//PRIVACY POLICY

This Privacy Policy explains what personal data ShiftKod (shiftkod.com) collects, how it is used, and the rights of users. The site serves a global audience and complies with both KVKK (Türkiye) and GDPR (EU) provisions.

Data Controller

ShiftKod Contact: [email protected]

Data Collected and Purpose

The contact form collects the following data:

  • First and last name — to address you and respond to your enquiry
  • Email address — to reply to your request
  • Company name (optional) — to evaluate your request in business context
  • Project details (topic, stage, budget, description) — to route your request to the right team
  • IP address and browser metadata — automatically logged by our hosting provider (Vercel)

Legal Basis

Processing is based on KVKK Art. 5/2-f 'legitimate interest' and GDPR Art. 6(1)(f) 'legitimate interest' — the user submitting the contact form to initiate communication.

Data Retention Period

  • Data submitted through the form is retained for 24 months.
  • Data with no follow-up communication is deleted at the end of this period.
  • If a contract is signed with the customer, statutory retention periods (5–10 years) apply.

Third-Party Data Processors

The following providers process data for specific purposes. Data is transferred outside the user's home jurisdiction; appropriate safeguards under KVKK Art. 9 and GDPR Chapter V are required.

  • Vercel Inc. (USA) — Web hosting; traffic logs and IP addresses.
  • Cloudflare Inc. (USA) — DNS and email routing; email content is processed in transit.
  • Resend (resend.com, USA) — Transactional email delivery; confirmation emails after form submission.
  • Google LLC (USA/EU) — Google Groups email archive; contact requests submitted through the form are stored here.

User Rights

Under KVKK Art. 11 and GDPR Articles 15–22, users have the following rights. To exercise these rights, write to [email protected].

  • Learn whether their personal data is being processed
  • Request information about the data being processed
  • Learn the purpose of processing and whether it is being used in line with that purpose
  • Know the third parties to whom data has been transferred, domestically or internationally
  • Request correction of incomplete or inaccurate data
  • Request erasure or destruction of their data
  • Object to outcomes of automated processing
  • Claim compensation for damage resulting from unlawful processing

Cookies

This site does not use tracking cookies for analytics or marketing. Only essential infrastructure cookies required for the site to function may be present.

Updates

This policy may be updated. Last updated: 5 May 2026.

Contact

For questions: [email protected]

Last updated: 5 May 2026