This policy explains how Nazım Çeltekli handles your information when you visit this website or contact us. The legal notice on the processing of personal data is in our KVKK Information Notice.
Information we collect
You don't need an account to browse the website. We do not collect data for advertising or profiling and we never sell your data.
- What you give us voluntarily: name, email, phone, company name, the services you choose, your project summary, budget range and maintenance plan preference.
- Technical information: for security, your IP address (stored encrypted), browser type and request time. The IP address is used only to block spam, bots and attacks.
- Usage information: pages visited, referring source, device and browser type, approximate location. Unless you give consent, this counting is cookieless and anonymous; instead of an identifier, a non-reversible key that changes every day is used.
How we use information
- To answer your requests and prepare quotes,
- To communicate with you about your project,
- To protect the website against spam, bots and attacks.
- Improving the site and our quote process: measuring which pages and form steps are used.
Service providers
We use trusted infrastructure providers to run the website: hosting, database, rate limiting, email delivery, bot protection, error monitoring and encrypted backups. Error monitoring receives technical error reports only; personal data such as names, email addresses and IP addresses is removed before sending. Backups are stored encrypted. They process data only on our behalf and only to provide these services. Some of their servers are located outside Turkey.
Retention periods
- Quote requests: if they don't lead to a contract, at most 2 years from receipt.
- Client correspondence and contract records: for the period required by applicable law.
- Security logs (block log, expired or removed access blocks): at most 90 days; then deleted automatically.
- Visit and usage measurement records: 90 days, then deleted automatically.
- Live online status (only with analytics consent): at most 2 minutes; never stored permanently.
Security
Your data is transmitted over an encrypted connection (HTTPS). Access is limited to authorised people and the admin panel is protected by two-factor authentication. IP addresses are stored encrypted; matching uses irreversible hashes, and the plain addresses are visible only to the authorised administrator on the security screen. Other sensitive fields are encrypted too.
Your rights and contact
To access, correct or delete your data, see our KVKK Information Notice or write to us at merhaba@cinderhash.com.
We may update this policy from time to time; the current version is always on this page.