Privacy Policy — Ustbilis

1. Data Controller

This Privacy Policy has been prepared by Ustbilis ("we", "the company"). We act as the data controller within the scope of KVKK (Turkish Personal Data Protection Law No. 6698).

Contact: hello@ustbilis.com
Address: Turkey

2. Personal Data Processed

The following data may be processed when you visit our website or fill out the contact form:

Contact Form

First and last name
Email address
Subject and message content

Technical Data

IP address (temporary log data generated during server-side form processing)
Browser type and version (server logs)

Cookie and Local Storage Data

Cookie preference (ustbilis-cookie-consent): Your response to the cookie notice — stored only in your device's local storage, not sent to the server.
Theme preference (ustbilis-theme): Your selected light/dark mode — stored only in your device's local storage.
Google Analytics cookies (_ga, _ga_*): Created only if you consent to analytics cookies. A randomly generated pseudonymous visitor ID, pages visited, visit duration, approximate location (country/city level) and device and browser information are processed. Your IP address is not logged or stored by Google Analytics.

3. Purposes and Legal Basis of Processing

Your personal data is processed for the following purposes within the framework of the legal bases set out in Article 5 of KVKK:

Responding to contact requests: To evaluate your message and get back to you — KVKK Article 5/2-(c): processing directly related to the establishment or performance of a contract.
Ensuring website functionality: To remember your theme and cookie preferences — KVKK Article 5/2-(f): legitimate interest of the data controller.
Security and error detection: Reviewing server logs for technical issues — KVKK Article 5/2-(f): legitimate interest.
Measuring website usage: Using Google Analytics to understand visitor numbers and which pages attract interest — KVKK Article 5/1: explicit consent. This processing starts only if you accept analytics cookies in the cookie notice; you can withdraw your consent at any time.

4. Transfer of Personal Data

We do not share your personal data with third parties for commercial purposes. No transfer occurs except for the following technical operations:

SMTP / Email delivery: Contact form messages are delivered as email through our hosting provider's SMTP infrastructure.
Google Fonts: Your browser sends requests to Google servers to load fonts; your IP address is transmitted to Google during this process. For more information, please see the Google Privacy Policy.
Google Analytics: If you consent to analytics cookies, website usage data is transmitted to Google LLC (USA) servers; Google processes this data on our behalf as a data processor. Details: how Google uses information from sites that use its services.

Google Analytics data is transferred abroad (USA) only where you have given explicit consent (KVKK Article 9). Otherwise, your data is not transferred abroad unless legally required.

5. Cookie Policy

Our website uses essential local storage (localStorage) entries and analytics cookies (Google Analytics) that are activated only with your explicit consent. There are no cookies for advertising or marketing purposes.

The cookies, local storage keys and their purposes are listed below:

ustbilis-cookie-consent — Records your response (accept/reject) to the cookie notice. Duration: until browser local storage is cleared.
ustbilis-theme — Stores your theme preference (light/dark). Duration: until browser local storage is cleared.
_ga, _ga_* (Google Analytics) — Distinguishes visitors with a pseudonymous ID to measure visit counts and page usage. Created only when you accept analytics cookies. Duration: up to 2 years.

Local storage entries are stored only on your device, are not sent to the server, and are not used to identify you. You can change your analytics cookie choice at any time via the "Cookie Preferences" link in the footer; when you withdraw consent, existing Google Analytics cookies are deleted and no further data is sent. You can also delete all entries from the "site data" section of your browser settings.

6. Retention Periods

Your personal data is retained only for the duration required by the purpose of processing:

Contact form data (email content): Up to 2 years from the conclusion of your request.
Server logs (IP, technical data): Up to 6 months.
Local storage data: Stored only on your device; disappears when browser data is cleared.
Google Analytics data: Up to 14 months on Google servers; cookies up to 2 years on your device.

These periods may be extended where required by legal obligations.

7. Your Rights (KVKK Article 11)

Under Article 11 of KVKK (Turkish Personal Data Protection Law No. 6698), you have the following rights regarding your personal data:

To learn whether your personal data has been processed
To request information regarding the processing if your data has been processed
To learn the purpose of processing and whether the data is used in accordance with that purpose
To know the third parties to whom your data has been transferred domestically or abroad
To request rectification if the data has been processed incompletely or inaccurately
To request erasure or destruction of data under the conditions set forth in Article 7 of KVKK
To request that rectification and erasure operations be notified to third parties
To object to a result that is against you arising exclusively from the analysis of processed data through automated systems
To claim compensation for damages caused by unlawful processing of data

You can contact us through the communication channel below to exercise your rights. Your requests will be answered within 30 days at the latest.

8. Contact

For your questions regarding this policy or your requests under KVKK:

hello@ustbilis.com

You can submit your requests via email or use the form on our Contact page.

9. Policy Updates

This privacy policy may be updated from time to time. Any significant changes will be announced on this page. We recommend reviewing the policy regularly.