Privacy Policy & KVKK Data Protection Notice

1.1. Scope

This policy covers only the personal data processed when you visit this marketing site and fill in the form to join the early access list. The app itself (business and customer accounts, appointment data) is not yet publicly available; the relevant notices for it will be provided separately when the app launches.

1.2. Data controller

Your personal data is processed by [DATA CONTROLLER NAME] as data controller. Address: [ADDRESS]. Contact: [KEP/E-MAIL]. (These details will be filled in before publication.)

1.3. Personal data we process

Through the early access form we collect only the following. No account is created and no password is taken:

• Name — the name you enter in the form.
• Business name — the name of your business.
• Contact details — your email address and/or phone number (at least one).
• Language preference — whether you use the site in Turkish or English.
• Transaction data — the date/time you submitted the form and the source (referrer) you came from.
• Technical data — technical information such as your IP address, processed to prevent abuse, apply request rate limiting, and provide bot protection (Cloudflare Turnstile).

1.4. Purposes of processing

Your personal data is processed to: (i) inform you about Randeviz's launch and your early access invitation; (ii) communicate with you; (iii) prevent abuse of the form, block spam and automated (bot) submissions, and ensure system security. Your data is not added to marketing lists or sold to third parties.

1.5. Legal basis for processing (KVKK art. 5)

Processing for communication and notification purposes is based on the explicit consent you give by ticking the checkbox on the form (KVKK art. 5/1). Technical data processed for security, abuse prevention and rate limiting is processed on the basis of the data controller's legitimate interest (KVKK art. 5/2-f). For consent-based processing, you may withdraw your consent at any time.

1.6. Method of collection

Your personal data is collected electronically, by non-fully-automated means, when you fill in and submit the early access form on this website.

1.7. Data transfers and cross-border transfer

To provide its service, Randeviz uses the following service providers (data processors). Because these providers' servers are located outside Turkey, your personal data is processed and stored abroad. The lawful basis for the cross-border transfer under KVKK art. 9 is to be confirmed by legal counsel — [CROSS-BORDER TRANSFER BASIS]:

• Hosting and database — Supabase (PostgreSQL). Your form data is stored here; the servers are outside Turkey.
• Bot protection — Cloudflare Turnstile. It processes technical data such as IP to block automated submissions; the servers are outside Turkey.
• Note: A payment provider (e.g. iyzico/PayTR) is not yet integrated; no payment data is collected or processed at this stage.

1.8. Retention period

Your data is kept until the launch communication is complete or you withdraw consent, for a maximum of [RETENTION PERIOD]. At the end of this period, or once the processing purpose no longer applies, your data is deleted, destroyed or anonymised.

1.9. Cookies and analytics

The site takes a privacy-friendly approach. The analytics layer is off by default and collects no personal data unless enabled. The site aims not to use non-essential tracking cookies; should this change, this text will be updated.

1.10. Data security

Reasonable technical and administrative measures are taken to prevent the unlawful processing of your personal data and unauthorised access to it; data is transmitted over encrypted connections (HTTPS). While no method can guarantee absolute security, we take care to protect your data.

1.11. Changes to this text

This policy may be updated from time to time. The current version is always published on this page; for significant changes, the last-updated date above is refreshed.

2.1. Identity of the data controller

Data controller: [DATA CONTROLLER NAME], [ADDRESS], [KEP/E-MAIL]. These details will be filled in before publication.

2.2. Personal data processed

Identity and contact data (name, business name, email and/or phone), language preference, transaction data (submission time, referral source) and technical data for security purposes (such as IP). A detailed list is in the Privacy Policy above.

2.3. Purposes of processing

To provide early access and launch notifications, to communicate with you, and to ensure system security by preventing abuse of the form.

2.4. Legal bases for processing

Explicit consent for notification and communication (KVKK art. 5/1); the data controller's legitimate interest for security, abuse prevention and rate limiting (KVKK art. 5/2-f).

2.5. Transfer of personal data

Your personal data is transferred to the service providers listed above only to the extent required by the hosting (Supabase) and bot protection (Cloudflare Turnstile) services. Because those providers' servers are located abroad, the transfer constitutes a cross-border transfer; the lawful basis under KVKK art. 9 is to be confirmed by legal counsel — [CROSS-BORDER TRANSFER BASIS]. Beyond this, your data is not shared with third parties.

2.6. Rights of the data subject (KVKK art. 11)

Under Article 11 of the KVKK, by applying to the data controller you have the right to:

• privacyPage.b_rights1
• privacyPage.b_rights2
• privacyPage.b_rights3
• privacyPage.b_rights4
• privacyPage.b_rights5
• privacyPage.b_rights6
• privacyPage.b_rights7
• privacyPage.b_rights8
• privacyPage.b_rights9

2.7. How to exercise your rights

You can exercise the rights above by sending your request to [KEP/E-MAIL]. Your request will be concluded as soon as possible and within thirty days at the latest, under KVKK art. 13. For consent-based processing, you may withdraw your consent at any time through the same channel, in which case the relevant records are deleted.

2.8. Explicit consent statement

By ticking the checkbox on the form, you declare the following: «I consent to my personal data (name, business name, contact details) being processed to notify me about Randeviz's launch and early access.» This declaration matches the wording of the consent checkbox on the form exactly.

2.9. VERBİS registration

Whether the data controller is required to register with VERBİS (the Data Controllers Registry Information System) and, if so, its registration status: [VERBİS REGISTRATION STATUS — to be confirmed by legal counsel].

Contact

For all questions and requests regarding privacy and your personal data: [KEP/E-MAIL]. Data controller: [DATA CONTROLLER NAME], [ADDRESS].