Privacy & KVKK Disclosure Notice

Data controller

Under this notice, the data controller is Oktoks. For any application, objection or deletion request, you can write to us directly at [email protected].

• Legal name: Oktoks
• E-mail: [email protected]
• Phone: 0533 578 18 99
• Head office: Istanbul, Türkiye

Data we collect

When you visit our site, and especially when you fill in a contact form, we collect personal data in the categories below:

• Identity: first name, last name, company or brand name
• Contact: e-mail, phone number, Instagram username
• Request content: project summary, budget range, timeline, free text notes
• Transaction security: IP address, browser and device information, server log records
• Visit measurement: page views, events and campaign parameters through Google Analytics 4; ad click parameters such as UTM/GCLID when a form is submitted
• Consent records: the timestamp of the consent you give in the KVKK and İYS checkboxes

Processing purposes and legal grounds

We process your personal data for the purposes below. Each purpose rests on a clear legal ground under Articles 5 and 6 of the KVKK:

• Getting back to you and preparing a quote: your explicit consent and pre-contract discussions
• Meeting our obligations once a contractual relationship is in place: conclusion and performance of the contract
• Complying with legal obligations (invoicing, accounting, answering requests from the Personal Data Protection Authority): legal obligation
• Sending informational or commercial electronic messages: your explicit consent, if you have given İYS approval
• Monitoring site security and access logs: legitimate interest

Data transfers

We share your personal data only with the parties needed to deliver the service. We do not transfer it to third parties for sale or marketing.

• Our SMTP provider, for sending e-mail
• Hosting infrastructure: inside Türkiye or within EU borders
• Google Analytics 4 / Google tag infrastructure, for visit measurement
• Legal authorities: only where legislation requires it

Retention periods

We keep your data until the purpose of processing no longer applies. If active contact has stopped at the end of the request or quote period, we delete or anonymize form records within 24 months at the latest. Records that turn into a contract may be kept for up to 10 years under commercial legislation.

Your rights under Article 11 of the KVKK

As a data subject you have the rights below. To use them, writing to [email protected] is enough; we answer your application within 30 days at the latest.

• Learn whether your personal data is being processed
• Learn whether it has been used in line with its purpose
• Ask for it to be corrected if it is incomplete or inaccurate
• Ask for it to be erased or destroyed if it was processed contrary to the KVKK
• Ask for the third parties it was transferred to be notified
• Object if an automated system produces a result against you
• Claim compensation for damage you have suffered

Data security

Our servers use TLS encrypted communication, role based access and regular backups. Form content lands in our own panel and inbox so we can prepare a quote; names and note text are not sent to analytics tools.

Updates to this notice

We may update this notice as legislation or our services change. When we do, the effective date at the top of this page is updated.