Skip to content

Legal

Privacy Policy

How we collect, use and protect your personal data.

Last updated: 06 September 2026

In short: we collect only the data you send us, we write no measurement cookie without your consent, and we sell your data to no one.

1. Who we are

This site is operated by OXXI Digital Performance Agency (Saray Dijital Medya Hizmetleri). We are the controller of the data processed here.

2. What data do we collect?

What you send us

The name, company, email, telephone, budget range and message you enter in our quote and contact forms.

What is collected automatically

On form submission we record the IP address, browser information and a timestamp for transaction security. This exists to prevent misuse of our forms.

Cookies

No cookie other than the strictly necessary ones is written without your consent. For details see the Cookie Policy.

3. Why do we collect it?

  • To respond to your enquiry and prepare a quote
  • To manage the contract process
  • To meet statutory retention obligations
  • To prevent spam and abuse
  • If you have consented: to measure use of the site and track ad performance

4. Who do we share it with?

We do not sell your data. Sharing happens only where it is strictly necessary to deliver the service, and only with:

  • Our hosting provider — server infrastructure
  • Our email provider — delivering notifications
  • Google and Meta — for measurement, only if you have given cookie consent
  • Authorised public institutions — where legally required

5. How do we protect your data?

  • The site and all form submissions are encrypted with HTTPS
  • Access to the admin panel is protected by two-factor authentication
  • Access to data is limited by permission level and is logged
  • Forms apply cross-site request forgery (CSRF) protection and rate limiting

No system is 100% secure; but in the event of a data breach we notify the Turkish Personal Data Protection Authority and the people affected within the period required by legislation.

6. Retention periods

We do not keep your data longer than the purpose requires. The detailed periods are listed on our Privacy Notice (KVKK) page.

7. Your rights

You have the right to access, correct and erase your data, and to object to its processing. All of these rights and how to exercise them are set out on our Privacy Notice (KVKK) page.

8. External links

Our site may contain links to third-party sites. We are not responsible for the privacy practices of those sites; we recommend reviewing their own policies when you visit them.

9. Changes

We may update this policy. The current version is always published on this page and the date above is updated.

10. Contact

For any questions, write to hello@oxxidigital.com.

Legal notice

This text is an informational draft and does not replace legal advice. Before going live it should be adapted to your company's data processing practices and reviewed by a legal adviser. A privacy notice that is incomplete or does not reflect reality can attract an administrative fine under Turkish data protection law.