Privacy policy

At elaalptekin.com, your privacy is respected and protected. This policy outlines how we collect, use, store, and safeguard your personal information when you visit this website or engage with our services.

1. Introduction

Welcome to elaalptekin.com ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website elaalptekin.com, in accordance with:

• New Zealand: Privacy Act 2020
• United Kingdom: UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018
• Australia: Privacy Act 1988 and Australian Privacy Principles (APPs)
• United States: California Consumer Privacy Act (CCPA/CPRA) and other state laws
• Canada: Personal Information Protection and Electronic Documents Act (PIPEDA)

‍

2. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked with you ("Personal Information").

A. Information You Provide to Us

• Contact Data: Name, email address, phone number, and mailing address (e.g., when you fill out a contact form or sign up for a newsletter).
• Account Data: Usernames and passwords if you create an account.
• Financial Data: Payment card details (processed by secure third-party processors like Stripe or PayPal).

B. Information Collected Automatically

• Usage Data: IP address, browser type, device information, pages visited, and time spent on our site.
• Cookies and Tracking: We use cookies to enhance your experience. You can manage your preferences through our cookie banner.

‍

3. How We Use Your Information

We process your information based on legitimate business interests, the fulfillment of a contract, compliance with legal obligations, and/or your consent. Purposes include:

• To provide and maintain our Service.
• To communicate with you (updates, marketing, support).
• To analyze website performance and improve user experience.
• To prevent fraud and ensure website security.

4. Legal Basis for Processing (UK GDPR)

If you are located in the UK, we process your data under the following legal bases:

• Consent: You have given clear consent for a specific purpose.
• Contract: Processing is necessary for a contract we have with you.
• Legal Obligation: Processing is necessary for us to comply with the law.
• Legitimate Interests: Processing is necessary for our legitimate interests (e.g., marketing or security), provided they do not override your rights.

5. Regional Rights & Disclosures

A. New Zealand (Privacy Act 2020)

You have the right to request access to and correction of your personal information. We will respond to your request within 20 working days. If we cannot provide access, we will tell you why.

B. Australia (Privacy Act 1988)

In accordance with the Australian Privacy Principles, you may interact with us anonymously or via a pseudonym where practical. If you wish to lodge a complaint about a privacy breach, please contact us first; if unsatisfied, you may contact the OAIC (www.oaic.gov.au).

C. United Kingdom (UK GDPR)

You have the right to:

• Access/Portability: Request a copy of your data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion ("Right to be Forgotten").
• Restrict/Object: Limit or stop the processing of your data.
• Withdraw Consent: At any time.

D. United States (CCPA/CPRA - California)

If you are a California resident, you have the right to:

• Know: What personal information is collected and shared.
• Delete: Request deletion of your info.
• Opt-Out: Direct us not to sell or share your personal information. Note: We do not "sell" personal information for monetary value.
• Non-Discrimination: We will not discriminate against you for exercising these rights.

E. Canada (PIPEDA)

We adhere to the 10 Fair Information Principles. You may challenge our compliance by contacting our Privacy Officer at the email below. We will provide access to your information within 30 days of a request.

‍

6. Data Transfers

We may transfer, store, and process your information in countries other than your own (e.g., the United States where Webflow servers are located). We ensure "Standard Contractual Clauses" or equivalent safeguards (like the UK Addendum) are in place to protect your data during cross-border transfers.

7. Data Retention

We keep your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law (e.g., tax or accounting purposes).

8. Security

We implement reasonable technical and organizational security measures (such as SSL encryption) to protect your data. However, no electronic transmission over the internet can be guaranteed 100% secure.

9. Children’s Privacy

We do not knowingly collect data from children under the age of 13 (or 16 in certain jurisdictions). If we learn we have collected such data, we will delete it immediately.

10. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top will indicate when changes were made. We encourage you to review this page periodically.

11. Contact Us

If you have questions about this policy or wish to exercise your rights, please contact our Privacy Officer:
‍
Name: Ela Alptekin

‍Email: hello@elaalptekin.com
‍‍