Last updated: 13 September 2026
This policy explains how your personal data is processed when you visit the brandaft.com website, use our forms and free SEO tools, or contact us by email or WhatsApp. It also fulfils the information obligation under Article 10 of Turkey’s Personal Data Protection Law No. 6698 (“KVKK”).
Data we process on behalf of our clients as part of the digital marketing services we provide to them is governed by the relevant service agreement, not by this policy.
1. Data controller
Brandaft Dijital Pazarlama Ajansı (“Brandaft”)
Address: Zafer Mah., Adile Naşit Bulvarı, Sevalista Residence No:36, Esenyurt / İstanbul
Email: hello@brandaft.com
2. What personal data do we process?
- Identity and contact details: Full name, email address, phone number.
- Request details: Your website address, the industry you operate in, budget range, the services you are interested in, your target keywords, the sites you consider competitors, and any other information you share in your message.
- Tool usage data: The email address you enter in our free tools (site analysis, rank checker, backlink analysis, sitemap and robots.txt generators, meta tag generator), the domain or page address you analyse, keywords or text content, and a summary of the analysis result.
- Transaction security data: IP address, browser and device information, the page you came to our site from, date and time of the action, and email verification records.
- Visit and usage data: Page views, clicks, scrolling and session activity collected through cookies and similar technologies, as well as ad conversion data (details in section 6).
We do not request special categories of personal data (such as health or biometric data). Please do not share this kind of information in forms or messages.
3. For what purposes and on what legal grounds do we process it?
- Responding to your requests and preparing quotes and diagnostic reports: Processing being directly related to entering into a contract (KVKK Art. 5/2-c) and our legitimate interest in responding to your request (Art. 5/2-f).
- Providing our free tools and sending the result to your email: Providing the service you requested (Art. 5/2-c).
- Verifying email addresses, applying usage limits, preventing spam and abuse, and ensuring information security: Our legitimate interest (Art. 5/2-f).
- Measuring site usage, improving user experience and measuring the effectiveness of our advertising: Your explicit consent (Art. 5/1).
- Sending campaigns, newsletters and similar commercial electronic messages: Only if you give consent under Law No. 6563. The result emails sent by our tools are part of the service you requested.
- Fulfilling our legal obligations and responding to requests from authorised bodies: Processing being expressly provided for by law and necessary to comply with our legal obligations (Art. 5/2-a, Art. 5/2-ç).
- Protecting our rights in potential disputes: The establishment, exercise or protection of a right (Art. 5/2-e).
4. How do we collect your data?
We collect your data electronically, by automated or partly automated means, through the forms and tools on our website, email and WhatsApp correspondence, and cookies and similar technologies.
5. Who do we share your data with?
We do not sell your personal data. We share it only with the following service providers, and only to the extent necessary for the purposes above:
- Hosting: Hostinger (website and database hosting).
- Email: Google (sending form notifications and tool results).
- Analytics and ad measurement: Google (Google Analytics, Google Tag Manager, Google Ads) and Microsoft (Microsoft Clarity).
- Tool infrastructure: SerpApi (keywords and domain entered into the rank checker), Moz (domain entered into the backlink analysis), OpenAI (text entered into the meta tag generator).
- Instant messaging: WhatsApp / Meta (only if you contact us via WhatsApp).
- Embedded content: YouTube and Google Fonts (when you view this content, your browser connects to the relevant provider).
- Authorised public bodies: Only where there is a legal obligation to do so.
Transfers abroad: As many of the service providers above have servers located outside Turkey, your personal data may be transferred abroad. These transfers are carried out in accordance with the conditions set out in Article 9 of the KVKK.
6. Cookies
Cookies are small text files that a website you visit stores in your browser. Our site uses three types of cookies and similar technologies:
- Essential cookies: Required for the site to work — for example, remembering your language preference and letting you use our tools again without re-verifying your email address once it has been verified.
- Analytics cookies: Google Analytics and Microsoft Clarity help us understand how the site is used. Clarity processes clicks, scrolling and mouse movements as session recordings and heatmaps in which sensitive areas such as form fields are masked.
- Advertising cookies: Google Ads lets us measure whether our ads lead to an action on our site (such as a form submission).
You can delete or block cookies in your browser settings. To opt out of Google Analytics on all websites, you can use Google’s browser add-on for this. If you block essential cookies, some parts of the site may not work.
7. How long do we keep your data?
We keep your personal data for as long as required by the purpose for which it is processed and for the retention and limitation periods set out in the applicable legislation. At the end of these periods, your data is deleted, destroyed or anonymised.
8. How do we protect your data?
Data transmitted between you and our site is encrypted with HTTPS. Access to personal data is limited to authorised persons only. Our forms and tools include checks that prevent automated submissions and abuse. However, no transmission over the internet can be guaranteed to be completely secure; please do not share passwords or payment details by email or through forms.
9. Your rights under the KVKK
Under Article 11 of the KVKK, you have the right to learn whether your personal data is being processed; to request information if it has been processed; to learn the purpose of processing and whether it is being used in line with that purpose; to know the third parties in Turkey or abroad to whom it has been transferred; to request correction if it has been processed incompletely or inaccurately; to request its deletion or destruction under the conditions set out in the KVKK and to have these actions notified to the third parties to whom it was transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage as a result of unlawful processing.
You can withdraw consent given for processing based on explicit consent at any time.
10. Applications
In line with the Communiqué on the Procedures and Principles of Applications to the Data Controller, you can send requests regarding your rights, together with information that allows us to verify your identity, by email to hello@brandaft.com or in writing to Zafer Mah., Adile Naşit Bulvarı, Sevalista Residence No:36, Esenyurt / İstanbul. Your application will be concluded free of charge within 30 days at the latest; if the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
11. Other websites
Our site may contain links to other websites. We are not responsible for the privacy practices of these sites; we recommend reviewing the policies of any sites you visit.
12. Changes
We may update this policy to reflect changes in our services or in legislation. The current version is always published on this page, with the last updated date shown at the top.
