Privacy Notice
This notice explains how Pivalabs processes personal data when you visit pivalabs.com or use its contact form. It is provided under Turkey’s Personal Data Protection Law No. 6698 (“KVKK”) and, for visitors in the European Economic Area and the UK, the General Data Protection Regulation (“GDPR”). The Turkish version is the binding text under KVKK.
1. Data controller
- Name
- Pivalabs
- Address
- Istanbul, Türkiye
- hello@pivalabs.com
- Website
- https://pivalabs.com
2. Personal data we process
| Category | Data | When |
|---|---|---|
| Identity | Full name | When you submit the contact form |
| Contact | Email address | When you submit the form or email us |
| Professional | Company name (optional), the service you are interested in | When you submit the form |
| Request content | Anything you write in your message, and our correspondence | Contact form and email |
| Technical and security | IP address, date and time, browser, page visited; a one-way hash of your IP address for spam protection | When you visit the site and submit the form |
Please do not include sensitive data (such as health, religion or ethnic origin) or information unrelated to your request in your message.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry, understanding your needs, preparing proposals and first calls | Steps prior to entering into a contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)) |
| Keeping a record of your enquiry and our correspondence | Legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)) |
| Site and form security, preventing spam and abuse, fixing technical problems | Legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)) |
| Meeting legal obligations and establishing, exercising or defending legal claims | Legal obligation and legal claims (KVKK art. 5/2-ç, 5/2-e; GDPR art. 6(1)(c), 6(1)(f)) |
We do not rely on consent for the contact form; the tick box confirms that you have read this notice. We do not use your details for marketing. If we ever offer a newsletter, we will ask for your separate consent.
4. How we collect data
Electronically, partly by automated means: through the contact form, emails you send us, and logs that the web server keeps automatically when you visit the site.
5. Recipients and international transfers
We do not sell your personal data or share it for marketing. It may be shared only for the purposes above with:
- Our hosting and email provider (GoDaddy), to run the website and email. Its servers may be located outside Türkiye.
- Public authorities and courts, only where required by law.
- Legal and financial advisers, where needed to meet obligations or protect our rights.
International transfers are made in line with KVKK article 9 and, where applicable, GDPR Chapter V (for example adequacy decisions or standard contractual clauses).
6. Retention
- Contact form messages and correspondence: up to 2 years after your enquiry is closed if no business relationship follows; otherwise for the contract term and statutory retention periods.
- Spam protection record (IP hash): up to 1 hour.
- Server access logs: for the period set by our hosting provider and applicable law.
After that, data is deleted, destroyed or anonymised.
7. Security
The site runs over encrypted connections (HTTPS) only. Form submissions are sent straight to our business mailbox and are not stored in a separate database on the web server. Access is limited to the people handling your enquiry.
8. Your rights
Under KVKK article 11 you may ask whether we process your data and request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to; ask us to correct, delete or destroy it and to notify recipients of this; object to a decision made against you solely by automated processing; and claim compensation for damage caused by unlawful processing.
If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with your local data protection authority.
9. How to make a request
Email hello@pivalabs.com with the subject “Data protection request”. Please include enough information for us to verify your identity. We respond free of charge within 30 days. Under KVKK you may also complain to the Turkish Personal Data Protection Board.
10. Cookies and similar technologies
This site does not use cookies, contains no advertising or analytics trackers, and does not connect to third-party servers when it loads.
- Language preference: your choice of English or Turkish is stored only in your own browser (localStorage) so it is remembered next time. It is never sent to our server, and you can clear it in your browser settings.
- Fonts: all fonts are served from our own server; your browser does not connect to any third-party server.
If we introduce analytics or marketing cookies in future, we will update this notice and ask for consent where required.
11. Changes
We may update this notice when the law or our processing changes. The current version is always published on this page.