This document is the published summary of the retention and destruction policy referenced in section 7 of our Privacy Policy. It is maintained under Article 7 of the Turkish Personal Data Protection Law No. 6698 (KVKK), the Regulation on the Deletion, Destruction or Anonymisation of Personal Data, and Article 5(1)(e) of the GDPR.
1. Purpose & scope
The policy covers all personal data processed by Stratejik İşler in the Hi Networking platform, its marketing website, support channels and internal systems, whether stored in the database, object storage, e-mail or third-party processors listed on our Subprocessors page.
2. Retention periods
| Data category | Retention period | Note |
|---|---|---|
| Account & profile data | Membership + 30 days | Deleted on account closure |
| Contacts, notes, timeline entries | Membership + 30 days | Deleted with the account |
| Voice notes & transcripts | Until you delete them, max. membership + 30 days | Hard delete from storage |
| Intro videos | Until you delete them, max. membership + 30 days | Hard delete from storage |
| Billing & invoice records | 10 years (Law 6098) / 5 years (Tax Procedure Law) | Legal retention, access restricted |
| Electronic commerce records | 3 years (Law 6563 & secondary legislation) | Legal retention |
| Consent records (cookies, marketing) | Consent + 10 years or until withdrawal is time-barred | Kept to evidence lawfulness |
| Security & audit logs | 12 months (24 months for admin audit trails) | Rolling deletion |
| Technical logs / IP data | Up to 12 months | Rolling deletion or hashing |
| Support & KVKK application records | 5 years from closure | Legal defence interest |
| Aggregated product analytics | Indefinite once anonymised | Anonymised, no longer personal data |
3. Periodic destruction cycle
Where no request is made, data whose retention period has expired is deleted, destroyed or anonymised in periodic destruction cycles run at six-month intervals (June and December), in line with Article 11 of the Regulation. Deletion requests received from data subjects are completed within 30 days.
4. Deletion, destruction & anonymisation methods
- Deletion: rows removed from the production database and purged from backups at the end of the backup rotation window (maximum 35 days).
- Destruction: files removed from object storage; media renders and derivatives removed with the source object.
- Anonymisation: identifiers stripped or irreversibly hashed so the record can no longer be linked to a person, after which it is retained only in aggregate form.
5. Responsibility
The KVKK İrtibat Kişisi / Data Protection Contact at Stratejik İşler owns this policy, maintains the retention matrix above, and records each periodic destruction run.
6. Contact
Requests concerning retention or deletion can be made through the KVKK application form or by e-mail to privacy@hinetworking.com.