Privacy policy.

1. Website operator and scope

The website is operated by Serhat Kucı (SERHATECH). For privacy questions or requests concerning your personal data, contact [email protected]. The purposes, legal bases and rights under Turkish data protection law are explained in the separate data protection notice.

2. Information collected

Please do not include identity documents, payment card details, passwords, health information or other personal data that are unnecessary for your enquiry. The form is not designed to collect this information.

• The contact form requires your name, email address, enquiry subject and message. Company or brand name, phone number, preferred start time and a call-back request are optional. A phone number is required if you request a call back.
• If you email directly, your email address, message and other information you choose to include are received. Email links open the email application on your device.
• Form security uses submission timing, a submission identifier and automated-submission checks. The IP address is processed during the request; the rate-limiting service receives a keyed hash rather than the raw IP. This hash is not treated as anonymous data.
• The hosting infrastructure processes technical information such as IP addresses and request details to serve the website. The scope and retention of infrastructure logs depend on the provider’s configuration.

3. How information is used

The information you share is used to understand your enquiry, assess the project scope, discuss a proposal or working arrangements, and reply. A phone number is used to fulfil a requested call back; providing it does not authorise advertising calls.

Technical checks limit spam, abuse and excessive submissions. Using the contact form does not subscribe you to marketing. The website has no advertising-targeting or visitor-profiling feature.

4. Email and infrastructure services

Using overseas providers such as Resend and Upstash may involve processing outside Türkiye. The scope and legal conditions of transfers are addressed in the data protection notice. External websites and the email application you use have their own privacy terms.

• Resend delivers the contact and enquiry details from your form to SERHATECH’s inbox by email. Your email address is used as the reply-to address.
• Upstash Redis holds a submission counter associated with a keyed IP hash and an overall submission counter to prevent abuse. Your name, email address, phone number and message are not stored in this counter system.
• Hosting and mailbox infrastructure carry out the technical processing needed to serve the website and receive correspondence. The application has no separate customer or message database; copies may exist in the mailbox and service-provider systems.

5. Cookies and browser preferences

The current website application has no analytics or advertising cookies, third-party visitor trackers or user accounts. Technical processing by the hosting infrastructure depends on the provider’s configuration.

If you select “Reduce motion” in the footer, the preference is saved in local storage on your device. It contains no form message or advertising identifier and is not sent to the server. It is removed when you turn the preference off or clear the site’s browser data; it has no automatic expiry.

6. Retention and security

Submission counters expire 10 minutes after the relevant counter is created. This applies only to the counters, not to deletion of your email or service-provider records.

Retention of correspondence depends on handling the enquiry, any ongoing working relationship, and a specific legal retention or legal-claims requirement. Data whose processing basis has ended must be erased, destroyed or, where appropriate, anonymised. The current application does not implement automatic deletion after a fixed period for mailbox or provider copies; you can request information or erasure concerning a specific record.

The form uses server-side validation, request size and origin checks, automated-submission checks and rate limiting. Email service credentials are not sent to your browser. These measures do not constitute a guarantee of absolute security or error-free delivery.

7. Your rights, contact and updates

Contact the address below to ask about your data, request correction or erasure, or exercise your other rights. Formal request methods and response deadlines are explained in the data protection notice.

This policy is updated when processing arrangements change; its revision date appears at the top. Publishing this policy or visiting the website does not by itself constitute explicit consent.

[email protected]