Terms

Terms of Service

Last updated: 26 May 2026

These Terms of Service (the "Terms") govern your access to and use of the Registpass services (website, mobile app, desktop app, APIs and all related components). By using the service you agree to be bound by these Terms.

1. Parties

These Terms are entered into between IHATECH LTD ("Registpass", "we"), whose details are set out below, and the hotel operator or authorised user that uses the service ("Customer", "Hotel", "you").

  • Company: IHATECH LTD
  • Registration: Registered in England and Wales under company number 16676486.
  • Registered Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
  • ICO Registration: We are registered with the Information Commissioner's Office (ICO) under reference number ZC117625, in line with the UK Data Protection Act 2018.
  • Contact: [email protected]

2. The Service

Registpass is a SaaS platform that lets hotels capture guest identity data via MRZ scanning, automate KBS notifications and integrate with third-party systems such as DİA.

Registpass is a technical tool that streamlines the hotel's identity notification and check-in processes. The obligation to file guest identity notifications rests with the hotel under Turkish Law No. 1774; Registpass does not assume this obligation on the hotel's behalf but provides the tool for the hotel to fulfil it.

The scope of the service, features and pricing may be updated with reasonable prior notice.

3. Data Processing Relationship: Roles and Responsibilities

With respect to the personal data processed under these Terms, the parties assume the following roles:

a) Hotel = Data Controller. For personal data belonging to guests (identity data, MRZ data, passport details, stay details, etc.) the Hotel is the data controller within the meaning of Law No. 6698 (KVKK) and EU/UK GDPR. The Hotel:

  • Provides the legal privacy notice to guests and obtains the necessary consents.
  • Fulfils the KBS notification obligation under Law No. 1774.
  • Determines the purpose, duration and means of processing.
  • Fulfils VERBİS registration and other data controller obligations.

b) Registpass (IHATECH LTD) = Data Processor. With respect to guest data, Registpass acts solely as a processor acting on the hotel's instructions. Registpass:

  • Processes data only on the hotel's written instructions.
  • Does not use the data for its own marketing, profiling or other commercial purposes.
  • Imposes confidentiality obligations on its employees.
  • Notifies the hotel without undue delay (within 24 hours) if a data breach is detected.
  • Provides technical support for the hotel to respond to data subject rights upon request.
  • On termination, deletes or returns the data according to the hotel's choice, subject to statutory retention obligations.

The details of these roles and mutual obligations are set out in the Data Processing Agreement (DPA), which forms an integral part of the Terms. The DPA is provided to the parties electronically when the subscription begins.

4. Accounts and Use

  • You must provide accurate and up-to-date information when creating an account.
  • You are responsible for the security of your account, the confidentiality of your password and all actions performed under your account.
  • Any unauthorised access must be reported to [email protected] without delay.
  • A single subscription may only be used by the hotel or business identified in the agreement; unauthorised sharing is prohibited.

5. Trial, Fees and Payment

The 14-day free trial does not require a payment method. To continue using the service after the trial you will be charged the applicable subscription fee for the plan you choose.

Fees are billed in advance at the start of each billing period. VAT and other statutory taxes apply in addition. If payment is not made the service may be suspended or terminated.

6. Hotel Obligations

As Data Controller, the hotel is solely responsible for the following:

  • Providing guests with an appropriate privacy notice and obtaining explicit consent where required.
  • Filing KBS notifications on time and with accurate content (Registpass only provides the technical tool; the hotel is responsible for the accuracy of the notification).
  • Assigning role-based authorisation to hotel staff and applying access controls.
  • Other data controller obligations under KVKK and UK/EU GDPR (VERBİS registration, data inventory, breach notification, etc.).
  • Using the service in accordance with applicable law, these Terms and the DPA.
  • Refraining from any conduct that could harm the system or disrupt the integrity of the service.

7. Prohibited Use

  • Using the service for unlawful purposes, fraud or identity theft.
  • Probing the platform's security, reverse engineering or transmitting malware.
  • Scraping or otherwise overloading the system with automated tools.
  • Uploading content that infringes the intellectual property or personal rights of third parties.
  • Processing guest data for purposes that breach the agreement or applicable law.

8. Intellectual Property

All software, design, trademarks, logos, content and related intellectual property rights in Registpass belong to IHATECH LTD. These Terms grant you a non-exclusive, non-transferable right to use the service for the duration of your subscription.

Registpass claims no ownership or usage rights over any guest data uploaded to or processed through the system; all rights in that data belong to the hotel as data controller and/or to the relevant individuals.

9. Limitation of Liability

The service is provided "as is". To the maximum extent permitted by law, Registpass shall not be liable for any indirect, incidental, special or punitive damages, loss of profit or loss of data.

The hotel is solely responsible for the administrative and criminal consequences arising from obligations it fails to meet as Data Controller (e.g. inadequate notices, KBS notification errors, missing VERBİS registration). The hotel shall indemnify Registpass for any loss arising as a result.

In any event our contractual or legal liability is limited to the amount paid to us in the 12 months preceding the event giving rise to the claim. Cases of intent, gross negligence and instances where applicable law does not permit limitation are reserved.

10. Suspension and Termination

We reserve the right to suspend or terminate the service in case of breach of these Terms, non-payment or legal obligation.

You may terminate your subscription at any time. Prepaid fees are non-refundable except where required by mandatory law.

On termination, the data is returned to the hotel, deleted or anonymised within 30 days according to the hotel's choice. Where law requires retention, it is kept only for the minimum period and for a limited purpose.

11. Governing Law and Jurisdiction

These Terms are governed by the laws of England and Wales. The courts of London have exclusive jurisdiction over disputes. Mandatory consumer rights under your local law remain unaffected.

12. Changes

We may update these Terms from time to time. Material changes will be notified through our website or by email a reasonable time before they take effect. Continued use of the service after the changes means you accept the updated Terms.

13. Contact

For any questions about these Terms please contact [email protected].

This is a sample draft and does not constitute legal advice. Please have your lawyer review it before publishing.