Legal
Privacy Policy & Cookie Notice
Draft updated: 22 September 2026
This notice explains how personal information is handled when you visit Miftah Al-Arabiyya, use an account, access digital books or contact us. It also describes cookies and the placement test’s browser storage.
1. Who is responsible?
The website operator and data controller is the company identified below. Contact us using these details about your information or this notice.
Akdemistanbul Eğitim Yayıncılık ve Dan.Hiz.Tur.Org.Tic.Ltd.Şti.Akşemsettin Mahallesi, Akdeniz Caddesi No: 99, Fatih, İstanbul, Türkiye
info@miftahalarabiyya.com
2. Information and purposes
Account services involve your name, email address, sign-in information, verification or password-reset requests, and book-access or subscription status. These details support account administration, authentication and access to the content available to your account.
When you contact us, we handle the information in your message to respond and resolve the request. Technical connection and security records, where generated by the hosting service, support site operation, troubleshooting and protection against misuse. Do not send unnecessary sensitive information in support messages.
3. Legal grounds
Under Türkiye’s Personal Data Protection Law No. 6698, account and access processing may be necessary to establish or perform the relevant service contract. Security and proportionate troubleshooting may rely on legitimate interests, subject to your fundamental rights. Legal obligations and the establishment or protection of rights may require specific records. Consent is used only where a separate optional activity requires it; accepting website terms is not consent to unrelated processing.
4. Cookies and local storage
The company has confirmed that the intended website uses necessary login and security cookies only, without analytics or advertising cookies. The following two first-party cookies were observed on the public website on 22 September 2026. Their normal lifetime is two hours and can be renewed as you use the service.
The redesigned placement test saves the optional learner identifier, answers, flags and timing information in this browser under miftah-placement-attempt-v1. This test implementation does not submit those answers to our server. The record remains until you clear the attempt or browser site data. Clear it before someone else uses a shared device.
You can delete stored data or control cookies through your browser settings. Blocking necessary cookies may prevent sign-in or other essential functions. If optional tracking is introduced later, this notice and any legally required consent controls must be updated before that tracking begins.
| Name | Purpose | Lifetime |
|---|---|---|
akdem_session | Maintains the website session and authenticated access. | Up to 2 hours, renewable |
XSRF-TOKEN | Helps protect requests and forms against cross-site request forgery. | Up to 2 hours, renewable |
5. Recipients and external services
Information needed to operate the service may be handled by authorized hosting, maintenance and email-service providers under appropriate instructions and safeguards. Information may also be disclosed where lawfully required by a competent authority. The company must confirm the actual provider categories, destinations and any international-transfer mechanism before this notice is finalized.
Book viewers, shop links, trial-request forms, map links and social services can take you to another domain. The relevant provider’s notice applies to information you give that provider. This notice does not substitute for the seller’s checkout or privacy information. Opening a link does not authorize unrelated use of your account data.
6. Retention and protection
Records should be kept only for the period needed for their stated purpose and any applicable legal, accounting or dispute obligations, then deleted, destroyed or anonymized when no lawful retention basis remains. Account, support and security-record retention schedules must be confirmed by the company; this draft does not invent fixed periods.
Access to personal information should be limited to authorized people who need it for their work, with proportionate technical and organizational safeguards. No online system can promise absolute security. Contact us promptly if you suspect account misuse.
7. Your rights and requests
Subject to the applicable law, you may ask whether your data is processed, obtain information about it and its purposes, learn recipients, request correction, and seek deletion or destruction where the legal conditions apply. You may ask for relevant corrections or deletions to be notified to recipients, object to an adverse result based solely on automated analysis and seek compensation for unlawful processing.
Send requests to the contact details above, preferably using your registered email address. We may request proportionate identity verification and will explain any formal application requirements. Requests are handled within the applicable statutory period. Your right to complain to the competent data-protection authority remains unaffected.
8. Learners and updates
A parent, guardian or responsible educator should supervise use where a learner cannot validly manage an account independently. Use an optional learner code rather than unnecessary identifying details in the placement test. Tell us if a child’s information has been supplied inappropriately.
The date above identifies this draft. Material changes to processing should be reflected in the notice and communicated as required before the new processing begins.
