Legal · Last updated 2026-05-27 · v1.0

Privacy Policy

Tradia (tradiaturkey.com) is the Turkey Investment Intelligence platform. This document explains what data we collect, why we collect it, how we protect it, and your rights. Compliant with Turkish KVKK Law 6698 + EU GDPR.

1. Data Controller

Tradia · Turkey Investment Intelligence
Operator: Ahmet ÇOLAK / ANASTASIYA CHOLAK (sole proprietor)
Contact: info@tradiaturkey.com

2. Data We Collect

a) Lead form (report request, city report, waitlist)

Email address — to deliver the report (required)
Name — optional, for personalised report
Province + Neighbourhood — which report is requested
Language preference — response language
IP hash — SHA-256 with salt (raw IP is not stored; for spam protection)

b) Comment/Trend form (neighbourhood feedback)

Neighbourhood slug — which neighbourhood
Trend selection (rising/stable/falling)
Comment text — optional (280 char max)
IP hash — spam protection

c) Technical cookies

tradia_cookie_consent (1 year) — your cookie consent
Stored in LocalStorage; not sent to Tradia servers
No marketing, analytics, or tracking cookies

3. Purpose of Collection

Prepare and deliver the report you requested via email
Use district/neighbourhood community feedback in Tradia scoring methodology (anonymised)
Prevent spam and abuse (IP hash + rate limit 5 req/min)
Aggregate statistics (launch wave 1 lead count, language distribution — anonymous totals only)

4. Where and How Long

Storage location: Cloudflare D1 (SQLite) — Western Europe (EU-West, GB).

Retention:

Lead records: 5 years (tax/record law); deletable at any time on request.
Comments: 5 years (anonymous, no personal data).
Rate limit records: 90 days, then auto-purged.
KVKK deletion audit log: 10 years (legal requirement).

5. Your Rights (KVKK Article 11 + GDPR Articles 15-22)

Under Turkish KVKK Law 6698 Article 11 + EU GDPR you have the right to:

Know whether your personal data is processed
Request information if it is processed
Know the purpose and verify use matches the purpose
Know any third parties (domestic/international) data is shared with
Request correction of incomplete or incorrect data
Request erasure or destruction under the law
Request notification of corrections/deletions to third parties
Object to results derived from automated analysis
Claim damages for unlawful processing

6. Erasure Request (KVKK Article 7 + GDPR Article 17)

To request erasure of your data:

By email: Write "Delete my data" from your registered email to info@tradiaturkey.com. Deleted within 30 days; audit record created.
Via API (developer): POST /api/kvkk-sil endpoint (X-Admin-Key auth; Tradia operator handles).

Erasure: All leads and comments registered with this email are DELETED. Only the email + deletion date is logged in the audit log (legal requirement).

7. Third-Party Sharing

WE DO NOT SELL OR SHARE TO ANY THIRD PARTY.

Exception: In case of legal obligation (court order, KVKK Board request), minimum necessary data is shared with the relevant authority.

8. Data Security

All traffic is HTTPS-encrypted (TLS 1.3)
IP addresses are not stored in raw form; hashed with SHA-256 + salt
Email addresses are stored in Cloudflare D1 (encrypted at rest)
Admin access is restricted by Bearer token + IP allow-list
DoS protection via 5 req/min/IP rate limit

9. Cookie Usage

Tradia uses only essential cookies:

tradia_cookie_consent — your cookie consent (LocalStorage, 1 year)
No analytics cookies (Google Analytics, Facebook Pixel, etc.)
No tracking/advertising cookies
"Essentials only" in the banner = no extra cookies are set anyway

To reset your cookie consent, type tradiaCookie.revoke() in your browser console.

10. Policy Updates

This policy was published 2026-05-27 (v1.0). Significant changes will be announced on the site; minor updates only revise the date. Historical versions are available in the git history.

11. Complaints and Applications

Email: info@tradiaturkey.com
Turkish KVKK Authority: kvkk.gov.tr
EU Data Protection Authority: contact your local DPA

⚖ Legal note: This policy is a draft and may be revised by legal counsel in Sprint 8. Material changes will be announced.