What I do with your email address

Who collects it

Bilal Faruk Özdemir, an individual based in Türkiye. Vitrincim is the name I work under; it is not yet a registered company, so the person responsible for your data is me, not a legal entity. If that changes, this page changes with it.

You can reach me directly at bilalfarukozdemir@gmail.com.

What I collect

Only what the contact form asks for:

• Your email address — so I can reply. This is the only required piece of personal data on the English form.
• Your company name or website — so I know what I am looking at before I answer.
• Your project description — optional, and entirely up to you what you put in it. Do not put anything confidential in a first message to a stranger; that is good practice with anyone, not just me.

No phone number is requested on this form and no account is created. There is no analytics tracking, no advertising pixel and no third-party cookie on this site.

Why, and on what basis

One reason only: to answer the enquiry you sent me. The legal basis is your consent — you gave it by ticking the box on the form. You can withdraw it at any time by writing to me, and your data is deleted the same day.

You are not added to any mailing list. No newsletter, no bulk messages, no follow-up sequence. I reply, and if you do not reply back, that is the end of it.

One exception, explained in full below: if we go on to work together, your data stops resting on this consent and starts resting on our working relationship. Details.

Who I share it with

Nobody. I do not sell it, pass it on, or hand it to third parties.

There is one technical exception. When you submit the form, the message reaches me as an email, which means it passes through email infrastructure — Resend, my email provider, and then my mailbox. Some of those servers are outside Türkiye, and my own mailbox is in Türkiye, so the data does cross borders in transit. This is true of email everywhere, and the consent you give on the form covers it. If you would rather it did not, email me directly instead of using the form.

How long I keep it

If you only sent an enquiry

At most 30 days after I reply. That window exists so I can answer a follow-up question. After it, I delete the message. If you want it gone sooner, say so and it goes the same day.

If we start working together

Then things change, and I would rather say so plainly: your data is no longer held under this consent — it is held because we have work in progress. Building the site, registering a domain in your name and being able to reach you all require keeping certain details for as long as the work runs.

The practical consequence: withdrawing the consent on this page does not erase the data belonging to an active project, because that data is now held for a different reason. Once I begin issuing invoices, tax and commercial record-keeping periods will also apply; when that happens I will state the actual periods here rather than guessing at them now.

In short: send an enquiry and walk away, and no trace of you remains. Become a client, and what the work requires remains — and you can see all of it, any time you ask.

Your rights

You can ask me whether I hold data about you, what it is, what I have used it for, to correct it if it is wrong, to delete it, and to withdraw your consent. Turkish data protection law (KVKK, Article 11) gives you these rights, and I would honour them regardless of where you are writing from.

To use any of them, just write to me — bilalfarukozdemir@gmail.com. No form, no formal request, no lawyer. I am legally required to respond within 30 days; in practice I answer the same day.

If you are writing from the EU or UK and want to know exactly which framework applies to a one-person operation based in Türkiye, ask me and I will tell you where things stand honestly rather than pasting a compliance badge onto this page.