Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information — name, email address, phone number (when you submit the contact form)
• Usage data — IP address, browser type, pages visited, time spent on pages (via analytics cookies, only if consent is given)
• Communication data — messages you send us via the contact form or email

We do not collect sensitive personal data (health, financial, or biometric information).

3. How We Use Your Data

We use your personal data for the following purposes:

• Responding to inquiries submitted through our contact form
• Providing project-related information and quotations you have requested
• Improving our website through aggregated analytics (only with your consent)
• Complying with legal obligations under Turkish law (KVKK) and EU regulation (GDPR) where applicable

4. Legal Basis for Processing

We process your data based on the following legal grounds:

• Consent — for analytics and marketing cookies (you can withdraw at any time)
• Legitimate interest — for responding to contact inquiries
• Legal obligation — where required by applicable law

5. Data Retention

We retain personal data only as long as necessary:

• Contact form submissions — up to 2 years, unless a business relationship is established
• Analytics data — as per the retention settings of Google Analytics (default: 14 months)

After the retention period, data is securely deleted or anonymised.

6. Third-Party Services

We may use the following third-party services that process data on our behalf:

Third-party services marked as inactive are listed for transparency and will only be enabled if you provide the relevant consent.

7. Your Rights

Under KVKK (Turkey) and GDPR (EU), you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — at any time for consent-based processing (use the cookie banner on this site)

To exercise any of these rights, contact us at info@kukayapi.com. We will respond within 30 days.

8. Cookies

We use cookies and similar tracking technologies. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.