Privacy Policy

Version date: 7 October 2026 · 2026-10-07-r3

This English translation is provided for information only. In the event of any discrepancy between the Turkish and English versions, the Turkish version shall prevail.

1. Scope

This policy explains how Gloyd Teknoloji Anonim Şirketi protects customer information and technical files on the Glodely platform. The purposes and legal bases of personal data processing, recipients and data subject rights are explained in the Personal Data Processing Notice; browser technologies are explained in the Cookies and Similar Technologies Policy.

2. Use of technical and commercial information

A file selected in the free Gerber viewer is processed on your device and is not sent to a server merely for viewing. If you continue to obtain a price or configure an order using that file, the configurator uploads it to the server; the review and sharing rules below apply from that stage.

Gerber, BOM, placement, drawing and programming files and order information are used for the requested pricing, preliminary review, production, quality control, delivery and support activities. Access to files is restricted to persons whose duties require it.

Files are shared with the overseas production partner and suppliers as necessary for these activities. A preliminary review may involve sending a file to the overseas production partner before an account is opened or a sales contract is concluded. PCB and SMD stencil files are sent under a Glodely serial number instead of their original filenames; the name, email address, telephone number and address in the customer's account are not added to this production transfer. File contents are not altered, so any names, contact details and annotations in a file are included in the transfer. Files should not contain personal information unnecessary for the work.

Products are manufactured abroad and transported to Istanbul by international air freight. Gloyd handles import and customs formalities as the importer. Customer identity and contact details are not sent to the overseas warehouse, the domestic carrier in China or the international carrier; shipments are transported using the Glodely order number and Gloyd's contact details. An order number can be linked to a customer through Gloyd's records and is therefore not treated as anonymous data. Delivery within Türkiye is made to the address by Yurtiçi Kargo or by collection from the Ankara office.

Technical files are not used for advertising, portfolios, sale to third parties or production for other customers without separate permission. Intellectual property rights in a file remain with the rights holder. Statutory retention and disclosure obligations to competent authorities remain applicable.

3. Payment and account security

Card payments are collected through the virtual POS systems of Türkiye Garanti Bankası A.Ş. and QNB Bank A.Ş., using 3D Secure. Card details are sent from the form on the payment page directly to the bank and do not reach Gloyd's servers. If the saved-card feature is selected, the card is stored by the bank; Gloyd does not store the full card number or card security code and retains only the bank's token reference and the masked card number. A saved card can be removed at any time from the payment methods page by the workspace owner or an administrator. QNB eSolutions is used for e-Invoice, e-Archive and e-Delivery Note services, not for payment collection.

Sign-in is available using an email address and verification code, a password, Google or LinkedIn. For Google or LinkedIn sign-in, the provider's profile photo, ID token and access and refresh tokens are not stored. Two-step verification is optional. A security notification is sent when a new device is used to sign in. The owner and administrators of an organisation workspace invite members and set their permissions; access to workspace orders is governed by those permissions.

Gloyd takes appropriate technical and organisational measures to prevent unlawful processing and unauthorised access to personal data. Users should protect their account access details and report suspicious activity through the support channel.

4. Cookieless usage and performance measurement

Vercel Web Analytics and Speed Insights are used on the production website to measure usage and performance. The following information is transmitted for measurement: the page path with order numbers and link codes replaced by placeholders and the query string removed; the referring site's address (browsers mostly pass only its origin); country, device type, operating system, browser, and page loading and response times.

These measurement tools do not write cookies or other information to the device and do not track users across other websites. Sign-in, registration, operator and administration pages are excluded from measurement. Measurement runs only on the production website. Its purpose is to assess use of the service and improve its performance. The legal basis is Article 5(2)(f) of Turkish Law No. 6698, concerning Gloyd's legitimate interests, provided that the data subject's fundamental rights and freedoms are not harmed. The recipient and overseas processing information are explained in the Personal Data Processing Notice.

5. Notifications and retention

Account, security, order, payment and delivery notifications are sent to carry out the relevant transaction. Marketing messages are not included in these notifications. Acceptance of a contract does not constitute marketing permission. Customers can switch off optional notification categories in their notification preferences; security notifications, contract acceptance and order and payment notifications cannot be switched off.

Information is retained for the periods necessary for its purposes and statutory obligations. When an account is closed, records subject to statutory retention are kept for the applicable periods; other information enters the deletion and destruction process. Retention periods by record type are explained in the Personal Data Processing Notice. A copy of a file sent to the production partner is subject to the partner's own retention rules and is not deleted at the same time as the copy held by Gloyd.

6. Contact and updates

General support: destek@glodely.com. Personal data requests: kvkk@glodely.com. Address: İlkbahar Mah. Güneypark Küme Evleri No:19B/12, 06550 Çankaya/Ankara, Türkiye. Telephone: +90 850 840 65 78. Registered electronic mail (KEP): gloydteknoloji@hs01.kep.tr.

If a processing purpose changes, data subjects are provided with updated information and the legal requirements for the new processing are fulfilled.