Privacy Policy

Privacy Policy

Last updated: 24 June 2026

This Privacy Policy explains how Shahan Digital collects, uses, stores, protects, and shares personal data when you visit our website, contact us, or use our services.

Shahan Digital is a Turkey-registered company providing digital marketing, SEO, web development, branding, AI-powered business solutions, and consulting services to international clients outside Türkiye.

Although our services are primarily offered to international markets, we process personal data in accordance with applicable data protection laws, including the Turkish Personal Data Protection Law No. 6698 (KVKK) where applicable, the EU General Data Protection Regulation (GDPR) where applicable, and other relevant privacy laws in the markets we serve.

1. Who We Are

For the purposes of applicable data protection laws, the data controller is:

Company: ŞAHAN DİJİTAL ULUSLARARASI DIŞ TİCARET LTD. ŞTİ.
Trading name: Shahan Digital
Trade registry number: 5-464795
Registered address: Kanyon Tower, Büyükdere, Levent, Istanbul, Türkiye
Website: shahandigital.com
Contact for privacy matters: privacy@shahandigital.com
Phone / WhatsApp: +90 542 177 2753

If you have any questions about this Privacy Policy or how we process your personal data, you can contact us using the details above.

2. Scope of This Policy

This Privacy Policy applies to personal data collected through:

• our website;

• contact forms;

• consultation requests;

• email communications;

• WhatsApp or other messaging platforms;

• business meetings and service communications;

• analytics, advertising, and security technologies used on our website;

• the delivery of our digital marketing, SEO, web development, branding, AI-powered business solutions, and consulting services.

This Privacy Policy does not apply to third-party websites, platforms, or services that we may link to. Those third parties have their own privacy policies and are responsible for their own data processing practices.

3. What Personal Data We Collect

We may collect the following categories of personal data, depending on how you interact with us.

a) Information You Provide Directly

When you contact us, request a consultation, or use our services, we may collect:

• your name and surname;

• email address;

• phone number;

• company name;

• job title or business role;

• country or market location;

• website URL;

• project details;

• service requirements;

• messages, emails, call notes, and communication history;

• files, documents, login details, analytics access, or business information you voluntarily share with us for service delivery.

b) Information Collected Automatically

When you visit our website, we may automatically collect certain technical and usage data, including:

• IP address;

• browser type and version;

• device type;

• operating system;

• language settings;

• referring website;

• pages visited;

• time spent on pages;

• links clicked;

• approximate location based on IP address;

• cookie and tracking technology data.

c) Information From Third Parties

We may receive limited information from third-party platforms and service providers, including:

• analytics platforms;

• advertising platforms;

• social media platforms;

• search engine tools;

• website hosting and security providers;

• communication and messaging platforms;

• payment or invoicing providers, where applicable.

This may include aggregated analytics data, campaign performance data, technical logs, lead information, or communication data, depending on the tools used.

4. How We Use Your Personal Data

We use personal data for the following purposes:

• to respond to your inquiries and consultation requests;

• to communicate with you about our services;

• to prepare proposals, offers, and project plans;

• to provide and manage our services;

• to improve website performance, content, and user experience;

• to analyze website traffic and marketing performance;

• to manage advertising campaigns and remarketing, where applicable and where legally permitted;

• to protect the security and integrity of our website, systems, and business;

• to manage invoices, contracts, accounting, and legal obligations;

• to send marketing communications where you have consented or where otherwise legally permitted;

• to establish, exercise, or defend legal rights.

5. Legal Bases for Processing

Where GDPR applies, we rely on one or more of the following legal bases:

• Consent: for example, when you accept non-essential cookies or subscribe to marketing communications.

• Performance of a contract: when processing is necessary to provide services you requested or to take steps before entering into a contract.

• Legitimate interests: for running, securing, improving, and promoting our business, provided that your rights and interests do not override our legitimate interests.

• Legal obligation: where processing is required for accounting, tax, regulatory, or legal compliance.

Where KVKK applies, we process personal data based on the legal grounds permitted under KVKK, including explicit consent where required, performance of a contract, legal obligations, legitimate interests, and other lawful processing conditions under the relevant provisions of KVKK.

6. Personal Data Processing Table

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, improve performance, understand how visitors use the site, and support marketing activities where applicable.

Cookies may include:

• Strictly necessary cookies: required for the website to function properly and securely.

• Analytics cookies: used to understand website traffic, visitor behavior, and performance.

• Marketing cookies: used to measure advertising performance, personalize campaigns, or support remarketing.

• Preference cookies: used to remember user choices such as language or cookie preferences.

Non-essential cookies, such as analytics and marketing cookies, are used only where legally permitted and, where required, after your consent.

You can manage or withdraw your cookie preferences through our cookie banner or your browser settings. Blocking some cookies may affect the functionality or performance of the website.

For more details, please see our Cookie Policy, if published separately.

