or deletions,
- object to a result against you arising solely from automated analysis,
- compensate damage caused by unlawful processing.
You can withdraw consent at any time: for usage data, untick the box in FluxWP Panel > Settings, and your site address and version details are removed from our record on the next check. You can leave the newsletter with the link in every email.
How to apply
Send your request in writing to [To fill: Address], by KEP to [To fill: Registered email (KEP)], or from your registered email address to hello@fluxwp.com. We answer free of charge within 30 days. If you are not satisfied, you may complain to the Turkish Personal Data Protection Board.