Privacy Policy

What we collect

We only collect personal data you actively give us. Specifically, when you submit the contact form we receive:

• Your name and email address (required, so we can reply)
• Your company name, the service you are interested in, and a budget range (optional)
• The content of the message you write

If you email us directly, we hold whatever that email contains. If you become a client, we additionally process the information needed to run the engagement and invoice it — typically a billing contact, company details, and project material you share with us.

Our hosting provider keeps standard server logs (IP address, browser user-agent, requested URL, timestamp) for a short period for security and reliability. These are generated automatically by the infrastructure, not by us, and we do not use them to build profiles.

Cookies and analytics

This website sets no tracking cookies, no advertising pixels, and no third-party analytics. There is no Google Analytics, no Meta Pixel, and no session-recording tool on this site. That is why you are not being shown a cookie consent banner — there is nothing to consent to.

The only browser storage in use is what is strictly necessary to remember your language preference. If we ever add analytics, we will update this page before it goes live and ask for consent where the law requires it.

Why we process it, and on what basis

We use your data to answer your enquiry, prepare a scope and quote, deliver work you have engaged us for, and keep proper business records.

Where the GDPR or UK GDPR applies, our lawful bases are: your consent and our legitimate interest in responding to enquiries addressed to us (for contact form messages); performance of a contract (for client work); and legal obligation (for tax and accounting records). Where Turkish KVKK applies, we rely on the corresponding grounds, including your explicit request and the establishment or performance of a contract.

We do not use your data for automated decision-making or profiling, and we do not send marketing emails to people who have not asked for them.

Who else sees it

We keep the list of processors deliberately short. Your enquiry passes through:

• Our email delivery provider, which transmits contact form submissions to our inbox
• Our website host, which serves this site and generates the server logs described above
• Our email and document tools, where correspondence and project files are stored

These providers act on our instructions and are bound by their own data protection commitments. Where data is transferred outside the EEA or the UK, those transfers rely on Standard Contractual Clauses or an equivalent approved mechanism.

We do not sell, rent, or trade personal data. We will disclose it to a public authority only where we are legally compelled to, and we will tell you unless we are prohibited from doing so.

How long we keep it

Enquiries that do not turn into projects are deleted within 24 months. Client records are kept for the duration of the engagement and then for as long as tax, accounting, and limitation periods require — generally up to 7 years. When a retention period ends, we delete the data or irreversibly anonymise it.

You can ask us to delete an enquiry earlier at any time, and we will do it.

Your rights

Depending on where you live, you have some or all of the following rights over your personal data:

• Access — ask what we hold about you, and get a copy
• Rectification — have inaccurate data corrected
• Erasure — ask us to delete your data
• Restriction and objection — limit or object to how we process it
• Portability — receive your data in a machine-readable format
• Withdraw consent — at any time, without affecting processing already carried out

Email info@caliency.com and we will respond within 30 days. If you are in the EEA or the UK you may also complain to your local supervisory authority; in Türkiye, you may apply to the Personal Data Protection Authority (KVKK).

How we protect it

This site is served over HTTPS. Access to enquiries and client material is limited to the people working on your project, protected by strong authentication. We keep the number of systems that touch your data small on purpose — the fewer places data lives, the fewer places it can leak from.

No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the relevant authority within the timeframes the law requires.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. Material changes — for example, introducing analytics — will be described plainly rather than buried in a diff.