01
Privacy policy
This policy explains how siteupwell (“we”) uses the personal data we collect through siteupwell.com. Our KVKK notice and, if you’re in the EU/EEA, our GDPR notice add the details those laws require.
Last updated:
Who we are
siteupwell is the brand of Hakan Caba, a self-employed professional based in Turkey; it isn’t a separate company. Hakan Caba is the controller of your personal data. Address: Patika Yol Sok. 26/7 Ataşehir / İstanbul. Email: hello@siteupwell.com.
What we collect
- Inspection and contact forms: website, name, email, company, country, goals, budget and timing, your message
- Calls: if you book a call in our booking calendar (Cal.com), your name, email, the time you choose and anything you add to the booking; calls can also be arranged by email, and we hold them on Google Meet
- Correspondence: what you send us by email
- Technical data: when you visit, our hosting provider logs your IP address and browser details; when you send a form, we keep with your request a keyed hash of your IP address (not the address itself), your browser’s user agent, the page you sent it from and any campaign tags in that page’s address. With your consent, Google Analytics 4 measures which pages are visited and how the site is used; we don’t use advertising cookies.
Why we use it
- To prepare and deliver your inspection report
- To prepare quotes and schedule calls
- To answer your questions
- To keep our forms secure and stop spam and abuse
- To see which pages and campaigns bring enquiries
- To see how visitors use the site, with your consent (analytics)
- To meet our legal obligations (e.g. issuing tax receipts)
Legal bases
We process your data to take steps you ask for before a contract, for our legitimate interests (answering you, keeping our forms secure and seeing where enquiries come from) and to meet legal obligations.
Who we share it with
We never sell your data. We share it only with providers that help us run our service: Hostinger International Ltd. (Cyprus), which hosts our site and stores your requests on its servers in the United States; Google Cloud EMEA Limited (Ireland), which provides our email, calendar and video calls; and Cal.com, Inc. (US), which runs our booking calendar. With your consent, we also use Google Analytics 4, a Google service, to measure how the site is used; Google may process this data in the US. Some of their subcontractors are also in the US. Because these providers are outside Turkey, your data is transferred abroad; our KVKK notice and, if you’re in the EU/EEA, our GDPR notice explain these transfers. If you message us on WhatsApp, WhatsApp (Meta) handles your number and messages under its own privacy policy. If you become a client, we track your project in Notion (Notion Labs, Inc., US), and the payment services you use (iyzico, your bank, Wise or Western Union) handle your data under their own privacy policies. To protect our forms from spam, your browser solves a short computational puzzle using ALTCHA, an open-source tool that runs on our website’s own server: no cookies are set, nothing is sent to any other service, and we briefly keep only a random, non-personal puzzle ID to prevent reuse.
How long we keep it
Enquiries that don’t lead to a project are deleted 24 months after their last status change, which is usually our last exchange with you. We delete the keyed hash of your IP address and your browser’s user agent 30 days after you send a form; our hosting provider keeps its server logs, which may include IP addresses, under its own retention policy. Emails about such an enquiry are deleted from our mailbox in a monthly clean-up after the enquiry itself is deleted. Calls you book in our booking calendar stay in our Cal.com account while it is open; you can ask us to delete yours at any time. Client records, such as contracts, receipts and business correspondence, are kept for 10 years from the end of the year they were created: Turkish tax law requires 5 years for tax records, and claims can be brought for up to 10 years. Then we delete or anonymize them. We keep a record of each deletion, without personal data, for 3 years. Google Analytics keeps analytics data for 14 months.
Inspecting your site
The initial inspection only uses your public pages. If you give us access for a project, we use it only while the work lasts, and we recommend removing it once we’re done.
Your rights
You can ask to access, correct or delete your data, object to processing and port your data. Send requests to hello@siteupwell.com, in English or Turkish. If we refuse your request or don’t reply within 30 days, you can complain to Turkey’s Personal Data Protection Board. If you’re in the EU/EEA, you can also complain to your local data protection authority.
Changes
We may update this policy. If we make a material change, we’ll announce it on this page before it takes effect. Effective date: November 9, 2026.
