Privacy Policy

Scope of This Policy

This Privacy Policy covers how the artibirmimarlik.com website, belonging to Artı Bir Mimarlık, operates, the information collected on the site, the cookies used, third-party service providers, and data security practices. For the purposes and legal grounds for processing your personal data under Turkey's Law on the Protection of Personal Data No. 6698 ("KVKK"), and your rights in that regard, please also review our KVKK Disclosure Notice page; the two documents complement each other.

Information Collected on the Site

Contact form — When you fill in the form, we collect your first name, last name, email address, phone number, subject, and message content, along with any file you attach to the form. To confirm your message was sent by the owner of the email address you provided, a one-time verification code valid for 10 minutes is sent to that address; your message only reaches us once that code is verified.

Career application form — When you apply through our careers page, we collect your first name, last name, email address, phone number, the position you applied for, any cover note, and your CV file. Unlike the contact form, this form does not require email verification.

Automatically collected technical data — The Cloudflare Turnstile service is used to verify that form submissions are made by a genuine visitor and to prevent bot abuse; as part of this, your IP address is sent to Cloudflare and used only for this evaluation.

Cookies

You can manage your cookie preferences category by category — and change them at any time — from the Cookie Settings panel, which you can open at any time at the bottom of the page. The categories we use:

• Necessary Cookies — cannot be disabled. This covers the preference cookie that remembers your cookie choice for 6 months, and the session cookie that keeps team members signed in to the backoffice management panel.
• Analytics Cookies — optional, off by default. We do not currently run an active analytics service on our site; this category will take effect only if an analytics service is added in the future, and only when you've given permission. This page will be updated if that changes.

We do not use advertising cookies on our site. Every preference you give is recorded in our system along with the date and IP address, together with which categories you allowed; this record is kept solely to demonstrate that consent was given.

Purposes for Using Information

• To evaluate your message or application and get back to you
• To verify that the email address you shared in the contact form belongs to you
• To protect form submissions against bots and abuse
• To remember your cookie preference so we don't ask you again
• To fulfil our legal obligations

Third-Party Service Providers

We rely on a limited number of service providers to run our site:

• Email infrastructure — our SMTP-based email provider, used to send verification codes and contact/career notifications.
• Cloudflare Turnstile — for form security and bot detection.
• Cloudflare R2 — for hosting the project images published on the site; this service stores project photos, not personal data.

Your data is shared with these service providers strictly limited to the purposes above; it is not shared with or sold to third parties for marketing purposes.

Data Security

Verification codes are not stored in plain text in the database, but as one-way hashes, and are invalidated after a limited number of incorrect attempts. Admin panel sessions are handled using secure cookies readable only by the server. Form attachments are only accepted within allowed file types and size limits.

Retention Period

Your personal data is retained for as long as required by the purpose for which it was collected. A message sent through the contact form is retained, limited to the relevant purpose, once the verification process is complete and it reaches us; your career application may be retained for a reasonable period so it can be considered for future suitable positions. When these periods end, or upon your request, your data is deleted, destroyed, or anonymized.

Children's Privacy

Our site is not directed at minors, and we do not knowingly collect personal data from them.

Your Rights

The full list of your rights under Article 11 of KVKK — including the right to learn whether your personal data is processed, request information, and request correction or deletion — and how to exercise them, is set out on our KVKK Disclosure Notice page.

Policy Updates

This policy may be updated from time to time in line with changes to our services or applicable legislation. The current version is always published on this page.

Contact

For questions about our privacy policy, you can reach us at [email protected] or at Menderes Mah/35435 Sokak, no:23 Taşlı Apt. K:1 D:1 Mezitli/Mersin, Türkiye.