Privacy Policy & Terms of Service

1. Introduction

HAFETECH ("we," "us," or "our") operates the website hafetech.net and provides software engineering, AI integration, and digital product services. This Privacy Policy explains how we collect, use, disclose, and protect information we obtain in connection with our website and services. By accessing our website or using our services, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect information you voluntarily provide when contacting us — including your name, email address, company name, and project description. When you visit our website, we may collect technical information including your IP address, browser type, referring URLs, pages visited, and time spent on pages.

We do not collect sensitive personal information beyond what is necessary to respond to inquiries and deliver contracted services. We do not purchase, rent, or acquire personal data from third-party sources.

3. How We Use Your Information

• To respond to inquiries and communicate about your project
• To deliver contracted services and fulfill project obligations
• To improve our website and service offerings based on usage patterns
• To comply with applicable legal obligations in Türkiye and the United States
• To send service-related communications you have requested

4. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area, we process personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Consent: Where you have given explicit consent to processing for a specific purpose
• Contract: Where processing is necessary to perform a contract with you
• Legitimate interests: Where processing serves our legitimate business interests and does not override your rights
• Legal obligation: Where we are required by law to process certain information

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Service providers who assist in delivering our services (e.g., hosting, analytics), under strict data processing agreements
• Legal or regulatory authorities when required by applicable law
• Successor entities in the event of a merger, acquisition, or sale of assets, with appropriate notice to affected individuals

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by applicable law. Project-related data is retained for a minimum of five years following project completion for legal and accounting compliance. You may request deletion of your data at any time by contacting us at [email protected], subject to our legal obligations.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access the personal data we hold about you
• Right to rectification of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") subject to legal retention requirements
• Right to data portability in a machine-readable format
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time where processing is consent-based

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.