Privacy Policy

At Offshore, we place the highest importance on safeguarding our clients’ personal data and financial information. This Privacy Policy outlines how we collect, use, store, and protect your data in accordance with the Personal Data Protection Law (KVKK), the General Data Protection Regulation (GDPR), and applicable Turkish Banking laws.

We collect personal information during account registration, loan applications, KYC processes, and general banking interactions. This includes your full name, address, identification details, phone number, biometric data (if enrolled), transaction records, location data during digital logins, and communication history with our support team. We only collect information necessary for account servicing, compliance, and fraud prevention.

All data collected is stored on secure servers using bank-grade encryption, protected by firewalls, multi-factor authentication (MFA), and continuous threat monitoring. Access to your information is limited to authorized personnel bound by confidentiality agreements, and our systems undergo regular penetration testing and risk assessments.

We do not sell, lease, or disclose client data to third parties for marketing purposes. In certain circumstances, we may share data with trusted vendors or service providers (such as credit bureaus, card processors, or IT partners), but only under strict data handling agreements and only when absolutely necessary for banking operations.

Clients have the right to access their personal data, correct inaccuracies, or request deletion under applicable privacy laws. Data subject requests must be submitted in writing through secure channels. In cases where data must be retained for legal or compliance reasons (e.g., financial transaction logs), the request may be partially fulfilled with documented reasoning.

Cookies and analytics tools are used on our websites and apps to enhance user experience, but no personally identifiable information is captured without your consent. You may adjust cookie settings through your browser at any time.

We maintain detailed records of all data processing activities, and any suspected data breach will be immediately investigated, reported to regulators, and disclosed to affected clients in a transparent manner as required by law.

This policy is reviewed and updated regularly in line with technological developments, changes in regulation, and evolving security standards. We encourage all clients to review our full privacy practices periodically and to contact our Data Protection Officer for clarifications or concerns regarding your data rights.