We collect only what we need to run our website and deliver our services. We don't sell your data. We use standard analytics and marketing tools common to a digital marketing agency. You have full rights over your data at any time.

01 — Who we are

Sirkhet ("we", "us", "our") is a digital marketing agency specialising in SEO, SEM, social media marketing, data integrations, and performance analytics. Our website is sirkhet.com.

As the data controller for information collected through this website, we are responsible for deciding how and why your personal data is processed. This Privacy Policy explains what data we collect, why we collect it, and how you can exercise your rights under applicable law — including the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK, Law No. 6698).

02 — Data we collect

We collect information in three ways: data you give us directly, data we collect automatically when you visit our site, and data we receive from third-party tools.

Contact data Name, email address, and any message you send via our contact form or by emailing hello@sirkhet.com.

Usage data Pages visited, session duration, scroll depth, referral source, device type, browser, and approximate location (country/city).

Technical data IP address, browser version, operating system, and HTTP request data collected by our hosting infrastructure.

Cookie data Identifiers stored in cookies and local storage by analytics and advertising tools. See section 05 for full details.

Audit submissions If you request a digital audit, we may collect your website URL, company name, and relevant marketing account data you choose to share.

Client project data Data shared in the course of an active engagement (GSC access, ad account data, etc.) is governed by a separate Data Processing Agreement.

We do not knowingly collect data from children under 16. If you believe a child has submitted personal data to us, please contact us immediately.

03 — How we use your data

• Responding to enquiries — to answer questions sent via our contact form or email.

• Delivering services — to onboard clients, manage projects, and communicate about ongoing work.

• Improving our website — to understand which pages are useful, identify friction, and fix errors.

• Marketing & remarketing — to show relevant advertising to visitors who have interacted with our site (you can opt out at any time).

• Analytics & reporting — to measure the effectiveness of our own marketing channels.

• Legal obligations — to comply with applicable law, tax regulations, or lawful requests from authorities.

Our legal bases for processing are: consent (for marketing cookies and communications), contract (for delivering services), legitimate interests (for website analytics and security), and legal obligation (for compliance).

04 — Third-party services

As a data-driven digital marketing agency, we use several industry-standard tools on our website. Each acts as a data processor on our behalf and is bound by its own privacy terms.

Google Analytics 4 Purpose: Website traffic analysis and user behaviour measurement Data shared: Anonymised usage data, device info, approximate location Privacy policy: https://policies.google.com/privacy

Google Tag Manager Purpose: Managing tracking scripts and tags across the site Data shared: Acts as a container — no independent data collection Privacy policy: https://policies.google.com/privacy

Google Search Console Purpose: Monitoring organic search performance Data shared: Aggregated search query data (no personal identifiers) Privacy policy: https://policies.google.com/privacy

Meta Pixel Purpose: Conversion tracking and audience building for paid social Data shared: Page events, hashed email (if provided), device identifiers Privacy policy: https://facebook.com/privacy/policy

LinkedIn Insight Tag Purpose: B2B audience targeting and campaign measurement Data shared: Company-level demographic data, page visit events Privacy policy: https://linkedin.com/legal/privacy-policy

Framer (hosting) Purpose: Website hosting and content delivery Data shared: Server logs including IP addresses Privacy policy: https://framer.com/legal/privacy-statement

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

If you are a client, any data you share with us in the course of delivering services (e.g. Google Ads access, GA4 property access) is processed under a separate Data Processing Agreement (DPA) as required by GDPR Article 28 and KVKK Article 12.

05 — Cookies

We use cookies and similar tracking technologies to operate and improve our website. Cookies are small files stored in your browser. Some are strictly necessary for the site to function; others are only placed with your consent.

• Strictly necessary — session management and security. Always active.

• Analytics cookies — Google Analytics 4 identifiers that help us understand site usage. Placed on consent.

• Marketing cookies — Meta Pixel, LinkedIn Insight Tag, and Google Ads tags. Placed on consent.

You can withdraw your consent or manage cookie preferences at any time. For full details on cookie names, durations, and providers, please see our Cookie Policy.

06 — Data retention

• Contact form submissions — retained for 3 years after last interaction, then deleted.

• Client project data — retained for the duration of the engagement plus 5 years (legal/tax requirement), then securely deleted.

• Analytics data — retained in Google Analytics for 14 months (our configured retention period).

• Email correspondence — retained for 5 years for legal and business continuity purposes.

• Server logs — automatically purged after 90 days.

When retention periods expire, data is permanently deleted or irreversibly anonymised. You may request early deletion at any time (see section 07).

07 — Your rights

Under the GDPR and KVKK, you have the following rights in relation to your personal data. To exercise any of them, contact us at hello@sirkhet.com. We will respond within 30 days.

Access Request a copy of data we hold about you.

Rectification Correct inaccurate or incomplete data.

Erasure Request deletion of your personal data ("right to be forgotten").

Restriction Limit how we process your data while a dispute is resolved.

Portability Receive your data in a structured, machine-readable format.

Object Object to processing based on legitimate interests or direct marketing.

Withdraw consent Withdraw consent at any time without affecting prior processing.

Lodge a complaint File a complaint with your national supervisory authority — the KVKK Board in Turkey, or your relevant Data Protection Authority within the EU.

08 — Security

We implement appropriate technical and organisational measures to protect your data from unauthorised access, disclosure, alteration, or destruction. These include HTTPS encryption on all pages, access controls, and regular security reviews.

No method of transmission over the internet is 100% secure. While we take our obligations seriously, we cannot guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights, we will notify you and the relevant supervisory authority as required by law.

09 — Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. Material changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

10 — Contact us

For any questions about this policy, to exercise your rights, or to raise a concern, contact us directly: hello@sirkhet.com

Effective: Sep 2022 · Last updated: March 2026