Privacy Policy

Who we are

This website belongs to Qcoders, which is based in Türkiye. In this policy, “we”, “us” and “our” mean Qcoders.

We decide why and how we use your personal data. As a result, we are the “data controller” under two laws:

• Türkiye’s Personal Data Protection Law No. 6698, known as KVKK;
• the EU General Data Protection Regulation (GDPR), when it applies to you.

You can reach us here:

Email

info@qcoders.com

WhatsApp and phone

+90 552 257 90 00

What we collect

First, you give us data when you contact us. Second, our website’s server records some technical details when your browser loads a page.

When you use the contact form

The contact form asks for your name, company, WhatsApp or phone number, email, what you need and your message.

When you send it, our website records the date, the time and the page you sent it from. It also records your IP address and browser type.

We receive each message by email, and our website also keeps a copy in its database.

When you email, message or call us

By email, we receive your address, your name and anything you write or attach. On WhatsApp, we see your number, your profile name and what you send, such as messages, voice notes and files. When you call, we see your number.

When you visit our website

Like most websites, our server keeps a log of visits. Each entry holds an IP address, the browser type, the page asked for and the time. Our hosting company stores these logs for us.

When you become a client

Then we also keep your contract, invoices, payment records and project messages.

Please don’t send us sensitive data, such as health or religious details, ID card photos or passwords. We don’t need them to answer an inquiry.

Why we use it

We use personal data only for the purposes below. For each one, we also name the legal basis under the GDPR and under KVKK.

To answer you and prepare a proposal

Data

Your contact details, your message and anything you send us.

Legal basis

GDPR Article 6(1)(b): steps you ask for before a contract. Also Article 6(1)(f): our legitimate interest in answering inquiries. KVKK Article 5(2)(c) and 5(2)(f).

To work on your project

Data

Contact details, the contract, project messages and billing details.

Legal basis

GDPR Article 6(1)(b): carrying out our contract with you. KVKK Article 5(2)(c).

To run and protect our website

Data

Server logs and the technical details recorded with the form.

Legal basis

GDPR Article 6(1)(f): our legitimate interest in a working, secure website. KVKK Article 5(2)(f).

To load our fonts and page code

Data

Your IP address and browser details, which your browser sends to Google, Cloudflare and jsDelivr.

Legal basis

GDPR Article 6(1)(f): our legitimate interest in showing our pages as designed. KVKK Article 5(2)(f).

To keep tax and business records

Data

Contracts, invoices and payment records.

Legal basis

GDPR Article 6(1)(c): a legal duty. KVKK Article 5(2)(ç).

To protect our legal rights

Data

The records that relate to a dispute.

Legal basis

GDPR Article 6(1)(f): our legitimate interest in defending legal claims. KVKK Article 5(2)(e).

We don’t send marketing messages. Also, we never make automated decisions about you or build a profile of you.

What you have to give us

To reply, we need your name, a way to reach you and a short message. So the form asks for your name, a WhatsApp or phone number and a message. It also asks you to pick what you need. However, the company and email fields are optional. Without the required details, we can’t answer you.

Who we share it with

We share personal data only with the services that help us work, and only as far as they need it. Also, we don’t sell personal data or share it for advertising.

• Hosting and email: Psychz Networks operates our server in Dallas, United States. That one server runs our website, its database, its server logs and our info@qcoders.com mailbox.
• WhatsApp: when you message us there, WhatsApp, part of Meta, handles the chat under its own privacy policy.
• Google Fonts: our pages load their fonts from Google, so Google receives your IP address and browser details. Read Google’s privacy policy.
• Code libraries: our homepage loads its animation code from jsDelivr and from cdnjs, which Cloudflare hosts. These services receive your IP address when your browser fetches the files.
• Advisers and authorities: our accountant receives billing records, and courts and authorities receive data when the law requires it.

Transfers outside Türkiye

We work from Türkiye. So if you contact us from another country, your data comes to us in Türkiye.

However, our server is in Dallas, United States. So we store your form messages, your emails to us and our server logs there.

This is a transfer of personal data outside Türkiye. If you are in the EU, it is also a transfer outside the EU.

We make this transfer only with the safeguards that KVKK and the GDPR require.

Our pages also load fonts and code from Google, Cloudflare and jsDelivr. These companies run servers around the world, including in the United States.

So they may receive your IP address outside Türkiye. Your browser usually connects to the server nearest to you.

For details of these transfers and their safeguards, email us at info@qcoders.com.

How long we keep it

We keep personal data only as long as we need it:

• Form messages, emails and WhatsApp chats: as long as we need them to answer you and follow up.
• Client contracts, invoices and project records: as long as tax and accounting law requires.
• Server logs: for the period our server setup keeps them, and only as long as we need them for security.

After that, we delete the data or make it anonymous. We keep it longer only when the law requires it or a legal claim needs it.

How we protect it

• Our website uses HTTPS, so it encrypts the connection between your browser and our server.
• Also, only the people at Qcoders who need your data for their work can open it.

If a data breach puts your data at risk, we’ll tell you and the authorities, as the law requires.

Cookies

Cookies are small files that a website saves in your browser. Our website sets no cookies for visitors. It also runs no analytics, no advertising and no tracking.

However, WordPress, the system behind our website, saves one small note in your browser’s session storage. The note records whether your browser can show emoji. It holds no personal data, and your browser deletes it when you close the tab.

Our pages do load fonts and code from Google, Cloudflare and jsDelivr. These requests set no cookies, but those companies receive your IP address. Who we share it with explains more.

Our team signs in to manage the website, so WordPress sets login cookies for them. These cookies are strictly necessary, though visitors never get them.

Nothing goes to WhatsApp or your email app until you tap one of our links.

We may add analytics or advertising cookies one day. Before we do, we’ll update this policy and ask for your consent.

Your rights

Under KVKK Article 11, you can:

• Learn whether we process your personal data.
• Ask for information about that processing.
• Find out why we process it, and whether we use it only for that purpose.
• Know which third parties in Türkiye or abroad receive it.
• Ask us to correct data that is wrong or incomplete.
• Request deletion or destruction under the conditions in KVKK Article 7.
• Have us tell the third parties who received your data about a correction or deletion.
• Object to a result against you that comes only from automated analysis.
• Claim compensation if unlawful processing causes you damage.

If the GDPR applies to you, you also have these rights:

• Access: get a copy of your data (Article 15).
• Correction: fix data that is wrong (Article 16).
• Erasure: ask us to delete your data (Article 17).
• Restriction: limit how we use it (Article 18).
• Portability: receive your data in a common format, or have us send it to another company (Article 20).
• Objection: object to uses based on our legitimate interests (Article 21).
• Consent: withdraw it at any time, where we rely on it (Article 7).

Each of these rights has limits that the law sets. If we can’t meet a request, we’ll explain why.

How to use your rights

Send us your request in one of these ways:

• By email to info@qcoders.com. If you can, write from an email address you have already used with us.
• With a secure electronic signature or a mobile signature, sent to info@qcoders.com.

Please include:

• your full name;
• for citizens of Türkiye, your Turkish ID number;
• for everyone else, your nationality and your passport or ID number;
• your home or work address for our reply;
• your email address and phone number, if you have them;
• what you are asking for.

We reply within 30 days, free of charge. Before we answer, we may ask you to confirm who you are. Otherwise, someone could pretend to be you and get your data.

If you’re not happy with our answer

Under KVKK Article 14, you can complain to the Personal Data Protection Board. Before that, you must apply to us. Then you have 30 days from our answer, and no more than 60 days from your request.

In the EU, you can also complain to the data protection authority where you live or work. The European Data Protection Board lists them all.

Data we handle for clients

Sometimes we build or run software that holds data about our clients’ own customers. In that work, the client decides how to use the data, so the client is the data controller.

We then act as the client’s “data processor” and follow their written instructions. Their privacy notice applies, so if you are one of their customers, contact them first.

Children

Our website and services are for businesses, so we don’t knowingly collect data from anyone under 18. If you think a child has sent us personal data, contact us and we’ll delete it.

Changes to this policy

We’ll update this policy when our website, our tools or the law change. The date at the top shows when we last changed it. If a change matters for you, we’ll also tell our clients by email.