Privacy

Who is responsible

I, Umut Talipoğlu, am responsible for your personal data (the data controller). I run my business as a sole proprietorship under my own name in Istanbul, Türkiye.

Address: Habipler Mah. 2721/3 Sk. No:40, 34270 Sultangazi / İstanbul, Türkiye
Email: umut@umuttalipoglu.com
WhatsApp: +90 552 231 37 49

What this site collects

• This site has no contact form.
• It uses no cookies and runs no analytics, advertising or tracking tools.
• Fonts and images are served from the site itself.
• When you follow a link from another page to a section of the home page, your browser’s session storage (sessionStorage) keeps a note of the section to open. The note is not sent to me. It is deleted when you close the tab.
• The address you type into an order box stays in your browser. When you press the button, your email or WhatsApp app opens with a ready message. You send it yourself.
• The site does not follow what you do on other websites. No other company collects information about you through it. As nothing is tracked, a “Do Not Track” signal from your browser changes nothing here.

Hosting

The site is hosted by Netlify, Inc. (101 2nd Street, San Francisco, CA 94105, USA). When you open the site, your browser connects to Netlify’s servers. Netlify processes some connection data on my behalf to deliver the site and keep it secure. This is your IP address, the date and time, the page you open and your browser type.

When you contact me

When you write to me by email or WhatsApp, I receive your name, your email address or phone number, your company’s name, your site’s address and your message.

You don’t have to give me any information. But without your contact details, I can’t answer you or send you a quote.

WhatsApp is a service of Meta Platforms. Your messages are handled under WhatsApp’s own privacy terms. My email runs on Google Workspace.

If I write to you first

I may write to your company first. I use the contact details your company publishes on its own website or on Google, and the text of its public pages. These public sources are where the data comes from.

I do this to offer you my services. The basis is my legitimate interest in offering them to businesses.

You can object at any time. Reply “no” and I won’t write to you again. If you don’t reply, I delete these details one year after my last message.

When we work together

For quotes and invoices, I use your company’s name, address and tax details. I also use the contact details of the people you name for the work. Tax law requires these details on an invoice. Without them, I can’t invoice the work.

When you pay, your company’s name, bank details, the amount and the payment reference reach the account I am paid into. Clients in the US and the UK pay into my Payoneer accounts at Citibank in New York or London. Payoneer then pays the money out to my bank in Türkiye.

The texts you send me for a job can contain other people’s data, such as the names of people who wrote Google reviews. For that data, your company is the controller. I process it only on your behalf and only for the job you ordered.

I never put personal data into an AI tool. Before I check a text with one, I remove names and anything else that identifies a person.

Why I use your data, and the legal basis

I use your data for the purposes below. Each one names its legal basis.

• To deliver the site and keep it secure. The basis is my legitimate interest in running a secure website.
• To answer your enquiry and prepare a quote. The basis is taking steps you ask for before a contract. Where you write for your company, it is my legitimate interest in answering business enquiries.
• To write to businesses first and offer my services. The basis is my legitimate interest in offering them to businesses.
• To do and deliver the work. The basis is performing our contract. Where the contract is with your company, it is my legitimate interest in working with the people it names.
• To receive payments. The basis is performing our contract.
• To keep invoices and accounting records. The basis is my obligations under Turkish tax and commercial law.
• To establish or defend legal claims. The basis is my legitimate interest in protecting my rights.

Where the UK GDPR or the EU GDPR applies, these are the bases of Article 6(1)(b) (contract) and 6(1)(f) (legitimate interests). My obligations under Turkish law count there as a legitimate interest. Under Turkish law (KVKK Article 5(2)), they are points (c), (ç), (e) and (f).

I make no decisions about you by automated means alone, and I build no profiles.

Please don’t send me sensitive data about yourself or anyone else, such as health information.

Who receives it

I never sell your data or use it for advertising. I share it only with these recipients, and only as far as needed.

• My accountant in Türkiye, for invoicing, accounting and tax.
• Public authorities, only where the law requires it.
• Netlify, Inc. (USA), to host this site.
• Google (Google Workspace), to receive and store my email.
• WhatsApp (Meta Platforms), to carry your messages if you write to me on WhatsApp.
• Payoneer and its partner banks (Citibank in New York and London), to receive your payments.
• My bank in Türkiye, to receive the payments Payoneer passes on.

Transfers to other countries

I work from Türkiye, so when you write to me, your data comes to Türkiye. Netlify processes data in the USA. Google processes it in the USA and other countries. WhatsApp handles messages under Meta’s own terms. Payoneer and its partner banks handle payments under their own privacy terms.

Where the UK GDPR or the EU GDPR applies, the transfers to Netlify and Google are covered by their data processing terms. These include the European Commission’s standard contractual clauses and the UK’s addendum to them. Ask me and I’ll send you a copy.

How long I keep it

• I keep enquiries that don’t lead to work for one year after the last message.
• I keep correspondence and work files with clients for five years after delivery. This lets me answer questions about the work and protect my rights.
• I keep invoices and accounting records for as long as Turkish tax and commercial law requires.
• If you don’t reply to my first message, I keep the contact details I used for one year after my last message.
• Netlify keeps its connection logs under its own retention rules.
• Payoneer and the banks keep payment records for as long as the law requires them to.

When the period ends, I delete the data or make it anonymous. If a dispute is still open, I keep what it needs until it is settled.

Your rights

You have these rights over your data.

• To ask what data I hold about you, and for a copy of it.
• To ask me to correct it or delete it.
• To ask me to restrict its use.
• To object to my use of it, and at any time to my writing to you to offer my services.
• To receive the data you gave me in a portable format.
• To learn who has received your data in Türkiye and abroad, and to ask me to pass a correction or deletion on to them (Turkish law, KVKK Article 11).
• To object to a result against you that comes from automated analysis alone.
• To claim compensation for damage caused by unlawful processing.

Send your request to umut@umuttalipoglu.com from an email address I already have for you, or by post to the address above. I answer within 30 days, at no charge.

You can also complain to me first. I confirm within 30 days that I have received your complaint. Then I look into it and tell you the outcome.

If you are not satisfied with my answer, you can complain to a data protection authority. In Türkiye, this is the Personal Data Protection Authority (KVKK). In the UK, it is the Information Commission (formerly the ICO). In the EU, it is the authority in your country.

Changes to this notice

If I change this notice, I publish the new version on this page and update the date below. I also tell my clients about important changes by email.

LAST UPDATED: 3 NOVEMBER 2026