Privacy Policy

Avelqor is a software engineering studio operating from Türkiye for clients across the Middle East, Europe, and beyond ("Avelqor", "the Studio", "we", "us"). For personal data processed through this website, Avelqor is the data controller.

For any question, request, or complaint about how your personal data is handled — including exercising the rights set out below — you can reach our data-protection contact directly at founder@avelqor.com→, or through our contact page→. Formal company-registration particulars are available on request. Either way, a real person answers.

We collect as little as possible, are explicit about why, and never sell your data. The same engineering rigor we sell is applied to privacy: nothing tracks you until you say yes, our analytics are cookieless, and our free website-audit tool keeps nothing it analyzes.

Information you give us

When you start a project, contact us, request an audit report, or subscribe to our newsletter, we receive what you choose to send — for example your name, email address, company, the nature of your project, your timeline and budget band, your preferred contact method, and any message you write.

Information collected automatically

Our hosting infrastructure keeps standard server logs (such as IP address, browser type, and the pages requested) for security and reliable operation. If — and only if — you allow analytics, we collect privacy-first, aggregate usage statistics that do not identify you.

We do not run advertising trackers, social-media pixels, cross-site tracking, or profiling of any kind. See our Cookie Policy→ for the full, short list of what runs in your browser.

We use the information above only for the purposes you would expect:

• To answer your inquiry and, if it is a fit, to scope and discuss a project with you.
• To send you the newsletter or a requested resource — and to let you unsubscribe at any time.
• To operate, secure, and improve this website and our tools.
• To meet our legal and accounting obligations.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not sell or rent it to anyone.

Under the GDPR (and the corresponding grounds in the KVKK) we rely on:

Your consent

For optional analytics and for the newsletter. You can withdraw consent at any time, with no effect on processing already carried out.

Steps prior to a contract

To respond to and scope a project you have asked us about.

Legitimate interests

To keep the site secure and working, and to understand demand for what we do — balanced against your rights, and never overriding them.

Legal obligation

Where we must retain certain records to comply with the law.

Analytics are off until you explicitly allow them, and when enabled they are privacy-first and cookieless — aggregate counts only, with no cross-site tracking and no personal profiles. We set a single cookie to remember your privacy choice; nothing else.

Our free website-audit tool is deliberately stateless: the address you submit and the report it generates are processed in the moment and stored nowhere. The only thing we keep is an email address you explicitly give us to receive a fuller report — which is then handled exactly like any other inquiry. Full details are in our Cookie Policy→.

We keep the list of third parties short and tell you who they are:

• Infrastructure and hosting providers that run this website on our behalf.
• A customer-relationship (CRM) provider we use to manage inquiries, once that integration is enabled.
• Professional advisers or authorities, where the law requires it.

Each provider acts as our processor under a contract that limits them to processing data on our instructions. We never sell your data or share it for anyone else’s marketing.

We operate from Türkiye and serve clients in the Middle East, Europe, and beyond, so your data may be processed in countries other than your own. Where it is, we use appropriate safeguards — such as standard contractual clauses or an adequacy decision — so it stays protected to the standard described here.

We keep personal data only as long as we need it for the purpose it was collected — to answer and act on your inquiry, to send a newsletter while you stay subscribed, or to meet a legal obligation — and then we delete or anonymize it.

Under the KVKK and the GDPR you have the right to:

• Know whether we process your data, and access a copy of it.
• Have inaccurate data corrected and incomplete data completed.
• Have your data erased, and restrict or object to our processing of it.
• Receive your data in a portable format, and withdraw any consent you gave.
• Lodge a complaint with a supervisory authority — in Türkiye, the Personal Data Protection Authority (KVKK); in the EU/UK, your local data protection authority.

To exercise any of these, reach us through our contact page→ and we will respond within the time the law requires — usually much sooner. We will never charge you for a reasonable request.

This site is served over encrypted connections, access to data is limited to the people who need it, and we collect the minimum we can in the first place — the strongest protection is the data we never hold. No system is perfectly secure, but security is treated as an engineering requirement, not an afterthought.

This is a website for businesses and is not directed at children. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.

We keep this policy current as the site and our practices evolve. When we make a material change, we update the date at the top of this page; significant changes will be highlighted clearly.