Last updated: 13 October 2026
This Privacy Policy explains how Elphisia (“we”, “us”) collects, uses and protects personal data when you visit our website or get in touch with us. We process personal data in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR).
Who we are
Elphisia is a digital product agency based in Istanbul, Türkiye. We are the data controller for the personal data described in this policy.
Yamanevler Mah., Alemdağ Cad., Nevzatbey İş Hanı No: 141, 4/41, İstanbul, Türkiye
Email: [email protected] · Phone: +90 501 592 11 26
What data we collect
- Information you send us: your name, email address, phone number and the details of your project when you contact us by email, phone or through our contact form.
- Technical data: when you visit the site, your browser automatically shares standard information such as your IP address, browser type and device type with the servers that deliver our pages, fonts and images.
We do not ask for, and do not want to receive, sensitive personal data.
How we use your data
- To reply to your inquiry and prepare proposals.
- To deliver and manage projects we agree on together.
- To keep the website secure and working properly.
- To meet our legal and accounting obligations.
We rely on your request to contact us, on the performance of a contract with you, on our legitimate interest in running our business, and on legal obligations as the legal grounds for this processing. We never sell your personal data.
Cookies and third parties
Our website does not use advertising or tracking cookies. Some content, such as images and icon fonts, is loaded from third-party content delivery networks, which receive the technical data described above in order to deliver that content.
Sharing your data
We share personal data only with service providers that help us run our business, such as email and hosting providers, and only as far as needed. Some of these providers may store data outside Türkiye; in that case we take the safeguards required by law.
How long we keep it
We keep inquiry data for as long as needed to respond and follow up, and project and invoicing records for the periods required by law. After that, we delete or anonymise the data.
Your rights
Under KVKK Article 11, and the GDPR where it applies, you can ask us whether we process your data, request access to it, ask us to correct or delete it, object to its processing, and request information about who we have shared it with. To use any of these rights, write to [email protected]. We will reply within 30 days.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed.