Privacy Policy

Sofbux considers privacy part of its trust-based, long-term technology partnership approach. This policy explains the principles used to protect information you provide when visiting our website or using our communication channels, the limits of its use and the controls available to you.

Our approach reflects Article 20 of the Constitution of the Republic of Türkiye, Law No. 6698 on the Protection of Personal Data (“KVKK”), and, where applicable, Laws No. 5651 and 6563, the Turkish Code of Obligations, the Turkish Commercial Code and current guidance of the Turkish Personal Data Protection Authority.

This policy covers visitors to the Sofbux corporate website, users of the contact or project request form, persons contacting us by email and those stating an optional commercial communication preference.

The website does not provide user accounts, online payments, orders, comments or file uploads. Google Analytics and Google Ads are not currently used. Before any such feature is introduced, the relevant policies and preference controls will be updated.

• Full name, email address and telephone number
• Optional company name
• Selected services and project or message content
• Optional commercial communication preference
• Correspondence, proposal and process records
• Submission date, time and request reference
• IP address and basic browser, device and operating system data
• Access, error, security and Google reCAPTCHA verification data

Sofbux does not request sensitive personal data through the contact form. Users should not include health, biometric, criminal conviction, political opinion or similar sensitive information in project messages.

Information is used to receive and answer requests, assess project requirements, determine an appropriate technical approach, manage proposals and pre-contract steps, and, where a business relationship is established, manage project communication. These activities rely on KVKK Article 5/2-c where necessary for pre-contract steps or contract performance and otherwise on legitimate interests under Article 5/2-f, subject to your fundamental rights.

Information may also be used to protect security, prevent abuse, resolve technical issues, comply with legal obligations and establish, exercise or protect legal rights. Commercial communications are sent only in line with the optional preference and applicable provisions of Law No. 6563.

Limited technical records may be generated to keep the website available and secure, detect attacks or unusual traffic, analyse errors and prevent spam and automated submissions. These records are not used to create behavioural profiles.

IP, access, device, error and security data may be processed under KVKK Articles 5/2-f and 12 and, where concretely applicable to the website activity, to meet obligations under Law No. 5651.

Google reCAPTCHA v2 is used on the contact form to reduce spam and abuse. It may transmit technical and interaction signals to Google. It is not used for advertising or site-wide audience analytics.

Sofbux applies risk-based access controls, least privilege, protection in transit, software and infrastructure updates, security monitoring, backup, incident response and controlled disposal procedures. Employee and provider access is restricted by confidentiality and data security obligations.

Personal data is not sold, rented, traded or combined to create independent marketing profiles that users would not reasonably expect.

Data may be shared only as necessary with providers of hosting, cloud infrastructure, information security, email and corporate communication services. It may also be disclosed to courts, public authorities and legally authorised bodies where required by law or necessary to protect legal rights.

Google may process certain reCAPTCHA technical data outside Türkiye. Details of domestic and international transfers are provided in the Personal Data Protection Privacy Notice.

Information is retained only for as long as required by its purpose and applicable law. The status of a request, proposal or contract, project requirements, limitation periods, legal obligations and security needs are considered. Data whose purpose and legal ground have ceased is deleted, destroyed or anonymised under KVKK Article 7, except for records that must legally be retained.

Under KVKK Article 11, users may learn whether their data is processed, request information, learn the purposes and recipients, request correction or, where applicable, deletion or destruction, object to adverse automated outcomes and claim compensation for damage caused by unlawful processing.

The website links to third-party platforms such as LinkedIn, Instagram and X. When you follow these links, you leave the Sofbux website and become subject to the platform’s own privacy practices. Sofbux does not control their content, security, cookies or data processing.

This policy may be updated when website features, technical services, processing activities or applicable law change. Any new analytics, advertising, membership, payment or similar technology will be preceded by updates to the relevant policies, notices and user preference controls.

Questions about this policy may be sent to info@sofbux.com or to Sofbux, Esentepe Mah. Büyükdere Cad. Levent 199 No:199 İç Kapı No:6 Şişli / İstanbul. Formal KVKK rights requests must follow the application procedure described in the Personal Data Protection Privacy Notice.