Privacy Policy & Data Protection Notice
Last updated: 3 March 2026 · Prepared by: SpicesFire
1. Data Controller
At SpicesFire Digital ("SpicesFire", "we"), we take the protection of your personal data seriously. This notice has been prepared in accordance with Turkish Personal Data Protection Law No. 6698 ("KVKK") and applicable data protection principles.
2. Personal Data Collected
The following data may be processed within the scope of our services:
- Identity Information: Name, surname, business name
- Contact Information: Phone number, email address, address
- Business Information: Business type, working hours, location, Google Maps rating
- Digital Data: IP address, website visit data, email open/click data
- Payment Information: Payment transaction data (card details are not stored by us; the iyzico infrastructure is used)
3. Purposes of Processing
- Providing website design and development services
- Creating a sample website tailored to your business
- Informing you about our services
- Processing payments
- Customer relationship management
- Fulfilling legal obligations
- Processing data with automated systems and AI tools to improve our services
4. Legal Basis for Processing
Your personal data is processed under Article 5/2 of the KVKK on the following legal grounds:
- Our legitimate interest (collecting business information from publicly available sources)
- Necessity for the performance of a contract
- Compliance with legal obligations
- Your explicit consent (for marketing communications)
5. Transfer of Data
Your personal data may be shared with the following parties:
- Brevo (Sendinblue): Email delivery service
- iyzico: Payment infrastructure service
- Cloudinary: Image storage service
- Google: Business search services
6. Data Retention Period
Your personal data is stored for as long as the purpose of processing requires. After the customer relationship ends, data is anonymized or deleted within 180 days, except where legal obligations require otherwise.
7. Your Rights Under the KVKK
Pursuant to Article 11 of the KVKK, you have the following rights:
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether it is used accordingly
- To know the third parties to whom data is transferred domestically or abroad
- To request correction if processed incompletely or inaccurately
- To request deletion/destruction under Article 7 of the KVKK
- To request that correction/deletion be reported to third parties
- To object to a result against you arising from the analysis of processed data
- To claim compensation for damages suffered due to unlawful processing
8. Email Communication and Unsubscribing
Every email sent to you contains an "Unsubscribe" link. By clicking this link, you can stop our email communication at any time. Your unsubscribe request takes effect immediately.
9. Contact
To exercise your rights under the KVKK or for any questions: