01 Data Controller

The data controller for personal data described in this policy is:

02 Information We Collect

We collect information that you choose to provide when you submit the project brief form or contact us by email:

• Your name and email address
• Your company name, if provided
• Your phone number, if provided
• Your message, project details, and any information you voluntarily include
• Your CV or résumé when you submit a job application

Please do not send sensitive personal data, confidential credentials, production data, or information that is not necessary for your enquiry.

Our hosting provider may also process limited technical records such as IP address, browser or device information, requested pages, timestamps, and security logs when serving the website.

03 How We Collect Information

We collect personal data directly from you when you use our contact form, email us, or communicate with us about a potential or active engagement. Limited technical data may be generated automatically by the infrastructure used to deliver and secure the website.

04 Purposes and Legal Bases

Depending on the context and applicable law, we process personal data to:

• Respond to enquiries and understand potential projects
• Prepare proposals, estimates, roadmaps, and other requested pre-contract information
• Review job applications and communicate with applicants
• Enter into and perform agreements with clients and suppliers
• Maintain business records and manage professional relationships
• Measure how the website is used, how visitors find it, and how our ads perform, when you allow analytics or marketing cookies
• Protect the website, investigate misuse, and maintain technical security
• Meet accounting, tax, regulatory, and other legal obligations

Our legal bases may include taking steps at your request before a contract, performing a contract, complying with legal obligations, pursuing legitimate business and security interests that do not override your rights, and consent where the law requires it.

05 Forms and Enquiries

Information submitted through our project brief form is used to assess and respond to your enquiry. Successful submissions may be processed by our website hosting or form-delivery provider on our behalf. Sending an enquiry does not create a client relationship or require either party to proceed with a project.

Information and CV files submitted through the Work with us form are used to review your application and communicate with you about potential opportunities. Submitting an application does not create an employment relationship or guarantee an interview or offer.

Contact forms and CV applications are received by our website on Cloudflare and delivered to our email inbox by Resend, an email delivery service. When you submit a form, its contents and any attachment pass through Cloudflare and Resend solely to deliver your message to us. See Resend’s privacy policy for its processing practices.

06 Cookies, Local Storage, and Analytics

The website uses browser session storage to remember a temporary performance setting and local storage to remember your cookie choice. Neither identifies you.

Analytics and marketing tools load only after you allow them in the cookie banner. With analytics consent, Google Analytics 4 records the pages you view, how you reached the site, your approximate location, your browser and device type, and actions such as sending a form or tapping a phone, email, or WhatsApp link. With marketing consent, the Meta Pixel records visits and enquiries so we can measure our Instagram and Facebook ads and show them to relevant audiences. We rely on your explicit consent for this processing. You can withdraw it at any time with “Cookie preferences” at the bottom of every page. Details are in our Cookie Policy.

Google’s and Meta’s own terms also apply to this processing: see Google’s privacy policy and Meta’s privacy policy.

Separately, our hosting provider Cloudflare runs Cloudflare Web Analytics on every page without cookies or browser storage. It counts page views and measures loading speed from your browser information, the page address and the page you came from, and gives us only aggregated totals. We rely on our legitimate interest in keeping the website working and fast for this processing. See Cloudflare’s privacy policy.

On pages with an office map, Google Maps loads only after you choose to open it. That connects your browser to Google and may transmit your IP address and browser information. Google’s privacy policy applies to that service.

07 Sharing and International Transfers

We do not sell, rent, or trade personal data. We may share limited information only when necessary with:

• Website hosting, form delivery, email, cloud, and professional service providers
• Google (Google Analytics) and Meta (Meta Pixel), only when you allow analytics or marketing cookies
• Team members or contractors who need the information to support an enquiry or engagement
• Public authorities or other parties when disclosure is required by law or needed to protect legal rights

Some providers, including Google and Meta, may process information outside Türkiye or the European Economic Area, including in the United States. Where cross-border transfer rules apply, we use an appropriate legal basis and safeguards required by applicable law.

08 Data Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including responding to an enquiry, reviewing an application, maintaining an active business relationship, resolving disputes, and meeting legal or accounting obligations. When data is no longer required, we delete, anonymize, or securely dispose of it.

09 Information Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No online service or transmission method is completely secure, so we cannot guarantee absolute security.

10 Your Privacy Rights

Under KVKK Article 11, and under the GDPR where it applies, you may have rights to:

• Learn whether we process your personal data and request information about that processing
• Access your personal data and understand its purpose and recipients
• Request correction of incomplete or inaccurate personal data
• Request deletion or destruction when the legal conditions are met
• Object to certain processing, including qualifying automated decisions
• Request data portability where applicable
• Withdraw consent where processing depends on consent
• Seek compensation or complain to the competent supervisory authority where applicable

To exercise a right, email info@hatsontech.com. We may need to verify your identity and may retain information necessary to document and respond to the request.

11 Products and Third-Party Links

This website may link to client projects, social platforms, partner sites, or separately operated Hatson Tech products. Those destinations may have their own privacy notices and data practices. Product-specific processing is governed by the policy presented with that product, not by this website policy.

12 Children, Updates, and Contact

Our website and services are intended for businesses and professionals and are not directed to children. We do not knowingly collect children’s personal data through this website.

We may update this policy when our website, services, providers, or legal obligations change. The latest version will always appear on this page with a revised update date.