Last updated: 20 August 2026

Scrolli Privacy Notice

Last updated: 20 August 2026

Scrolli Medya Anonim Şirketi ("Scrolli", "we", "us") is a media company based in Istanbul and London. As a data controller under Türkiye's Personal Data Protection Law No. 6698 ("KVKK") and the relevant secondary legislation, we attach great importance to the privacy and security of your personal data.

This Privacy Notice ("Notice") explains which personal data we collect when you interact with the services below, the purposes and legal grounds for processing it, the parties with whom we share it, and your rights under KVKK:

Our website at scrolli.co and any mobile applications;
Scrolli+, Scrolli Business, and Scrolli Club membership services;
Our newsletters, podcasts, and other content distribution channels;
Events such as Publisher Gatherings, Corporate Training, Executive Gatherings, Community Training, and the Annual Strategy Summit;
Our recruitment processes;
Any other channel through which you contact us or we contact you.

Together, these are referred to as the "Scrolli Services".

This Notice also fulfils our duty to inform under Article 10 of KVKK at the relevant data collection points, including membership, contact, recruitment, and event registration forms.

1. Identity of the Data Controller Company name: Scrolli Medya Anonim ŞirketiHead office: Istanbul, Türkiye (second office: London, United Kingdom)Contact: info@scrolli.co

Scrolli is the data controller that determines the purposes and means of processing your personal data and is responsible for establishing and managing the data filing system.

2. What Personal Data Do We Collect? The personal data we collect is not necessarily limited to the information we actively request. In some cases, you may voluntarily share additional information with us, for example by commenting on an article or sending us an email. Instead of presenting an exhaustive list, the categories of data we typically process for each group of individuals are set out below.

2.1. Readers and Visitors

(People who visit scrolli.co, read our content, or use the site without subscribing to our newsletters)

Identifying data: IP address, cookie identifiers, and similar online identifiers.
Transaction security data: Browser type and version, operating system, device information, and approximate location at region or city level inferred from the IP address.
Usage data: Pages visited, visit duration and time, clickstream, and on-site navigation data.

2.2. Subscribers and Members

(People who create a Scrolli+ or Scrolli Club membership or open a free account)

In addition to the data above:

Identity and contact details: Full name, email address, and telephone number where applicable.
Membership information: Membership type (Scrolli+ or Scrolli Club), subscription start and renewal dates, and billing period (monthly or annual).
Payment and financial information: Billing information and payment history. Sensitive payment details such as card numbers and CVV codes are never stored on Scrolli servers and are processed directly by our payment service provider.
Engagement data: The content, newsletters, and series you follow, and your interaction with newsletter emails, including opens and links clicked.
Account verification information: Authentication information received from the relevant provider if you sign in with a third-party account such as Google or Apple.

2.3. Scrolli Business Customers and Representatives

(Authorised or contact persons of companies that receive a Scrolli Business proposal or sign a corporate agreement)

Identity and contact details: Full name, title, corporate email address, telephone number, and represented organisation.
Contract and billing information: Proposal details, contractual scope, invoice information, and payment information.
Service usage data: Usage and access records of representatives who log in to the executive dashboard provided within the AI Business Package, which uses retrieval-augmented generation (RAG).
Important note about the AI Business Package: The RAG-enabled executive dashboard offered to Scrolli Business customers is designed to be accessible only through the relevant corporate customer's account and by its authorised users. Queries made through the dashboard and related technical records are processed only to provide the service, resolve faults, and maintain security. Data belonging to different corporate customers is not combined or shared. Outputs generated entirely by automated systems serve as an input to the relevant organisation's own decision-making processes. Scrolli does not use these outputs to produce an automated legal effect concerning any person.

2.4. Scrolli Club Members and Event Participants

(Club members and participants in Publisher Gatherings, Executive Gatherings, Community Training, and the Annual Strategy Summit)

Identity and contact details: Full name, email address, telephone number, and represented organisation or title.
Event registration information: Attendance preferences, dietary or accessibility notes if you choose to share them, and photographs or video taken during the event, about which you will be informed separately beforehand.
Introduction meeting data: Professional interests and communication preferences you share so that we can arrange matches for private introduction meetings.

2.5. Prospective Publishers and Writers

(People who contact us about content or publishing collaborations with Scrolli)

Identity and contact details, portfolio or CV information, correspondence concerning the collaboration, and payment and invoice information where applicable.

2.6. Job Applicants

(Applicants who send a job application to info@scrolli.co)

Full name, contact details, curriculum vitae, cover letter, and reference information where applicable.

2.7. Other People Who Contact Us

Identity and contact details, and any information you share in your communication with us.

3. How Do We Collect Your Personal Data? You provide most of your personal data by completing the relevant forms, including membership, contact, event registration, and job application forms, or by corresponding with us directly. We also collect certain data automatically through cookies and similar technologies when you interact with the Scrolli Services.

In summary, we collect your personal data electronically:

Through cookies and similar technologies when you visit our website,
When you complete membership, contact, event registration, or job application forms,
When you read and interact with our newsletters,
When you contact us through any channel,
From third parties such as our payment service provider and authentication providers, including Google and Apple, using automated and non-automated methods.

Cookies and Similar Technologies Cookies are small text files saved on your device so that websites can remember your preferences and certain information on later visits. On scrolli.co, we use:

Strictly necessary cookies: Required for core site functions such as session management and security, and not subject to your consent.
Performance and analytics cookies: Help us understand how the site is used and are enabled only with your explicit consent.
Marketing cookies: Used to provide personalised content or campaign suggestions and enabled only with your explicit consent.

On your first visit, you can accept or reject non-essential cookie categories through the cookie preferences panel. You can update your choice at any time through the "Cookie Preferences" link. You can also block or delete all cookies in your browser settings, although some site functions may not work properly as a result.

4. Why Do We Process Your Personal Data? We process your personal data for the following purposes:

Executing membership and subscription processes: Establishing and maintaining your Scrolli+, Scrolli Club, and Scrolli Business memberships, and delivering content and newsletters to you.
Executing payment and billing processes: Collecting subscription fees, issuing invoices, and managing finance and accounting operations.
Event organization: Planning and executing Publisher Gatherings, Executive Gatherings, Community Training, the Annual Strategy Summit, and introduction meetings.
Customer relationship management: Responding to your requests, providing support, and measuring your satisfaction.
Service development and analysis: Analyzing your interaction with Scrolli Services and developing new features and content.
Providing the AI Business Package: Operating the RAG-enabled executive dashboard under Scrolli Business specifically for the relevant corporate customer, and ensuring dashboard security and troubleshooting.
Ensuring information security: Protecting our systems and your accounts against misuse, unauthorized access, and cyberattacks.
Marketing communication (only with your consent): Sending emails and newsletters regarding new content, products, campaigns, and events.
Executing recruitment processes: Evaluating career applications and contacting candidates.
Fulfilling legal obligations: Complying with recording and retention obligations arising from tax, commercial, and consumer legislation, and responding to requests from official authorities.
Protecting legal rights: Establishing, exercising, and protecting the rights of Scrolli or third parties, and preparing defenses in potential disputes.

5. Legal Grounds for Processing Your Personal Data We process personal data on one or more of the following legal grounds under Articles 5 and 6 of KVKK:

Processing is expressly provided for by law, such as retaining invoice records under tax legislation,
Processing is directly related to the establishment or performance of a contract, such as creating and managing your membership,
Processing is necessary for us to comply with a legal obligation,
Processing is necessary for the establishment, exercise, or protection of a right,
Processing is necessary for our legitimate interests, provided that it does not prejudice your fundamental rights and freedoms, such as site usage analytics and information security,
Your explicit consent, for non-essential activities such as marketing cookies, marketing emails, and sharing event photographs or video.

Where processing is based on explicit consent, you may withdraw your consent at any time without giving a reason. Withdrawal does not affect the lawfulness of processing carried out before it.

6. With Whom Do We Share Your Personal Data? We share personal data only with the recipient groups below, and only to the extent necessary and proportionate to the purpose of the transfer:

Technical infrastructure and hosting providers: Operating, hosting, and securing our website and Services, including cloud hosting and content delivery network providers, email and newsletter infrastructure, and analytics providers.
Payment service providers: Collecting membership and event payments and managing billing processes.
Advisers: Providing professional services in areas such as law, accounting, and tax.
Corporate partners: Organising joint events, training, and introduction meetings within Scrolli Business and Scrolli Club, only to the extent of your participation.
Authorised public bodies and institutions: Fulfilling our legal obligations and responding to binding requests from competent authorities.

We never sell or rent your personal data to third parties for marketing purposes.

7. International Transfers of Personal Data Some of the technical infrastructure providers we use, including hosting and content delivery network services, may process your data on servers outside Türkiye.

We carry out such transfers under Article 9 of KVKK, as amended by Law No. 7499, and the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad dated 10 July 2024. Accordingly, personal data is transferred, in order of priority:

To a country declared by the Personal Data Protection Board ("Board") to provide an adequate level of protection, or
Where no adequacy decision exists, by putting in place appropriate safeguards such as standard contractual clauses published by the Board and signed by the parties, or binding corporate rules approved by the Board,
Where the safeguards above are not available, in exceptional and non-recurring circumstances, on one of the grounds listed in Article 9(6) of KVKK, such as your explicit consent.

Standard contractual clauses are notified to the Board within the period prescribed by law after they are signed.

8. How Long Do We Retain Your Personal Data? We retain your personal data for the duration required by the relevant processing purpose and, in any event, for the mandatory retention periods stipulated by applicable legislation (e.g., tax legislation, Turkish Commercial Code). At the end of these periods, your personal data is deleted, destroyed, or anonymized in accordance with Article 7 of the KVKK and the Regulation on the Deletion, Destruction, or Anonymization of Personal Data. We can share detailed information regarding our specific retention periods upon your request, within the framework of our personal data retention and destruction policy that we maintain as the data controller.

9. Security of Your Personal Data We take appropriate technical and administrative measures (such as access authorization, encryption, firewalls, and regular security tests) to prevent unlawful processing of and unauthorized access to your personal data, and to ensure its safeguarding. Nevertheless, we would like to remind you that no data transmission over the internet or electronic storage can be 100% secure. You are also responsible for the confidentiality of your account username and password; if you suspect any unauthorized use of your account, please contact us immediately at info@scrolli.co.

10. Your Rights Under KVKK Under Article 11 of KVKK, you may apply to us to exercise the following rights:

To learn whether your personal data is being processed,
To request information if it has been processed,
To learn the purpose of processing and whether it is being used in accordance with that purpose,
To know the third parties to whom it has been transferred in Türkiye or abroad,
To request correction if it has been processed incompletely or inaccurately,
To request deletion or destruction under the conditions set out in Article 7 of KVKK,
To request that correction, deletion, or destruction be notified to third parties to whom the data has been transferred,
To object to a result arising against you through the analysis of processed data exclusively by automated systems,
To claim compensation if you suffer damage because your data was processed unlawfully.

How to Apply To exercise these rights, you may submit a written request to info@scrolli.co together with information verifying your identity. We will respond as soon as possible and no later than thirty days, free of charge or, depending on the nature of the request, for the fee specified in the tariff set by the Personal Data Protection Board.

If your request is rejected, you find our response inadequate, or you do not receive a response in time, you may lodge a complaint with the Personal Data Protection Board within 30 days of learning of our response and, in any event, within 60 days of the relevant processing activity.

11. Changes We periodically review this Notice in line with changes in legislation and developments in our services. Significant changes will be published on this page and, if deemed necessary, further notification will be provided via email. This Notice was last updated on 20 August 2026.

Contact For questions about your personal data and requests under KVKK, contact: info@scrolli.co