This Privacy Policy explains how your personal data is processed when you visit kodfixer.com, use the forms or the AI assistant on the site, or contact us by phone, WhatsApp or e-mail.

Our notice under Turkey’s Personal Data Protection Law No. 6698 (“KVKK”) is on the KVKK Privacy Notice page. This English version is provided for convenience; if it differs from the Turkish version, the Turkish version prevails.

1. Who we are and how to reach us

This website (kodfixer.com) is operated by Kodfixer as data controller. You can use the contact details below for any question or request about your personal data.

Data controller: Kodfixer
Address: Abidinpaşa, 06530 Çankaya/Ankara, Türkiye
E-mail: info@kodfixer.com
Phone: +90 850 840 73 45

2. Personal data we process

We process the following data on our site and through our contact channels:

Start a Project form: the project type you choose, your name and your e-mail address; optionally, your phone number, a description of your project, your budget range and when you would like to start.
Contact form: your name, your e-mail address and the subject and content of your message.
Technical data processed with a submission: when you submit a form or give the AI assistant your contact details, your IP address, browser information (user agent), the time of submission and the address of the page it was sent from; for forms, also the time the form was displayed. We use this data to tell automated (bot) submissions apart and to keep the site secure; your IP address and browser information are also included in the notification e-mail sent to our team.
Form steps: on the Start a Project form, how far you got, whether you submitted the form and the project type you chose are recorded together with a session ID generated at random each time the form opens. This record does not contain your name or contact details.
AI assistant (KodFixer AI): the messages you write to the assistant and its replies, the page you are on during the chat and the site language. Because the replies are generated with Google’s Gemini AI model, your messages are sent to Google and processed under Google’s Gemini API terms of service. If you share them in the chat, your name, e-mail address, phone number, project type, budget, the time you would like to be called back and a short summary of your needs are extracted from your messages automatically. When you share your e-mail address or phone number, these details are e-mailed to our team together with a summary of your request.
Site usage data: the pages you view, the domain of the site that referred you (e.g. google.com), your device type (mobile or desktop), the time of your visit and visitor and session IDs generated at random in your browser; when you click a phone, e-mail or WhatsApp link, the type of link and the page it was on. Your IP address is not added to these records; it is held briefly in server memory only to limit excessive requests.
Google advertising measurement: we use the Google tag (gtag.js) to measure the results of our Google Ads campaigns. The Google tag sends usage information such as pages viewed, scrolling, link clicks and form and video interactions to Google, together with your IP address, browser and device information and cookie identifiers. As part of conversion measurement, information you enter on the page, such as your e-mail address, phone number and name, may be detected automatically by the Google tag; it is converted into a hash with the SHA-256 algorithm before it is sent to Google (Google’s “enhanced conversions” feature). Google matches these values with Google accounts to measure which ad interactions led to a conversion. Depending on the settings of our Google Ads account, this data may also be used to show ads on Google and partner sites to people who have visited our site (remarketing).
Phone, WhatsApp and e-mail: when you call us, your phone number and the date, time and duration of the call; when you write to us on WhatsApp or by e-mail, your contact details and the content of your messages.
User guide support form: the name, e-mail, phone, company, subject, message and request type you enter in the support form on the KodFixer CRM user guide page, together with the address of the page, your IP address and browser information. These are sent to Kodfixer’s customer management system (kodfixercrm.com).
Video: the showreel on the home page is served in YouTube’s privacy-enhanced mode (youtube-nocookie.com). Its cover image is loaded from YouTube’s servers, which passes your IP address and browser information to Google (YouTube). The video player only loads when you start the video, and YouTube may then use its own cookies and similar technologies.

We do not ask for special categories of personal data (such as information about health, religion or ethnic origin); please do not enter such information in the forms or the AI assistant.

3. Why we process it

We process your personal data for the following purposes:

Receiving and assessing your quote, information, support and call-back requests and getting back to you;
Holding pre-project discussions and running contract processes;
Answering your questions through the AI assistant and passing your request on to our team;
Keeping the site and its forms secure, and detecting and blocking automated (bot) and abusive submissions;
Measuring site traffic and form steps statistically and improving our site and forms;
Measuring the results (conversions) of our Google Ads campaigns and managing our advertising;
Complying with our legal obligations and protecting our rights in possible disputes.

4. Legal bases

We process your personal data on the following legal bases listed in Article 5(2) of the KVKK:

Directly related to the establishment or performance of a contract (Art. 5/2-c): your name, contact details and request details are needed to assess your quote or project request and to enter into a possible contract.
Our legitimate interests (Art. 5/2-f): answering general enquiries; keeping the site and its forms secure using IP addresses and browser information; keeping site usage statistics; measuring the results of our Google Ads campaigns.
Compliance with our legal obligations (Art. 5/2-ç) and the establishment, exercise or protection of a right (Art. 5/2-e): our statutory obligations and possible disputes.

