Privacy notice

Data controller

The data controller for your personal data is ReloadCraft.

Address: Meşrutiyet Mah. Hrant Dink Sok. No:29 Kat:5, 34400 Şişli / İstanbul

Email: [email protected] — Phone: +90 (850) 308 02 63

What we collect

Personal data only arises on this site when you contact us.

• Project form: full name, email, phone, company or website (optional), what you need, budget range (optional) and your message.
• With the form: the time of submission, your IP address, the page you sent it from and the language you chose.
• If you email or call us: the contact details you share and the content of the conversation.
• During your visit: a session cookie is set in your browser to protect the form (see the cookie policy). As of this date no analytics or advertising tool tracks visitor behaviour.

Why, and on what legal basis

• To contact you, define the scope and prepare a proposal: processing necessary to enter into a contract (Article 5/2-c) and the explicit consent you give with the checkbox on the form.
• To prevent misuse of the form and keep the system secure (IP address, timestamp, rate limiting): our legitimate interest (Article 5/2-f).
• To meet legal obligations and protect our rights in a possible dispute: legal obligation and establishment of a right (Articles 5/2-ç and 5/2-e).
• Your data is not used for marketing; there is no newsletter list and nothing is passed to ad targeting.

How we collect it

Directly from you, through the form on this site, by email or by phone. No automated decision-making or profiling takes place.

Who we share it with

• Within the team, only the people handling your request.
• The site runs on a hosting provider based in Turkey; form records are stored on that server and the notification email is sent from it.
• The site is served through the Cloudflare network for speed and security; your connection data (IP address, request details) passes through it. Cloudflare operates servers outside Turkey.
• Fonts are loaded from Google Fonts; when a page opens, your browser sends a request containing your IP address to Google’s servers.
• Public authorities legally entitled to request it, only on request and with a legal basis.
• Beyond this, your personal data is not sold, rented or transferred to third parties.

How long we keep it

• Project requests: up to 2 years after the conversation ends. If it becomes a contract, for the term of the contract and the statutory limitation period after it.
• The hashed IP kept for rate limiting: up to 10 minutes.
• When the period ends, the data is deleted or anonymised so it can no longer be linked to you.

Your rights (Article 11)

• To learn whether your personal data is processed and, if so, to request information about it.
• To learn the purpose of processing and whether the data is used in line with it.
• To know the third parties your data has been transferred to.
• To request correction if it is incomplete or inaccurate.
• To request deletion or destruction under the conditions set out in the Law.
• To request that corrections, deletions and destructions be notified to the third parties your data was transferred to.
• To object to a result that is to your detriment and based solely on automated analysis.
• To claim compensation for damage caused by unlawful processing.

How to make a request

Email [email protected] or write to Meşrutiyet Mah. Hrant Dink Sok. No:29 Kat:5, 34400 Şişli / İstanbul. Include your full name and the contact details you used when you reached us, so we can verify your identity.

Requests are answered free of charge within 30 days at the latest. If you are not satisfied with the answer, you may lodge a complaint with the Turkish Personal Data Protection Board.

Changes

This notice is updated when needed; the current version is always on this page, with the date shown at the top.