Privacy Policy
Your personal data is safe.
Last updated: March 29, 2026
1. Data Controller
This Privacy Policy has been prepared by Ustbilis ("we", "the company"). We act as the data controller within the scope of KVKK (Turkish Personal Data Protection Law No. 6698).
Contact:
hello@ustbilis.com
Address: Turkey
2. Personal Data Processed
The following data may be processed when you visit our website or fill out the contact form:
Contact Form
- First and last name
- Email address
- Subject and message content
Technical Data
- IP address (temporary log data generated during server-side form processing)
- Browser type and version (server logs)
Cookie and Local Storage Data
- Cookie preference (
ustbilis-cookie-consent): Your response to the cookie notice — stored only in your device's local storage, not sent to the server. - Theme preference (
ustbilis-theme): Your selected light/dark mode — stored only in your device's local storage.
3. Purposes and Legal Basis of Processing
Your personal data is processed for the following purposes within the framework of the legal bases set out in Article 5 of KVKK:
- Responding to contact requests: To evaluate your message and get back to you — KVKK Article 5/2-(c): processing directly related to the establishment or performance of a contract.
- Ensuring website functionality: To remember your theme and cookie preferences — KVKK Article 5/2-(f): legitimate interest of the data controller.
- Security and error detection: Reviewing server logs for technical issues — KVKK Article 5/2-(f): legitimate interest.
4. Transfer of Personal Data
We do not share your personal data with third parties for commercial purposes. No transfer occurs except for the following technical operations:
- SMTP / Email delivery: Contact form messages are delivered as email through our hosting provider's SMTP infrastructure.
- Google Fonts: Your browser sends requests to Google servers to load fonts; your IP address is transmitted to Google during this process. For more information, please see the Google Privacy Policy.
Your data is not transferred abroad unless legally required or you have given explicit consent.
5. Cookie Policy
Our website only uses essential local storage (localStorage) entries. There are no third-party cookies for advertising, tracking or analytics purposes.
The local storage keys used and their purposes are listed below:
- ustbilis-cookie-consent — Records your response (accept/reject) to the cookie notice. Duration: until browser local storage is cleared.
- ustbilis-theme — Stores your theme preference (light/dark). Duration: until browser local storage is cleared.
These entries are stored only on your device, are not sent to the server, and are not used to identify you. You can delete them from your browser settings or your browser's "site data" section.
6. Retention Periods
Your personal data is retained only for the duration required by the purpose of processing:
- Contact form data (email content): Up to 2 years from the conclusion of your request.
- Server logs (IP, technical data): Up to 6 months.
- Local storage data: Stored only on your device; disappears when browser data is cleared.
These periods may be extended where required by legal obligations.
7. Your Rights (KVKK Article 11)
Under Article 11 of KVKK (Turkish Personal Data Protection Law No. 6698), you have the following rights regarding your personal data:
- To learn whether your personal data has been processed
- To request information regarding the processing if your data has been processed
- To learn the purpose of processing and whether the data is used in accordance with that purpose
- To know the third parties to whom your data has been transferred domestically or abroad
- To request rectification if the data has been processed incompletely or inaccurately
- To request erasure or destruction of data under the conditions set forth in Article 7 of KVKK
- To request that rectification and erasure operations be notified to third parties
- To object to a result that is against you arising exclusively from the analysis of processed data through automated systems
- To claim compensation for damages caused by unlawful processing of data
You can contact us through the communication channel below to exercise your rights. Your requests will be answered within 30 days at the latest.
8. Contact
For your questions regarding this policy or your requests under KVKK:
You can submit your requests via email or use the form on our Contact page.
9. Policy Updates
This privacy policy may be updated from time to time. Any significant changes will be announced on this page. We recommend reviewing the policy regularly.