Who We Are

The data controller for Mustyy Boxing is Mustafa Altin, based in Turkey. Questions or privacy requests can be sent using the details below.

Data We Collect

• Contact data: name, email address, phone number and message content.
• Account data: login identifiers, plan status and account preferences when accounts are enabled.
• Transaction data: order, subscription and billing status supplied by the checkout provider. We do not store full payment card numbers.
• Technical data: IP address, browser, device, security logs, cookie choices and website usage data.
• Training data: goals, experience level and information you choose to share. Please do not submit medical records through general forms.

How We Use Data

• Provide requested content, accounts and customer support.
• Process enquiries, applications and partnership requests.
• Administer subscriptions and confirm access where paid services are enabled.
• Protect accounts, prevent fraud and maintain website security.
• Measure and improve the website only where consent or another valid legal basis applies.
• Meet legal, tax and regulatory obligations.

Legal Bases

Depending on the context, processing is based on performance of a contract or steps requested before a contract, compliance with legal obligations, legitimate interests such as security and service improvement, or consent. Consent can be withdrawn at any time without affecting earlier lawful processing.

Sharing And Transfers

Data may be shared only as needed with hosting, email, security, analytics, professional advisers and payment service providers. If Paddle checkout is enabled, Paddle acts as Merchant of Record for the transaction and processes buyer information under its own buyer terms and privacy notice.

Providers may process data outside Turkey or your country. Where required, we use an appropriate transfer mechanism and safeguards.

Retention

We keep personal information only for as long as necessary for the purpose collected, including legal, accounting, security and dispute requirements. Enquiries are normally reviewed for deletion when no longer needed; transaction records may be retained for the statutory period that applies.

Your Rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability or information about processing. You may withdraw consent and complain to the competent data protection authority. In Turkey, rights under Article 11 of Law No. 6698 may apply.

Send requests to the email above. We may ask for reasonable proof of identity before acting.

Children

The service is not directed to children who cannot lawfully consent on their own. A parent or legal guardian must supervise and provide any consent required by local law.

Changes

We may update this policy when services, providers or legal requirements change. The date at the top shows the latest version.