This privacy policy explains how Wisal collects, uses, and protects your personal data when you visit our website or contact us. We follow our own value of honesty here too: we only collect what we need, and we tell you exactly what that is.
Who we are
The data controller responsible for your personal data is:
[COMPANY LEGAL NAME]
[REGISTERED ADDRESS], Türkiye
Email: [PRIVACY CONTACT EMAIL]
What this policy covers
This policy applies to our website [WEBSITE DOMAIN] in all its language versions, and to the messages you send us through it.
The information we collect
Information you give us
When you send us a project inquiry through our "Start a project" form, we collect:
- A description of your idea or problem
- The type of help you're interested in, your project stage, and your preferred timeline
- Your name and email address
- Optionally: your company, country, and phone or WhatsApp number
- Your preferred language
- The date and time you gave your consent
Please don't include sensitive personal data (such as health information) in your message.
Information collected automatically
When you send the form, we also store:
- A one-way, encrypted fingerprint (hash) of your IP address, used only to prevent spam and abuse. We cannot see or recover your actual IP address from it.
- Your browser type (user agent), shortened
- The date and time of your message
Our hosting provider may also keep standard technical server logs for security and operation. [CONFIRM WITH HOSTING PROVIDER: what is logged and for how long.]
Information stored on your device
We don't use analytics, advertising, or tracking cookies. We only store what the website needs to work the way you chose:
- A language cookie (NEXT_LOCALE) that remembers your language
- Your light or dark theme preference, saved in your browser's local storage
- A temporary draft of the inquiry form, saved in your browser's session storage so you don't lose your text if the page reloads. It is deleted when you send the form or close the tab.
These never leave your device except the language cookie, which is sent to our website so it can show the right language.
Why we use your information
| Purpose | Legal basis (GDPR) | Legal basis (KVKK) |
|---|---|---|
| To read and reply to your inquiry, and take steps before a possible contract | Art. 6(1)(b) — steps prior to a contract | Art. 5(2)(c) — directly related to establishing a contract |
| To protect our website from spam and abuse | Art. 6(1)(f) — legitimate interest | Art. 5(2)(f) — legitimate interest |
| To comply with legal obligations | Art. 6(1)(c) — legal obligation | Art. 5(2)(ç) — legal obligation |
We do not sell your personal data. We do not send you marketing messages unless you ask us to. We do not make automated decisions about you.
Who we share it with
We only share your data with service providers who help us run our website and reply to you, and only as much as they need:
- Hosting: [HOSTING PROVIDER AND SERVER LOCATION]
- Email delivery: [EMAIL PROVIDER]
We may also disclose data when the law requires it, for example to a court or public authority.
International transfers
Our service providers may store data on servers outside Türkiye or outside your country. When this happens, we make sure the transfer follows the applicable law (KVKK Article 9 and GDPR Chapter V). [CONFIRM WITH LAWYER: the transfer mechanism used for each provider.]
How long we keep it
- Inquiries that don't lead to a project: we delete them [24 MONTHS] after our last contact with you.
- Inquiries that lead to a project: we keep them for as long as the project relationship and our legal obligations require, as set out in the contract.
- The IP fingerprint and browser type are deleted together with the inquiry.
How we protect it
- All connections to our website are encrypted (HTTPS).
- Access to inquiries is limited to the people who need it to reply to you.
- We never store your IP address directly, only a one-way fingerprint.
- We keep personal data out of our technical logs.
Your rights
Depending on where you live, you have the right to:
- Know whether we process your data, and get a copy of it
- Ask us to correct inaccurate data
- Ask us to delete your data
- Object to or restrict how we use it
- Receive your data in a portable format
- Withdraw your consent at any time (this doesn't affect what we did before)
- Learn which third parties received your data, and request compensation if unlawful processing harms you (KVKK Article 11)
- Complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (KVKK); in the EU, the authority in your country.
To use any of these rights, email us at [PRIVACY CONTACT EMAIL]. We will reply within 30 days. [CONFIRM WITH LAWYER: additional application methods required under the KVKK Communiqué on Application Procedures.]
Children
Our website is made for businesses and is not directed at children. We don't knowingly collect data from anyone under 18.
Changes to this policy
If we change this policy, we'll update the "Last updated" date at the top of this page. For significant changes, we'll make them clearly visible on our website.
Contact
Questions about this policy or your data? Email [PRIVACY CONTACT EMAIL].