Privacy Policy

Information about the protection of your personal data and privacy rights

Last updated: March 2026

1. Data Controller

This privacy notice has been prepared by isleyis.com (“Company”) as the data controller within the scope of Turkish Personal Data Protection Law No. 6698 (“KVKK”). Our Company attaches great importance to the security of your personal data.

2. Personal Data Collected

The following personal data is processed by our Company:

  • Identity Information: First name, last name
  • Contact Information: Email address, phone number
  • Corporate Information: Company/organization name (if provided)
  • Transaction Security Data: IP address, browser information, cookie data, session information
  • User Behavior Data: Page views, clicks, on-site navigation data, visit durations
  • Communication Content: Messages sent through the contact form

3. Purposes of Processing

Collected personal data is processed for the following purposes:

  • Responding to contact requests and maintaining communication
  • Providing information about our products and services
  • Evaluating partnership proposals
  • Customer relationship management and support services
  • Analyzing and improving website performance
  • Personalizing user experience
  • Statistical analysis and reporting
  • Information security management
  • Fulfillment of legal obligations
  • Contacting you when necessary (within the scope of commercial electronic message consent)

4. Legal Basis for Processing

Your personal data is processed based on the following legal bases under Article 5 of KVKK:

  • Explicit consent: Your KVKK approval when sharing data through the contact form
  • Performance of a contract: Processing data necessary for service delivery
  • Legitimate interest: Site security, analytics, and service quality improvement
  • Legal obligation: Mandatory data processing under applicable regulations

5. Transfer of Personal Data

Your personal data may be shared with the following parties within the scope of Articles 8 and 9 of KVKK for the purposes stated above:

  • Hosting and infrastructure providers: For website hosting (Vercel Inc., USA)
  • Analytics service providers: For analyzing site usage statistics (Vercel Analytics)
  • Email service providers: For delivering contact form messages (Zoho Mail, EU region)
  • Security service providers: For bot protection and site security (Cloudflare Inc.)
  • Authorized public institutions: Upon request within the scope of legal obligations

6. Retention Period

Your personal data is retained for the duration required by the processing purposes and for the legal retention periods prescribed by applicable legislation.

  • Contact form data: 2 years from the fulfillment of the request
  • Analytics and cookie data: For the duration of relevant cookie lifetimes (see our Cookie Policy)
  • Log and security data: 1 year

7. Data Security Measures

Our Company takes the following technical and administrative measures:

  • SSL/TLS encryption for secure data transmission
  • Firewall and bot protection (Cloudflare)
  • Access controls and authorization mechanisms
  • Regular security updates
  • Restricting access to personal data to authorized personnel only

8. Your Rights

Under Article 11 of KVKK, you have the following rights:

  • Learning whether your personal data is processed
  • Requesting information if your personal data has been processed
  • Learning the purpose of processing and whether data is used accordingly
  • Knowing third parties to whom personal data is transferred
  • Requesting correction if personal data is incomplete or inaccurate
  • Requesting deletion or destruction of personal data under the conditions of Article 7
  • Requesting notification of corrections, deletions, and destructions to third parties
  • Objecting to any adverse result arising from analysis through automated systems
  • Claiming compensation for damages caused by unlawful processing

9. How to Apply

To exercise your rights, you may contact us through:

Your requests will be processed free of charge within 30 days at the latest.

10. On-Site Tracking and Analytics

Our website monitors user behavior on-site to improve user experience and service quality. This monitoring includes:

  • Pages visited and visit durations
  • Click and scroll behavior
  • Device type, browser information, and screen resolution
  • Page load times and performance data
  • Referral sources

This data is collected anonymously or pseudonymously through Vercel Analytics. It is not used to identify individual users and is only subject to aggregate statistical analysis. For details, please see our Cookie Policy.

11. Additional Rights for International Visitors

Our website is accessible worldwide. Depending on your country or region, you may have additional rights under local data protection laws.

11.1 European Union / European Economic Area (GDPR)

Under the EU General Data Protection Regulation (GDPR — Regulation 2016/679), EU/EEA citizens and residents have the following additional rights:

  • Right of access (Art. 15): Request a copy of your processed personal data
  • Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
  • Right to erasure / Right to be forgotten (Art. 17): Request deletion of your data under certain conditions
  • Right to restriction of processing (Art. 18): Request limitation of data processing
  • Right to data portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format
  • Right to object (Art. 21): Object to processing based on legitimate interest
  • Right not to be subject to automated decision-making (Art. 22): Not be subject to decisions based solely on automated processing
  • Right to withdraw consent: Withdraw consent at any time (without affecting the lawfulness of prior processing)
  • Right to lodge a complaint: File a complaint with the Data Protection Authority (DPA) in your EU member state

Legal basis: Under GDPR, your data is processed on the basis of legitimate interest (Art. 6(1)(f) — site security and analytics), explicit consent (Art. 6(1)(a) — contact form), and performance of a contract (Art. 6(1)(b)).

International data transfers: Your data may be transferred to service providers located in the USA (Vercel, Cloudflare). These transfers are carried out under Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy decisions.

11.2 California, USA (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:

  • Right to know: Learn what personal information is collected, used, and shared
  • Right to delete: Request deletion of collected personal information
  • Right to opt-out: Opt out of the sale or sharing of personal information
  • Right to non-discrimination: Not be discriminated against for exercising privacy rights
  • Right to correct: Request correction of inaccurate personal information

Important: We do not sell or share your personal data with third parties for marketing purposes. For “Do Not Sell or Share My Personal Information” requests, please contact info@isleyis.com.

11.3 Brazil (LGPD)

Under the Brazilian General Data Protection Law (LGPD — Lei Geral de Proteção de Dados), Brazilian citizens have rights similar to GDPR, including anonymization, blocking or deletion of data, data portability, and withdrawal of consent.

11.4 Canada (PIPEDA)

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), Canadian citizens have rights to access, correct, and provide consent for their personal information.

11.5 United Kingdom (UK GDPR)

Under the UK GDPR (post-Brexit), UK residents have the same rights as under EU GDPR. Complaints may be directed to the Information Commissioner's Office (ICO).

12. Changes

Our Company reserves the right to update this privacy notice in accordance with legal regulations and needs. Updates take effect on the date they are published on our website.

Back to Home