Privacy

Privacy Policy

Last updated: 20 September 2026

1. Scope

This policy explains how personal data and technical information are handled when you use ciselsoft.com. See the Personal Data Notice for contact-form-specific information under KVKK.

2. Information collected

The contact form collects full name, email, company, optional phone number, request type, product and message. When the form is submitted, the landing page, source page, referring hostname and standard UTM campaign fields may be linked to the enquiry. The sales status of an enquiry and its status history are kept in the authorized management area. For site security, IP address, request time, security verification result and limited technical records may be processed. Analytics data is collected through Google Analytics only after you accept analytics cookies.

3. Purposes

Measuring which ads led to enquiries through Google requires separate “Advertising measurement” permission in addition to analytics permission. Click identifiers from advertising links may be used for this purpose. Personalised advertising stays off; form names, email addresses, phone numbers and message content are not included in measurement events. You can change permissions using “Cookie preferences”.

Information is used to respond to requests, manage product and service discussions through their sales stages, understand enquiry sources, send an acknowledgement email, protect the system and form, prevent abuse, and meet legal obligations.

4. Service providers

CiselSoft uses Cloudflare for hosting, security, the enquiry database and protected administration access; Resend for email delivery; and Google Analytics with analytics permission. Advertising measurement through Google Analytics / Google Ads requires separate advertising measurement permission. These providers may process data under their own service terms and privacy practices.

5. Security

Form submissions use HTTPS. Server-side validation, Cloudflare Turnstile, a honeypot, rate limiting and duplicate-submission controls are applied. A valid enquiry is stored before email processing; management access is limited through Cloudflare Access and a separate administrator allowlist. Secret keys are not stored in browser code. No internet transmission can, however, be guaranteed to be absolutely secure.

6. Retention

Information is retained only as long as needed for the stated purpose, service relationship and legal obligations. Data that is no longer needed is deleted, destroyed or anonymized under applicable law.

7. Children’s privacy

The contact form is not designed to collect personal data from children. Do not submit a child’s personal or sensitive information without lawful authority as their representative.

8. Rights and contact

For personal data requests, contact destek@ciselsoft.com.

9. Changes

This policy may be updated when services or applicable rules change. The current text and update date are published on this page.