This notice explains which personal data Webki processes, for what purposes and on what legal grounds when it contacts businesses, prepares sample (demo) websites for them and answers requests sent through the contact form on webki.io. It is the English version of Webki's disclosure under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), published in Turkish as the KVKK Aydınlatma Metni.
1. Data controller
[FULL NAME] ("Webki")
Address: [ADDRESS]
Email: emre@webki.io
Web: webki.io
2. What data we process
| Category | Examples | Source |
|---|---|---|
| Contact form details | Your name, email address, business name or website, phone number (optional), the needs you ticked, your message, the language of the form, the time it was sent and the country the connection came from (a country code our hosting provider derives from the IP address; the IP address itself is not written to this record) | What you enter in the contact form on webki.io |
| Business contact details | Business name, address, phone number, email address, website, Instagram account, opening hours, location | Public sources such as OpenStreetMap, Google Maps, the business's own website and social media accounts |
| Contact person | Name of the owner or person in charge (if known) | Public sources, our correspondence with you, meetings in person |
| Website analysis | Speed score, mobile friendliness, SSL status and similar technical findings about your current site | The public pages of your site, measuring tools such as Google PageSpeed |
| Demo site content | A sample site prepared with your public information | The sources above |
| Revision panel data | Comments you leave on the demo, the page element you commented on, screen size (e.g. "390x844"), comment date | What you enter in the revision panel on the demo site |
| Technical logs | IP address, browser information, time of access | Logs kept automatically by our infrastructure provider (Cloudflare) when you visit webki.io or a demo site |
| Correspondence | Content and dates of email and WhatsApp messages, your replies | Our correspondence with you |
| Opt-out record | Business name, contact channel, date of opt-out | Your "no thanks" reply |
We don't intend to process special categories of personal data such as health data. Please don't write such information in the contact form, the revision panel or your messages.
3. Cookies and tracking
webki.io sets no cookies and runs no analytics, advertising or tracking tools, and its pages load no fonts, images or scripts from other sites. To tell people from automated submissions, the contact form sends the time the page was opened and a hidden field that should stay empty. Both are used only for that check and are not stored.
4. Why we process it
- To answer the request you send through the contact form and prepare the proposal you ask for,
- To identify and contact businesses that could use a website service,
- To review your current site and prepare and show you a demo site made for you,
- To apply the changes you request on the demo,
- To answer your questions, make an offer and, if a contract is signed, provide the service,
- Not to contact you again if you told us you don't want to be contacted,
- To keep webki.io and the demo sites secure and running, and to prevent misuse of the form and the sites,
- To meet our legal obligations and protect our rights in a dispute.
5. Legal grounds (KVKK Art. 5/2)
| Purpose | Legal ground |
|---|---|
| Answering contact form requests and preparing proposals | Art. 5/2(c): directly related to entering into a contract at your request; also Art. 5/2(f), legitimate interest (being able to answer incoming requests) |
| Identifying businesses from public information, site analysis, preparing a demo and first contact | Art. 5/2(f): our legitimate interest (offering a service to small businesses), provided it does not harm your fundamental rights and freedoms; also Art. 5/2(d), as the business made the information public for commercial purposes |
| Revision requests, offers and contract negotiations | Art. 5/2(c): directly related to entering into or performing a contract |
| Keeping the opt-out record | Art. 5/2(ç): legal obligation (respecting the right to refuse commercial electronic messages) and Art. 5/2(f) legitimate interest |
| Technical logs, form protection and security | Art. 5/2(f): legitimate interest; Art. 5/2(ç) where required by law |
| Invoicing, accounting and dispute records | Art. 5/2(ç) legal obligation, Art. 5/2(e) establishing, exercising or protecting a right |
6. How long we keep it
- Contact form records: if no contract follows, deleted within [FORM PERIOD] after your request has been answered. If a contract is signed, kept with the contract records.
- Demo and revision data: the demo is deleted automatically by the end of day 9 after it was sent to you, including the demo site, your comments, revision drafts and backups.
- Contact and analysis details: if no contract follows, deleted together with the demo, by the end of day 9.
- Opt-out record: for businesses that said no, only the business name, contact channel and date are kept for [PERIOD], so that we don't contact them again.
- If a contract is signed: for the term of the contract and afterwards for the periods set by law (e.g. the Turkish Commercial Code and Tax Procedure Law periods for commercial books and records).
- Technical logs: for as long as the infrastructure provider keeps them.
Data whose period has ended is deleted, destroyed or anonymised.
7. Who we share it with
We don't sell your data or share it with others for marketing. We use the following service providers to run the service:
| Recipient | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting webki.io and the demo sites, the database that holds contact form records, delivering form notification emails, domain and security infrastructure | Abroad (US-based, global server network) |
| Anthropic, PBC | AI assistance in applying the comments you leave in the revision panel to the demo site | Abroad (US) |
| [EMAIL PROVIDER] | Email correspondence and the mailbox that receives contact form notifications | [LOCATION] |
| WhatsApp / Meta | WhatsApp correspondence | Abroad |
| Site speed measurement (only your site's address is sent) | Abroad | |
| Authorised public bodies | Where required by law | Turkey |
Transfers abroad (KVKK Art. 9): some of the providers above are located outside Turkey, so your data is transferred abroad. These transfers rely on the appropriate safeguards provided for in KVKK Art. 9.
8. Your rights (KVKK Art. 11)
By applying to Webki you can:
- learn whether your personal data is processed,
- request information about it if it is,
- learn the purpose of processing and whether it is used for that purpose,
- know the third parties in Turkey or abroad to whom it is transferred,
- ask for it to be corrected if it is incomplete or wrong,
- ask for it to be deleted or destroyed under the conditions of KVKK Art. 7,
- ask for corrections, deletions and destruction to be notified to the third parties it was transferred to,
- object to a result against you that arises solely from automated analysis of the data,
- claim compensation if you suffer damage from unlawful processing.
9. How to apply
Send your request to emre@webki.io. Include your name, your business's name, what you're asking for and how we can reach you. Your request will be answered free of charge within 30 days at the latest.
If you only want us to stop contacting you, replying "no thanks" to our email or WhatsApp message is enough.