Privacy Policy

This website, handmadewebsite.com,
is run by Almond Dijital, the trading name of İrem Acar. We build websites for businesses across Europe and the UK.

We are the data controller for the information described here.

If you have a question about your data,
or you want us to delete it, email [email protected].

A real person reads that inbox.

When you use our contact form, we collect:

• Your name,
• Your email address,
• Your message to us.

We use this data only to read your message and write back to you.

• We DON'T add you to a mailing list,
• We DON'T use them for advertising,
• And we NEVER sell your details.

Our lawful basis for this is legitimate interests.
And the interest is straightforward.

If you send us a message,
we have an obvious and
clear reason to be able to
read it and to reply.

You can object to this at any time
(see Your rights below),
though if you do, we won't be able to get back to you.

Sharing your details is voluntary.
You only hand them over if you
choose to contact us.

If you don't, nothing happens, and the only
consequence is that we don't hear from you.

When you visit our website:
We use privacy-orianted analytics (anonymizes all data)
that we run ourselves, on our in-house servers.

It only tells us things like which pages people read
and roughly how many visitors we get.

It uses no cookies,
it does not store your IP address,
and it does not follow you across other websites.

We can't identify you from it.

Because of that, we don't need to show you a cookie banner,
and you don't need to click "accept cookies". (Isn't that awesome??)

Our lawful basis for the analytics is also legitimate interests:
We want to understand how the site is used so we can make it better.

We don't use tracking cookies.

Our analytics is cookieless.

(Our office cat Badem ate all of them.
Sorry not sorry.)

If we ever add something that needs a cookie, we'll update this page first,
and we'll ask for your consent where the law requires it.

We keep things in-house as much as we can.
A few trusted providers help us run our websites, emails and products.

Here is the full list and what each one does.

Hetzner: The website and the database
that stores contact-form messages
run on servers we rent from Hetzner,
a German hosting company.

Your message is stored on servers inside the EU. But we still take additional safety practices to make sure no information leaves our systems.

Proton Mail: Our email runs through Proton, based in Switzerland.
When you message us, the email side of that conversation passes through Proton.

And Switzerland has an EU adequacy decision, which means data held there is protected to EU standards.

Cloudflare: Cloudflare sits in front of our website to keep it fast and stable.

This means your connection, including your IP address,
has to pass through Cloudflare's network.

Cloudflare is certified under the EU-US Data Privacy Framework.

We don't share your data with anyone else.
Zero advertisers and zero data brokers.

The contact-form data itself lives on EU-based servers (Hetzner),
and our email provider is in Switzerland, both of
which are covered by EU-level protection.

We run the business from Türkiye, but the website, our database, and our email all run on infrastructure in the EU or in places with equivalent EU-level protection.

We only access your message
from Türkiye when we reply.

Türkiye doesn't have an EU adequacy decision.

Under EU rules, a message you send us directly, on your own initiative, isn't treated as an international data transfer, so it doesn't need any special paperwork.

We keep contact-form messages for up to 24 months after we last spoke.

After that, we delete them.

We hold them for that long in case you come back to us,
or in case we need to look back at what was discussed.

You don't have to wait 24 months.

If you want your message and details deleted sooner,
send an email to [email protected] and we'll do it.

Usually within a few days and
at the latest within one month.

Under the GDPR you have
rights over your data.

You can:

• Ask for a copy of what we hold about you
• Ask us to correct anything that's wrong
• Ask us to delete it
• Ask us to pause using it while something gets sorted out
• Object to us using it
• Ask for it in a portable format

To use any of these, email [email protected].

We'll respond within one month,
and it's free.

We don't make automated decisions
about you, and we don't profile you.

If you think we've handled your data badly, we'd like
the chance to put it right first, so please email us.

If you'd rather go straight to a regulator:

If you're in the EU or EEA, you can complain to the data protection authority in the country where you live or work.

The full list is at edpb.europa.eu.

If you're in the UK, you can complain to the
Information Commissioner's Office at ico.org.uk.

If we change how we handle data,
we'll update this page and change the date at the top.

EU data protection laws can change frequently, so we may adjust the wording to keep up with it.

Anything significant, we'll make it obvious.