Website and Business Enquiry Privacy Notice

1. Controller and Contact

Yılmaz Kok ("Intsell") is the controller for personal data processed through this website and its business-enquiry form. Questions about processing and data-rights requests may be sent to info@intsell.app.

2. Personal Data We Process

The business-enquiry form processes name, store name, email address, optional phone or WhatsApp number, and an optional message. Website use may also generate technical data such as IP address, request time, device and browser information, referring page, security records, and error classes.

For limited business-to-business outreach, Intsell may process a business name and type, work email address, the person's business role, the public source and date checked, communication history, and an opt-out record. Private-life information, sensitive data, and personal information unrelated to the product are not collected.

Short-lived technical values derived from an IP address may be used to prevent abuse and duplicate submissions without directly identifying a visitor. Form fields are not included in analytics events.

3. Purposes and Legal Bases

Personal data is processed to assess and answer enquiries, take requested pre-contract steps, secure the website and form, prevent abuse, resolve technical problems, and comply with legal duties.

Depending on the activity, processing relies on requested pre-contract steps, compliance with legal obligations, establishment or exercise of legal claims, and legitimate interests that do not override the rights and freedoms of the individual. The form does not collect marketing consent or create a promotional list.

Targeted business outreach is undertaken only after recording the source, organisation type, recipient classification, and the rules applicable to that communication. Each message identifies the sender, links to this Notice, and provides a simple opt-out. An opt-out removes the contact from outreach and a minimal suppression record is retained to prevent renewed contact.

4. Collection Method

Data is collected electronically through information entered in the form, website requests, security records, analytics and performance measurement, and email correspondence using automated or partly automated methods. Business contact data may also be obtained from the organisation's own website, business social-media account, and official or commonly used business directories, with the source URL and check date recorded.

5. Recipients and International Transfers

Data may be shared to the extent necessary with Vercel for website hosting and server functions, Supabase for the enquiry database, and Resend for service email delivery. Data is disclosed to public authorities only where a legal obligation or valid binding request applies.

These providers may deliver infrastructure or support outside Türkiye, and website enquiries may be accessed from Türkiye. Transfers are limited to what is necessary to provide the service. Where UK GDPR applies, any restricted transfer must use an applicable UK GDPR Chapter V route and the relevant safeguard information may be requested from Intsell. Current providers are identified on the Service Providers page.

Intsell does not currently operate a UK customer pilot. A UK pilot involving customer or lookbook data will not begin until any required international-transfer mechanism and safeguards have been documented.

6. Retention

Business enquiries are retained for 12 months after the last meaningful contact; non-responsive prospect records for no more than 90 days after the last message; security and abuse records for up to 90 days; and short-lived duplicate-prevention values for the shorter operational period required. A minimal suppression record is retained only as needed to prevent renewed contact and is reviewed regularly. Other data is deleted, destroyed, or anonymized when its period ends.

7. Individual Rights and Complaints

Applicable access, information, correction, deletion, recipient-information, objection, restriction, portability, and redress rights under KVKK, GDPR, and UK GDPR may be exercised at info@intsell.app. The Personal Data Rights Request Procedure explains submission and verification steps.

Where UK GDPR applies, you may also complain to the UK Information Commissioner's Office (ICO) through ico.org.uk/make-a-complaint. This does not affect any other administrative or judicial remedy available to you.

8. Updates

This Notice is updated when processing activities or applicable law change materially. The current version and publication date are published on this page.