Privacy Policy

How we collect, use, and protect your personal data.

Last Updated: 29.05.2026

Who We Are

Novexing Bağlarbaşı Mah. Bağdat Cad. No: 467 K:2 D:5 Maltepe / İstanbul 34844 Turkey

Email: hi@novexing.com Web: https://novexing.com

Tax Office: Küçükyalı Tax Number: 6990585564

This privacy policy explains how we collect, use, and protect your personal data when you visit our website.

What Data We Collect

Through the Contact Form

When you get in touch with us, we collect the following information:

  • Full Name — To identify and address you. Required.
  • Email address — To respond to your request. Required.
  • Message content — To understand and respond to your request. Optional.
  • Phone — For contact (if provided). Optional.

Automatically Collected Data

  • IP address — Security and server logs. Deleted after 30 days.
  • Page views — Site improvement. Anonymous, cookie-free.
  • Browser/device info — Compatibility. Anonymous statistics.

We do not use Google Analytics or similar tracking tools. Our self-hosted analytics solution uses no cookies and cannot be used to personally identify you.

Why We Collect Data

  • Respond to contact requests — Legal basis: Pre-contractual steps (GDPR Art. 6(1)(b)). KVKK equivalent: Contract formation.
  • Prepare proposals — Legal basis: Pre-contractual steps (GDPR Art. 6(1)(b)). KVKK equivalent: Contract formation.
  • Improve our site — Legal basis: Legitimate interest (GDPR Art. 6(1)(f)). KVKK equivalent: Legitimate interest.
  • Ensure security — Legal basis: Legitimate interest (GDPR Art. 6(1)(f)). KVKK equivalent: Legitimate interest.

Who We Share Your Data With

We do not sell or share your data for marketing purposes.

Data may be shared with the following providers for technical reasons:

  • Cloudflare — CDN, security, DDoS protection. Location: Global (EU compliant). Data: IP address (for security).
  • Hetzner — Server hosting. Location: Germany (EU). Data: All site data.

These services are used for technical infrastructure only. None of them run code in your browser or place marketing cookies.

How Long We Retain Your Data

  • Contact form data — Retained for 12 months, then deleted.
  • Server logs (including IP) — Retained for 30 days, then automatically deleted.

Cookies

We do not use tracking or marketing cookies. The cookies we use are strictly technical/essential (session management, CSRF security). Cloudflare may use security-related technical cookies; these are in the "essential" category and do not require consent.

Your Rights

Under GDPR (EU Residents)

If you reside in the European Union, you have the following rights:

  • Access — You can find out what data we hold about you.
  • Rectification — You can request correction of inaccurate data.
  • Erasure — You can request deletion of your data.
  • Restriction — You can request restriction of data processing.
  • Portability — You can receive your data in a structured format.
  • Objection — You can object to processing based on legitimate interest.

Under KVKK (Turkey)

Under Article 11 of Law No. 6698 on Protection of Personal Data, you have the right to learn whether your personal data is processed, request information, learn the purpose of processing, know the third parties your data is transferred to, request correction or deletion, object to processing, and claim compensation for damages.

How to Exercise Your Rights

Email: hi@novexing.com

Postal address: Novexing Bağlarbaşı Mah. Bağdat Cad. No: 467 K:2 D:5 Maltepe / İstanbul 34844

We will respond to your request within 30 days. We may ask for additional information to verify your identity.

Security

We take the following measures to protect your data:

  • HTTPS — All communication is encrypted via SSL/TLS.
  • Secure server — Hetzner, Germany (GDPR compliant).
  • DDoS protection — Cloudflare.
  • Access control — Authorization and logging.
  • Password storage — Hash + salt (bcrypt).

Right to Complain

If you have a complaint about our data processing practices, we encourage you to contact us first. If a satisfactory resolution cannot be found, you may contact the Personal Data Protection Authority (kvkk.gov.tr) in Turkey, or the data protection authority in your country of residence within the EU.

Children's Privacy

Our site is not intended for children under 16 years of age and we do not knowingly collect personal data from children.

Changes to This Policy

We may update this privacy policy from time to time. The current version is published on this page; the last update date is shown at the top of the page.

Project Compass