Privacy Policy
This page explains what this site collects about you, where that information goes, and what rights you have over it. It is not a template — it describes the systems that actually run.
Who is responsible for your data
This site belongs to the practice of Azin Asgari, based in Istanbul, and your personal data is processed on behalf of that practice. For the formal data-controller details, contact us through the site’s contact form and we will provide them in writing.
What the consultation form collects
When you submit the form, the following is recorded:
- Your name; optionally your email address, phone number and country
- Your preferred language
- The message you write
- Whether you gave marketing consent, with a timestamp of that choice
- How you first arrived at the site: UTM parameters, ad click IDs (such as gclid, fbclid, ttclid), the referring address and the landing page
The first-visit attribution is kept in a first-party cookie named __azin_attr, which lives for 90 days. It tells us which channel brought you here; it does not follow you around other sites.
Why we use it
Everything collected serves one purpose: answering your enquiry. Your contact details are used to reply to you, your message to understand your situation, and your language preference to speak to you in the right language. The attribution data tells us which channels are worth our attention.
Marketing communication happens only if you explicitly ticked the consent box on the form, and you can withdraw that consent at any time. If you did not consent, we write to you only about your enquiry.
Where your data goes
This site runs on the following services, and your data goes only to these:
- Cloudflare — the site is hosted on Cloudflare Workers, and every request passes through Cloudflare’s network (hosting, CDN and security)
- Cloudflare Turnstile — the bot protection on the form; it loads from challenges.cloudflare.com and uses its own cookies and browser signals
- Supabase — the EU-hosted PostgreSQL database where lead records are stored
- Resend — the email service that notifies the internal team a new enquiry has arrived; that notification contains NO name, email, phone number or message content, only a reference
- TurquAI CRM (crm.turquai.com) — the messaging system where conversations are managed once contact is established
- Meta — after you explicitly allow the marketing category, Meta Pixel measures page views and accepted consultation submissions; the same submission is also sent server-side to Meta Conversions API with a shared event ID so the two copies can be counted as one conversion
The free-text message you write is not stored in the lead database. It is used to respond to you and lives in the messaging system where the conversation is handled.
What this site does not do
Stated just as plainly:
- Meta Pixel is configured as a marketing tool and loads only after you explicitly allow the marketing category in the consent banner
- A Meta Lead event is sent only after the server accepts a consultation submission and while marketing consent is present; the browser and server copies use the same event ID
- Your data is not sold
- No AI provider receives your enquiry data
How long we keep it
Enquiry data is kept for as long as it is needed to handle your enquiry, and after that only as far as statutory retention obligations require. The first-party cookie lifetimes are fixed: __azin_attr for 90 days and __azin_consent for 180 days. We will not state retention periods beyond that until they are legally confirmed — write to us if you need the exact figures.
Your rights
Over your data, you have the right to:
- Know what data is held about you and request a copy of it
- Have inaccurate or incomplete data corrected
- Have your data deleted — the /data-deletion page exists for exactly this
- Withdraw any marketing consent you gave, at any time
- Lodge a complaint with the relevant supervisory authority
If you are visiting from Turkey, KVKK applies to your data; if you are visiting from the EU or the UK, GDPR applies. Whichever right you want to exercise, a message through the contact form is enough — once we have verified your identity, we act on the request.