Privacy Policy

Last updated: June 14, 2026

1. Data Controller

For the purposes of Turkey's Personal Data Protection Law (KVKK, Law No. 6698) and applicable data protection principles more generally, the data controller is kymcu ("we", "us"). For any questions about your personal data, contact us at [email protected].

2. What We Collect

When you reach out via the contact form on kymcu.com, we collect:

  • Full name
  • Email address
  • Phone number
  • Company name
  • The service you're interested in, and your message

For security purposes, we may also automatically process your IP address, a session cookie, and basic technical log data (browser type, access time) for a limited time (see Section 6).

3. How We Use It

  • To review and respond to inquiries submitted through the contact form
  • To provide information and quotes about the services you asked about
  • To establish and carry out a potential business relationship
  • To keep the website secure (abuse/spam prevention, session management)

4. Legal Basis

We process your data where it is necessary for steps leading to a contract (responding to your inquiry) or where we have a legitimate interest in doing so that does not override your fundamental rights and freedoms.

5. Retention

Messages submitted via the contact form are kept for as long as needed to evaluate your inquiry and pursue a potential business relationship. If you'd like your data deleted, contact us as described in Section 8 and we will delete or anonymize it within a reasonable timeframe.

6. Data Security

Your data is protected with appropriate technical and organizational measures: all traffic is encrypted via HTTPS/TLS, session cookies are marked HttpOnly and Secure, and access to the admin panel is restricted by a bcrypt-hashed password and session-based authentication.

7. Third Parties

Your data is shared only with the following service providers, and only for the stated purpose:

  • Email/SMTP provider — to deliver the notification and confirmation emails for your contact form submission.
  • Cloudflare Turnstile — to protect the contact form from automated bot/spam submissions (processes your IP address and browser verification data).

We do not sell your data or share it with any other third party except where required by law.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or request a copy of your personal data, and to object to certain processing. To exercise any of these rights, email [email protected].

9. Cookies and Analytics Data

The site uses a single, strictly necessary session cookie for session management and CSRF protection; it expires when your browser session ends. Cloudflare Turnstile may set its own cookies for bot protection.

We also run a first-party analytics system on our own servers to measure site performance and improve user experience. Instead of a cookie, it uses your browser's local storage (localStorage/ sessionStorage) to recognize you with an anonymous identifier, and collects: IP address, browser/OS/device type, screen resolution, language preference, pages visited, time spent on each page, and links clicked. This data is stored only in kymcu.com's own admin panel, is never used for advertising, and is never shared with third parties. By clicking "Accept" on the notice shown on your first visit, you consent to this processing — the analytics system does not run before you do.

10. Changes

This policy may be updated from time to time. The current version is always available on this page.