1. General Information

D'Cloud Software & Digital Agency (“Company”) is a software and digital agency based in Mersin, Turkey. We provide services to clients across three continents, including Turkey, Europe, and the Middle East, and we operate our website and client communications in four languages. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website or otherwise interact with us online.

We process personal data in accordance with applicable law, including Turkey’s Personal Data Protection Law No. 6698 (“KVKK”), which applies to our operations because we are established in Turkey. Where this English version is provided for convenience, the Turkish legal framework remains authoritative for our data processing activities.

By using our website or submitting information through it, you acknowledge that you have read this Privacy Policy. If you do not agree with our practices, you should discontinue use of the website or refrain from submitting personal data through our channels.

2. Data Collected

Depending on how you interact with us, we may collect the categories of personal data described below. We limit collection to what is reasonably necessary for the purposes stated in this Policy and applicable law.

Data may be collected directly from you (for example, when you complete a contact form) or automatically through technical means (for example, server logs and cookies). The scope of data we collect may evolve as we improve our services; material changes will be reflected in this Policy or in supplementary notices where appropriate.

Contact and identity data: Name, email address, telephone number, company name (if provided), and the content of messages you send via our contact forms or email.
Technical and usage data: IP address, browser type and version, device type, operating system, referring URLs, pages viewed, and approximate location derived from IP for security and analytics purposes.
Cookie and similar technologies: Identifiers stored on your device, preferences, and session information as described in the Cookies section.
Analytics data: Aggregated or pseudonymous statistics about website traffic and user journeys, which may be processed by third-party analytics providers on our behalf.

3. Purpose of Data Use

We use personal data only for specified, explicit, and legitimate purposes. These purposes include responding to inquiries, delivering and improving our digital services, and meeting our legal and security obligations.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects concerning you, unless we inform you separately and provide a lawful basis under applicable law. Marketing communications, if any, will be sent only where permitted and with appropriate opt-out mechanisms.

Communication: To read, evaluate, and respond to your requests submitted through the website or other channels.
Service delivery: To prepare proposals, manage client relationships, and perform contracts where you or your organization engage us.
Website improvement: To understand how visitors use our site, fix errors, and enhance usability and content across our multilingual offerings.
Security and compliance: To detect and prevent fraud, abuse, or unauthorized access; to comply with court orders, regulatory requests, and applicable laws including tax and accounting rules.
Analytics: To generate statistical insights in an aggregated or de-identified form where possible.

4. Cookies

Cookies are small text files placed on your device when you visit a website. They help the site function, remember preferences, and measure performance. We use cookies and similar technologies in line with this Policy and, where required, your consent preferences.

You can control cookies through your browser settings (including blocking or deleting cookies). Note that disabling certain cookies may limit functionality of the website. Some third-party tools we use may set their own cookies subject to their respective policies.

We periodically review our cookie practices and update this section to reflect new tools or legal requirements. For material changes, we may display a notice or banner on the site.

Strictly necessary cookies: Required for core site operations such as security, load balancing, and session management.
Analytics cookies: Used to collect information about how visitors use our site (for example, page views and navigation paths), often via providers such as Google Analytics.
Preference cookies: Used to remember choices such as language or region to align with our multilingual service model.

5. Data Sharing

We do not sell your personal data. We share personal data only with categories of recipients and for purposes that are consistent with this Policy and our legal obligations. Where we use processors (service providers), we require appropriate contractual safeguards and instructions for processing.

Recipients may include hosting and cloud infrastructure providers, email and productivity tools, analytics platforms, and professional advisers where necessary. International transfers may occur when clients or suppliers are located outside Turkey; such transfers are carried out in compliance with KVKK and related regulations, including appropriate safeguards where required.

We may also disclose personal data if we believe in good faith that disclosure is necessary to protect rights, safety, or property; to comply with legal process; or to respond to lawful requests from public authorities.

6. Data Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include access controls, encryption of data in transit (such as TLS/SSL for our website), secure hosting environments, and staff awareness of confidentiality obligations.

No method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. We encourage you to use strong passwords where accounts are offered and to report suspected incidents promptly.

In the event of a personal data breach that poses a risk to individuals, we will assess the situation and notify supervisory authorities and affected data subjects as required by applicable law.

7. Your Rights

Under KVKK and related legislation, data subjects have rights regarding their personal data. These rights are broadly comparable in purpose to rights under the GDPR, though the specific procedures and remedies are governed by Turkish law because the Company is established in Turkey.

You may request information about whether we process your personal data, obtain copies where applicable, request correction of inaccurate data, request deletion or anonymization in certain cases, object to processing where permitted, and request information about third parties to whom data have been transferred. You may also have the right to complain to the Turkish Personal Data Protection Board (“Board”) if you believe your rights have been infringed.

We will respond to verifiable requests within the timeframes set by law, typically within thirty days for applications under KVKK, unless a legitimate extension applies. We may need to verify your identity before fulfilling certain requests to protect your privacy and security.

Access and information: Learn whether your data are processed and obtain related information.
Correction: Request correction of incomplete or inaccurate data.
Deletion or destruction: Request deletion where conditions under Article 7 of the KVKK are met.
Restriction and objection: Object to outcomes produced solely by automated processing, where applicable, and exercise other rights under Article 11 of the KVKK.
Remedies: Seek compensation for damages arising from unlawful processing, subject to legal requirements.

8. Contact

If you have questions about this Privacy Policy, wish to exercise your rights, or need further information about how we handle personal data, please contact us through the channels indicated on our website. We will use reasonable efforts to assist you and to resolve concerns in line with applicable law.

For English-language visitors, you may reach us via our contact page. Please include sufficient detail so we can identify your request and respond appropriately. We may update this Policy from time to time; the “last updated” indication (if shown on the site) will reflect substantive revisions.