8. Analytics, Advertising, and Third-Party Tools

We may use third-party tools and service providers to operate, secure, analyze, and improve our website and services. These may include:

• Google Analytics;

• Google Search Console;

• Google Ads;

• Meta platforms and advertising tools, where used;

• WhatsApp Business or other messaging platforms;

• Cloudflare or similar security and performance services;

• website hosting providers;

• email and SMTP providers;

• CRM, project management, or automation tools, where used;

• payment and invoicing providers, where applicable.

These third parties may process personal data according to their own privacy terms and, where required, under data processing agreements or other appropriate safeguards.

We do not control all third-party processing activities. We encourage you to review the privacy policies of third-party platforms you interact with.

9. How We Share Personal Data

We do not sell your personal data.

We may share your personal data only when necessary and legally permitted, including with:

• service providers who help us operate our website, communications, analytics, advertising, hosting, security, accounting, or payment systems;

• professional advisers, including lawyers, accountants, and auditors;

• contractors or business partners involved in delivering services to you;

• public authorities, courts, regulators, or law enforcement bodies where required by law;

• third parties where necessary to protect our rights, property, users, clients, or business.

Any sharing of personal data is limited to what is necessary for the relevant purpose.

10. International Data Transfers

Because Shahan Digital is a Turkey-registered company serving international clients and using global digital infrastructure, your personal data may be transferred to, stored in, or processed in countries outside your country of residence, including outside Türkiye, the European Economic Area, or other jurisdictions.

International transfers may occur when we use global service providers such as analytics platforms, advertising platforms, hosting providers, cloud infrastructure, communication tools, security providers, or project management tools.

Where required by applicable law, we take steps to protect international data transfers through appropriate safeguards, which may include:

• data processing agreements;

• standard contractual clauses or standard contracts;

• technical and organizational security measures;

• access controls and confidentiality obligations;

• transfer mechanisms permitted under applicable data protection laws.

11. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Our general retention approach is:

• contact form and inquiry data: up to 12 months after the last communication, unless a business relationship begins;

• client and project data: for the duration of the service relationship and for the period required for contractual, accounting, tax, or legal obligations;

• invoices, contracts, and accounting records: for the legally required retention period;

• marketing data: until you unsubscribe, withdraw consent, or the data is no longer needed;

• analytics data: according to the retention settings of the analytics tools used;

• security logs: for a limited period necessary to protect the website and investigate security incidents.

When personal data is no longer needed, we delete, anonymize, or securely archive it in accordance with applicable requirements.

12. How We Protect Personal Data

We use reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, loss, misuse, alteration, or destruction.

These measures may include:

• SSL / HTTPS encryption;

• access controls;

• limited access to client data;

• secure hosting and infrastructure providers;

• firewall, anti-bot, and security monitoring tools;

• regular review of website security;

• confidentiality obligations for people who access personal data;

• backups and recovery procedures where appropriate.

No method of transmission or storage over the internet is completely secure. However, we take reasonable steps to protect personal data and improve our security practices.

13. Your Rights

Depending on your location and the laws that apply to you, you may have the right to:

• request access to your personal data;

• request correction of inaccurate or incomplete personal data;

• request deletion of your personal data;

• request restriction of processing;

• object to certain processing activities;

• request data portability, where applicable;

• withdraw consent at any time, where processing is based on consent;

• object to direct marketing communications;

• lodge a complaint with a competent data protection authority.

Where KVKK applies, you may also have the rights provided under Article 11 of KVKK, including the right to learn whether your personal data is processed, request information about processing, request correction, deletion, or destruction, and object to certain outcomes.

To exercise your rights, please contact us at:

privacy@shahandigital.com

We may need to verify your identity before responding to your request. We will respond within the timeframes required by applicable law.

14. Marketing Communications

We may send you marketing communications about our services, insights, updates, or offers only where legally permitted.

You can opt out of marketing communications at any time by:

• clicking the unsubscribe link in our emails, where available;

• replying to our message with an opt-out request;

• contacting us at privacy@shahandigital.com.

Even if you opt out of marketing communications, we may still send you necessary service-related, transactional, legal, or administrative messages.

15. Children’s Privacy

Our website and services are intended for businesses, professionals, and adults.

We do not knowingly collect personal data from children under the age of 16. If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps to delete such data.

16. Links to Other Websites

Our website may contain links to third-party websites, platforms, or services.

We are not responsible for the privacy practices, security, or content of third-party websites. You should review the privacy policies of any third-party websites or services you visit.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website, legal requirements, or data processing practices.

When we update this Privacy Policy, we will revise the “Last updated” date at the top of this page. Significant changes may be communicated where appropriate.

We encourage you to review this page periodically.

18. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or how we handle personal data, please contact us:

Company: ŞAHAN DİJİTAL ULUSLARARASI DIŞ TİCARET LTD. ŞTİ.
Trading name: Shahan Digital
Trade registry number: 5-464795
Address: Kanyon Tower, Büyükdere, Levent, Istanbul, Türkiye
Email: privacy@shahandigital.com
Phone / WhatsApp: +90 542 177 2753