Privacy Notice
Last updated: 10 October 2026
This notice explains how we process your personal data when you visit thebrandmove.com or contact us. It is provided under Article 10 of Türkiye's Personal Data Protection Law No. 6698 (KVKK) and, for visitors in the European Union and EEA, Articles 13 and 14 of the General Data Protection Regulation (GDPR).
Data controller
- Brand
- The Brand Move
- [email protected]
What personal data we process
- Contact form: your name, email address, phone number (optional), company or website (optional), the topic you select and your message.
- Live chat: your messages, your name and email address if you share them, the page where you started the chat and the pages you are on during it, the referring site, and your browser and device type.
- Security: a one-way hash derived from your IP address and the time of submission, used to prevent form abuse; server access logs with IP address, browser details and time of visit.
- Cookies: visit and usage data, to the extent you consent. See our Cookie Policy for details.
Purposes and legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form data | Replying to your enquiry, scheduling a call, preparing a proposal | Steps prior to entering into a contract (KVKK Art. 5(2)(c), GDPR Art. 6(1)(b)) and our legitimate interest (KVKK Art. 5(2)(f), GDPR Art. 6(1)(f)) |
| Live chat messages | Answering your question and, if you wish, replying by email | Steps prior to entering into a contract (KVKK Art. 5(2)(c), GDPR Art. 6(1)(b)) and our legitimate interest (GDPR Art. 6(1)(f)) |
| IP hash and access logs | Site and form security, preventing abuse | Our legitimate interest (KVKK Art. 5(2)(f), GDPR Art. 6(1)(f)) and legal obligation |
| Analytics and marketing cookies | Measuring site usage, evaluating advertising results | Your consent (KVKK Art. 5(1), GDPR Art. 6(1)(a)) |
Who we share data with
We share personal data only as far as needed for the purposes above, with:
- the hosting provider that runs the site (Türkiye),
- the email service providers we use to receive and answer form messages,
- Google LLC (Google Analytics and Google Ads), only with your consent,
- competent public authorities where legally required.
Email providers and Google may process data on servers outside Türkiye and the EU, including in the United States. Such transfers are made in line with Article 9 of KVKK and Chapter V of the GDPR; transfers through cookies only take place with your consent.
How long we keep data
- Contact form correspondence: up to 2 years after your enquiry is closed.
- Live chat conversations: 180 days after the chat is closed.
- IP hash used against form abuse: 1 hour.
- Server access logs: for the period required by applicable law.
- Cookies: for the periods listed in our Cookie Policy.
When the period ends, we delete, destroy or anonymise the data.
Your rights
Under Article 11 of KVKK and Articles 15 to 21 of the GDPR, you have the right to:
- find out whether we process your personal data and request information about it,
- learn why it is processed and whether it is used for that purpose,
- know the third parties in Türkiye or abroad to whom it is disclosed,
- have inaccurate data corrected and request erasure, and have these steps notified to recipients,
- restrict processing and receive your data in a portable format (GDPR),
- object to processing based on our legitimate interest, and to a decision made solely by automated means that affects you,
- withdraw your consent at any time, without affecting earlier processing,
- claim compensation for damage caused by unlawful processing.
How to make a request
Send your request to [email protected] with information that lets us verify your identity. We respond within 30 days at the latest. You can also lodge a complaint with Türkiye's Personal Data Protection Board or, if you are in the EU or EEA, with the data protection authority in your country.