Legal
notices.

Data controller

The data controller is Hakan Caba, a self-employed professional who provides services under the siteupwell brand. Address: Patika Yol Sok. 26/7 Ataşehir / İstanbul. Email: hello@siteupwell.com.

Personal data we process, purposes and legal grounds

We process your personal data for the following purposes and on the following legal grounds:

• Answering your inspection or quote request and your questions, and arranging calls: name, email, company, country and time zone, website, your site’s platform and type, goals, budget and timing, your message and our correspondence. Legal ground: processing directly related to setting up a contract (Art. 5(2)(c)); if you write on behalf of a company, our legitimate interest (Art. 5(2)(f)).
• If you become a client, setting up and performing our contract, issuing self-employment receipts and tracking payments: identity and contact details, business details, quote, contract, receipt and payment records, and project correspondence. Legal grounds: performance of the contract (Art. 5(2)(c)) and our legal obligations (Art. 5(2)(ç); Tax Procedure Law and Income Tax Law).
• Protecting our rights in a possible dispute: contract, receipt and correspondence records. Legal ground: establishing, exercising or protecting a right (Art. 5(2)(e)).
• Protecting our forms from spam and abuse: a keyed hash of your IP address, your browser’s user agent and the result of our spam check. Legal ground: legitimate interest (Art. 5(2)(f)).
• Seeing which pages and campaigns bring enquiries: the page you sent a form from and any campaign tags in that page’s address. Legal ground: legitimate interest (Art. 5(2)(f)).
• With your consent, measuring how the site is used: usage data such as the pages visited, device and browser type and approximate location (country), through Google Analytics 4 cookies. Legal ground: explicit consent (Art. 5(1)); you can withdraw it at any time in “Cookie settings”.

Transfers

We transfer your personal data only for the purposes above, to the recipients below. Our hosting, email, booking and project-tracking providers are outside Turkey, and some of their subcontractors are in the US, so your data is transferred abroad. We keep what goes abroad to a minimum: with your request we store only a keyed hash of your IP address, not the address itself; we delete that hash and your browser details after 30 days, and enquiries that don’t lead to a project 24 months after their last status change.

• Hostinger International Ltd. (Cyprus), which hosts our site: our site and your form requests are stored on Hostinger’s servers in the United States.
• Google Cloud EMEA Limited (Ireland), which provides our email, calendar and video calls.
• Cal.com, Inc. (US), which runs our booking calendar: the details of the calls you book there are processed in the United States.
• WhatsApp (Meta), if you message us there: your number and messages are processed through that service and transferred abroad.
• Google (Google Analytics 4), if you consent: data on how you use the site is processed abroad.
• If you become a client: Notion Labs, Inc. (US) for project tracking; iyzico, banks and, if you choose them, Wise or Western Union for payments; our accountant and the services we use to issue receipts.
• Public authorities authorized by law, where the law requires it.

How we collect it

We collect your data electronically: through the forms and the booking calendar on our site, from emails and, if you become a client, through quotes, contracts and receipts. The keyed hash of your IP address, your browser details, the page you send a form from and campaign tags are collected partly by automated means when you send a form. If you consent, data on how you use the site is collected automatically through Google Analytics cookies.

Your rights

Under Article 11 of the KVKK, you can apply to us to:

• find out whether your personal data is processed;
• if it is, ask for information about it;
• find out why it is processed and whether it is used for that purpose;
• know the third parties in Turkey or abroad to whom it is transferred;
• ask us to correct it if it is incomplete or inaccurate;
• ask us to delete or destroy it under the conditions in Article 7 of the KVKK;
• ask us to tell the third parties we transferred it to about any correction, deletion or destruction;
• object to a result against you that comes from analyzing your data solely by automated systems;
• claim compensation if you suffer damage because your data was processed unlawfully.

How to apply

You can send your requests in Turkish or English, in line with the Communiqué on the Principles and Procedures for the Request to Data Controller: in writing to Patika Yol Sok. 26/7 Ataşehir / İstanbul; by email to hello@siteupwell.com from the email address you previously gave us and that is registered in our systems; or by email to the same address signed with a secure electronic signature or a mobile signature. Applications are free of charge. We conclude them within 30 days at the latest and reply in writing or electronically. If your application is refused, you find our reply insufficient or we don’t reply in time, you can complain to the Personal Data Protection Board within 30 days of learning our reply, and in any case within 60 days of your application.

Changes

We may update this notice. We’ll announce any material change on this page before it takes effect. Effective date: November 9, 2026.