Clear purposes.
Accountable handling.

The EnterTurkey operation

EnterTurkey is the business name of the research and consulting operation described on this website. The operation is managed by Recep Çevik, Co-Founder and General Manager, and coordinated from Ankara, Türkiye. EnterTurkey determines the purposes and means of handling customer and enquiry information described here.

Where a review is commissioned for a business customer, that customer remains responsible for the lawfulness of the personal information it supplies. Any separately agreed data-processing terms for a particular engagement apply alongside this notice.

What we collect, and where it comes from

• Business enquiries: your name, business email, company and any optional phone, location, timing or description you provide.
• Customer accounts and purchases: account identifiers, login email, selected package, order and payment status, purchase reference and related service correspondence. Authentication and payment processing take place through our platform providers; passwords and payment card information should never be placed in a supplier brief.
• Review context: supplier company and representative names, sector, product and product type, requested checks, source records, relevant correspondence, photographs and documents.
• Supplier-related information: professional roles and business relationships found in public or official company records, information supplied by the customer or supplier, and observations obtained within the agreed field-review scope. A public record may still contain personal information.
• Technical information: security and session information, browser settings and platform operational logs generated when the service is used.

Required fields are identified when you submit information. Without the information necessary for a requested service, we may be unable to respond, verify a purchase or complete the review. Optional fields can be left blank. Do not submit unrelated health information, identity-document copies, banking credentials or private employee records.

Each use has a defined purpose

The interests above are limited to the service, business communication, reliable research and protection of the operation. They do not justify collecting unrelated information. Where consent is the basis, you may withdraw it without affecting processing that occurred lawfully before withdrawal. Under Türkiye’s Law No. 6698, the corresponding processing condition must also be satisfied for the particular activity.

Our service guide provides informational answers; it does not make legally significant automated decisions about individuals. Supplier findings require human review and do not certify or guarantee a business.

Who may receive information

Information may be available to authorised EnterTurkey staff and field contributors who need it for the agreed work; providers supporting hosting, authentication, payment processing, private document storage and transactional communication; professional advisers where necessary; and competent authorities where disclosure is required by law.

Wix provides the site’s managed business infrastructure. Payment providers process payment details in their own checkout environments and may have separate responsibilities and notices. Provider services can involve processing outside your country, including in Türkiye and other locations used by Wix and its service providers. Their contractual and transfer arrangements must be considered alongside those applicable to the engagement. You can request information about relevant recipients and safeguards through our privacy contact point. See Wix’s privacy notice and Wix’s data processing agreement.

For Lite and Pro, the requesting customer’s identity and who commissioned the review are kept confidential from the supplier. Enterprise requires advance supplier notice, appointment coordination and agreed facility access; only the information needed for that coordination is shared. Findings and documents are delivered through the customer’s private workspace, rather than published as a public supplier profile.

Keep information for its purpose

These are record-review limits, not a promise that every record is removed by an automatic timer. The responsible team reviews whether deletion, anonymisation or a documented retention exception is appropriate. Backup and provider records may follow their separate recovery and security cycles. A specific hold must not be used to retain unrelated information indefinitely.

A controlled review file

Customer requests are connected to the authenticated purchase owner. Team access requires an authorised role, and staff-only drafts and evidence are withheld from the customer until the report is approved and delivered. Private PDF, JPEG and PNG uploads are limited to 5 MB; authorised download links expire after five minutes.

Public sample reports contain fictional cases and illustrative records. Checkout return links use an opaque reference and do not include the supplier brief or contact details. Security measures reduce risk, but no online system can be guaranteed completely secure. Let us know promptly if you believe information has been accessed incorrectly.

Make a request without a purchase

Depending on the law applicable to your information, you may request access or a copy, correction of inaccurate information, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent for consent-based processing. Rights can be limited where a legal obligation, the rights of another person or a valid legal claim requires continued handling.

Use the personal information request page. We may seek proportionate confirmation of identity before disclosing or changing personal information. Do not send an identity document in the initial message. Where GDPR applies, the normal response period is one month; a permitted extension will be explained within that first month. Requests under Türkiye’s Law No. 6698 are handled within the applicable legal response period, normally no later than 30 days.

You may complain to the data protection authority competent for your residence or the matter concerned, including your relevant EU/EEA supervisory authority where GDPR applies, or Türkiye’s Kişisel Verileri Koruma Kurumu under its applicable procedures. See EU/EEA supervisory authorities and KVKK. Contacting us does not waive your statutory rights.

What your browser remembers

Cookies and similar storage support secure sessions, sign-in and the checkout journey. The frontend also keeps a motion preference and a temporary purchase draft. Optional advertising or analytics technologies require appropriate permission before use where the law requires it.

The website’s own frontend does not include custom advertising pixels. Provider-managed cookies and any later integrations require their own inventory and settings; a motion preference is not consent to tracking. Use your browser’s site-data controls to inspect or remove cookies. Where a provider consent panel is displayed, use it to manage non-essential categories. See the platform cookie reference for provider cookie names and stated durations.

Questions stay connected to the team

We update this notice when service handling changes and identify the revision date above. Material changes affecting an active engagement should be communicated through its service contact channel. A new use of information requires an appropriate purpose and lawful basis.

This notice is structured with reference to GDPR Articles 12–14, EDPB guidance on individuals’ rights and KVKK’s information-duty guidance. These sources do not certify EnterTurkey’s operational compliance.