Privacy Policy

This is an English translation provided for convenience. In case of any discrepancy, the Turkish version prevails.

This policy explains how PNET Bilişim LTD ŞTİ (“Buluto”) collects, uses and protects information when you visit buluto.com and use our services. The statutory notice is the KVKK notice.

1. Information we collect

Information you provide (account, order, support and contact form details) and information collected automatically (IP address, browser and device data, pages visited, login records) for security and operation. Card details never reach our servers; payments are taken on the secure page of a PCI DSS compliant licensed payment institution and we only store the result and transaction ID.

2. How we use it

To provide, maintain and invoice your services, protect your account, answer your requests, send required notices (invoices, renewals, maintenance, security) and, with your consent, newsletters. We do not sell your information or share it for advertising.

3. Security

All traffic is encrypted with TLS. Passwords are stored as one-way hashes (Argon2) and sensitive values (service passwords, transfer codes, ID numbers) are encrypted in the database. SMS two-factor authentication is available in the client area and two-factor authentication is mandatory for staff. Failed logins are rate-limited and systems are patched and monitored.

4. Cookies and hosted data

We use essential cookies for sessions, the cart and language/currency preferences — see the Cookie Policy. Content you host is accessed only when needed for your support request, a security incident or a legal obligation; you are the data controller for that content.

5. Children, changes and contact

Our services are not intended for people under 18. We update this policy as needed; the current version is always on this page. Contact: [email protected] · 08508851453.