5. Who we share it with

Your personal data is shared with the following parties only to the extent necessary to provide the services below:

Google: measuring advertising conversions with Google Ads (usage data collected by the Google tag and hashed contact details); generating the AI assistant’s replies with the Gemini API (chat content, page and language); our info@kodfixer.com mailbox on Google Workspace (form and assistant notification e-mails and e-mails you send us); serving the home page video through YouTube.
Netlify: hosting the site and storing form, chat, visit and click records in the Netlify Blobs storage service. Netlify may also keep connection logs such as IP addresses and browser information in its own systems for the operation and security of its service.
Yandex: the e-mail (SMTP) service through which form and AI assistant notification e-mails are sent.
Competent public authorities and courts: under our legal obligations, when requested and to the extent required by law.

When you write to us on WhatsApp, your messages are transmitted over the infrastructure of WhatsApp (Meta Platforms); phone calls are carried over the infrastructure of the telecommunications operator that provides our phone service. The privacy policies of those companies also apply to these services.

Transfers abroad: the personal data described above is transferred to service providers located abroad (Google, Netlify and Yandex) so that these services can be provided.

6. How long we keep it

We keep your personal data for as long as the purpose for which it is processed requires and for the retention periods set out in the applicable legislation. When these periods end, your data is deleted, destroyed or anonymised.

The visitor ID stored in your browser (kf_vid) remains until you clear your browser data; the session ID (kf_sid) is deleted when you close the tab. Retention periods in Google’s own systems are set by Google.

7. Security

To protect your personal data we take technical and organisational measures such as serving the site over an encrypted HTTPS connection, filtering and rate-limiting automated form submissions, and limiting access to records to authorised persons through a password-protected admin panel. However, no transmission or storage of data over the internet can be guaranteed to be completely secure.

8. Your rights under the KVKK

Under Article 11 of the KVKK, you can apply to the data controller to exercise the following rights:

(a) to learn whether your personal data is processed;
(b) to request information about the processing if your personal data has been processed;
(c) to learn the purpose of the processing and whether your data is used in line with that purpose;
(ç) to know the third parties in Turkey or abroad to whom your personal data is transferred;
(d) to request the correction of your personal data if it is incomplete or inaccurate;
(e) to request the erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK;
(f) to request that the actions taken under (d) and (e) be notified to the third parties to whom your personal data has been transferred;
(g) to object to a result to your detriment arising from the analysis of the processed data exclusively by automated systems;
(ğ) to claim compensation for damage you suffer because your personal data has been processed unlawfully.

How to apply and what your application must include are explained on the KVKK Privacy Notice page. In short, you can send your request in writing, with documents proving your identity, to Abidinpaşa, 06530 Çankaya/Ankara, Türkiye, or by e-mail to info@kodfixer.com from the e-mail address you have previously given us and that is registered in our system, or signed with a secure electronic signature or a mobile signature.

Your application will be concluded free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request; if the action requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, you find the response insufficient or no response is given in time, you can file a complaint with the Personal Data Protection Board.

9. Cookies and similar technologies

Cookies are small text files that the websites you visit store in your browser. Your browser’s local storage (localStorage) and session storage (sessionStorage) store information in your browser in a similar way. We use the following:

NEXT_LOCALE (cookie, first party, strictly necessary): remembers the site language you chose. It is created when you switch languages or when the language you are viewing differs from your browser’s language setting, and it is deleted when you close your browser.
kf_vid (local storage, first party, statistics): a randomly generated ID used to count unique visitors; it is not linked to your name or contact details. It remains until you clear your browser data.
kf_sid (session storage, first party, statistics): a randomly generated ID used to count the pages viewed and the clicks on contact links per visit. It is deleted when you close the tab.
Google Ads cookies (e.g. _gcl_au, _gcl_aw; set by the Google tag, advertising measurement): used to measure ad clicks and conversions. Google may also use cookies on its own domains. Their retention periods are set by Google.
YouTube: only if you play the home page video, YouTube may use its own cookies and similar technologies.

In addition, there is a session cookie (kf_panel) used only when the site administrator signs in to the admin panel; it is not set for visitors.

How you can control cookies

You can view, delete or block cookies and site data (including local storage) in your browser settings. If you block the strictly necessary cookie, your language preference may not be remembered.
You can manage or turn off the personalisation of the ads Google shows you in Google Ads Settings.
You can read how Google uses information from sites that use its services on Google’s page about it.

10. Links to other sites

Our site contains links to third-party sites such as Instagram, LinkedIn, WhatsApp, Google Maps and the websites of our reference organisations. When you follow these links, the privacy policy of the site concerned applies.

11. Changes to this policy

We may update this policy when our processing activities or the law change. The current version is always published on this page, and the “Last updated” date at the top shows when it last changed.