Pemt Technology

Privacy
Policy

Last updated: May 2026 · Version 1.0 · Pemt Teknoloji Yazılım Limited Şirketi

This page explains which data Chucca processes, why that data is used, how it is shared, how long it is retained, and which rights users have under applicable data protection rules.

Privacy Policy

1. Data Controller

Your personal data is processed by Pemt Teknoloji Yazılım Limited Şirketi (Istanbul, Turkey) as the data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) and applicable international data protection regulations.

2. Data We Collect

The Chucca system collects the following data:

Data Type Description
Phone number Used for identity verification and system access via WhatsApp.
Purchase amount The transaction amount at the participating merchant.
Points information Points earned, redeemed, and current balance.
Transaction history Records of where and when points were earned or redeemed.

3. Purposes of Data Processing

  • Operating the loyalty program and calculating point transactions.
  • Responding to user queries and requests.
  • Sending campaign and promotional notifications.
  • Measuring and improving service quality.
  • Fulfilling legal obligations.

4. Legal Basis for Processing

Your personal data is processed on the following legal grounds:

  • Performance of a contract: necessary to operate the loyalty program.
  • Legitimate interests: measuring and improving service quality.
  • Explicit consent: for marketing communications.

5. Data Sharing

Your personal data is shared with the relevant participating merchant solely in relation to the specific transaction you carried out at that location. Your data is not shared with third parties for marketing purposes.

Data may be shared with authorized public authorities where required by law.

6. Data Security

We apply technical and administrative security measures to protect your data against unauthorized access, loss, or disclosure. Messages transmitted via WhatsApp are subject to Meta's end-to-end encryption standard.

7. Data Retention

Your personal data is retained for as long as your membership is active, and for the period required by applicable law after membership ends. Upon expiry of that period, your data is securely deleted or anonymized.

8. Your Rights

You have the following rights regarding your personal data:

  • To learn whether your personal data is being processed.
  • To request information about how it is being processed.
  • To learn the purpose of processing and whether it is being used in accordance with that purpose.
  • To know the third parties to whom your data has been transferred.
  • To request correction of incomplete or inaccurate data.
  • To request deletion or destruction of your data.
  • To object to a decision made solely on the basis of automated processing that produces adverse effects.
  • To request compensation for damages arising from unlawful processing.

9. Contact

For questions about this Privacy Policy: contact@pemttechnology.com