Legal

    Privacy Policy

    Explains the importance we place on the privacy and security of your personal data.

    Last updated: 7 October 2026

    1. Data Controller

    As the data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), Talx Media (“Company”, “we”) processes the personal data obtained in the course of the services it offers via talxmedia.com.tr within the framework of this Privacy Policy. Contact details of the data controller: Talx Media, Konuksever Mah. Kızılırmak Cd. H. Çoban İş Merkezi B Blok No:135/2 Muratpaşa/Antalya, [email protected].

    2. Personal Data Processed

    • Identity and Contact Data: Name, email, phone, company details (when you fill in a form).
    • Transaction Security Data: IP address, browser information, device type, session records, log records.
    • Marketing and Cookie Data: On-site browsing data, cookie/pixel data, campaign source information.
    • Customer Transaction Data: Request, quote, contract, invoice and service usage records.
    • Account and Membership Data: Email address, an irreversible hash of your password (the password itself is not stored), account identifier, sign-up and last sign-in time — when you create an account in one of our free tools.
    • User-Generated Content: The address, title and bio text of your published page, the links you add, the images you upload and your theme preferences.
    • Measurement Data: View and click records of published pages, referring address and device type. No identifier is written to your device for this measurement; unique counting uses an irreversible digest generated on the server that changes every day.

    3. Purposes of Processing Personal Data

    • Delivering the digital marketing, web design, SEO and software services offered,
    • Managing quote, contract and invoicing processes,
    • Handling requests, complaints and contact enquiries,
    • Measuring, improving and reporting service quality,
    • Fulfilling legal obligations and responding to requests from official authorities,
    • Creating a membership record, managing the account and authenticating you,
    • Hosting and publishing the page you create and providing you with its statistics,
    • Preventing misuse of the service (bot sign-ups, unlawful content, spam) and maintaining information security,
    • Sending electronic commercial messages and marketing activities where consent has been given.

    4. Transfer of Personal Data

    Your personal data may be transferred, only to the extent necessary for the purposes stated above, to authorised public institutions and to the hosting, email, analytics, payment and CRM providers we use, in accordance with Articles 8 and 9 of the KVKK.

    Transfers abroad. We state plainly which provider we use and where: site content, account records, published pages and contact form messages are hosted on Supabase (server region: Japan); notification and confirmation emails are sent through Resend (USA); domain management, content delivery and bot protection run through Cloudflare (USA). As all of these providers are located outside Türkiye, using the service means your personal data is transferred abroad. To learn about the basis of this transfer under Article 9 of the KVKK and the safeguards in place, write to [email protected].

    5. Method of Collection and Legal Basis

    Your personal data is collected by automatic or non-automatic means via website forms, cookies, email correspondence, contracts and physical/digital channels. The legal bases are the establishment and performance of a contract, legal obligation, legitimate interest, express provision in law and, where necessary, your explicit consent.

    6. Data Retention Period

    Your personal data is retained for as long as the purpose of processing requires and for the limitation periods stipulated in the relevant legislation. The main periods are:

    • Account and membership data: until your account is deleted; following a deletion request it is removed permanently within 30 days at the latest.
    • Your published page and its content: until you delete it or close your account.
    • Measurement records of published pages: 12 months.
    • Cookie consent evidence records: 36 months (see the Cookie Policy).
    • Server access logs: for the period required by the applicable legislation.

    At the end of the period the data is deleted, destroyed or anonymised.

    7. Data Security

    To protect your data against unauthorised access, loss or alteration we apply administrative and technical measures such as SSL encryption, access controls, log monitoring, backups and firewalls.

    8. Rights of the Data Subject

    Under Article 11 of the KVKK you have the following rights at all times:

    • To learn whether your personal data is being processed,
    • To request information about it if it has been processed,
    • To learn the purpose of processing and whether it is used in line with that purpose,
    • To know the third parties to whom it is transferred domestically/abroad,
    • To request correction if it has been processed incompletely or inaccurately,
    • To request its deletion or destruction,
    • To request that correction, deletion and destruction be notified to the third parties to whom it was transferred,
    • To object to a result arising against you from analysis by automated systems,
    • To claim compensation for damage suffered due to unlawful processing.

    To exercise these rights you can send your requests to [email protected].

    9. Membership, Accounts and the Content You Publish

    No account is needed to read the site. An account is only required for the free tools that let you create your own page and see its statistics.

    • Your password is never stored in plain text; only an irreversible hash is kept, and that hash is not shared with anyone.
    • We verify your email address. A link is sent to it at sign-up and the account stays inactive until it is confirmed. This prevents anyone from registering with an address that is not theirs.
    • Bot protection. Cloudflare Turnstile may be used on the sign-up and sign-in forms; it writes no persistent identifier and only verifies that the request comes from a human.
    • The page you publish is public. Anyone who knows its address can see it. The page carries a noindex marker so it is not listed in search engines, but that does not make it private — do not put information belonging to others, or anything that must stay confidential, on your page.
    • You are responsible for your content; unlawful content is removed upon notification (see the Terms of Use).
    • You may delete your account. Send your request to [email protected]; your account, published page, uploaded images and measurement records are permanently deleted within 30 days at the latest.

    10. Changes to the Policy

    This Privacy Policy may be updated in line with changes in applicable legislation and company policies. The current version is always published on this page.