This Privacy Policy explains how Kaya Development ("we", "us", "Kaya") handles personal information when you visit kayadevelopment.com, engage with us professionally, apply for a role, or subscribe to our publications. We aim to be straightforward: we collect what we need, we tell you why, and we do not sell your information.
What we collect
Information you give us directly. When you contact us, apply for a role, subscribe to a newsletter, request an assessment (such as Brand Check-Up), or engage us professionally, you provide information such as your name, email, organization, role, and the content of your message. For applications, you may also provide a CV, portfolio link, or salary expectations.
Information collected automatically. When you visit our site, we and our service providers collect information such as IP address, browser type, device characteristics, the pages you visit, and timestamps. We use this for security, performance, and aggregate analytics — never for individual profiling.
Information from third parties. If you connect to us through a referral, recruiter, or shared client engagement, the introducing party may share basic information about you. We confirm consent at first direct contact.
Why we use it
- To respond to your enquiry, application, or subscription
- To deliver and improve the services and tools you have requested
- To send you publications, reports, and event invitations you have subscribed to (you can unsubscribe at any time)
- To comply with applicable legal, regulatory, and tax obligations
- To detect and prevent fraud, abuse, or security incidents
We will never use your information for purposes incompatible with these without first asking you.
Legal bases (GDPR/KVKK)
Where applicable law requires it, we rely on one of the following bases: (a) your consent, which you can withdraw at any time; (b) the performance of a contract with you; (c) our legitimate interests in operating and improving our business, where these are not overridden by your rights; or (d) a legal obligation. For applicants located in Türkiye, we process data in line with KVKK (Kişisel Verilerin Korunması Kanunu).
Sharing
We share personal information only as needed and only with parties who are bound to use it for the same limited purpose:
- Service providers who host our infrastructure, send our emails, or run our analytics, under contractual confidentiality and data-protection terms
- Professional advisers (auditors, lawyers, accountants) where required
- Authorities and regulators where legally required
- A successor entity in the unlikely event of a merger, acquisition, or restructuring, with continued protection of your data
We do not sell personal information. We do not share it with third parties for their own marketing.
International transfers
Kaya operates from Türkiye and works with international clients. Where we transfer personal data outside Türkiye or the EU/EEA, we use safeguards required by applicable law — including the European Commission's Standard Contractual Clauses and, where relevant, supplementary technical measures.
Retention
We keep personal information only as long as needed for the purposes set out in this policy. Indicative periods: enquiry correspondence — 24 months; application materials — 12 months for unsuccessful candidates (with consent for talent-pool retention beyond that); engagement records — for the duration of the engagement plus 6 years for tax and audit purposes; newsletter subscribers — until you unsubscribe.
Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict, or object to our processing of your personal information; to portability of data you have provided; and to withdraw consent at any time without affecting prior lawful processing. To exercise these rights, contact us at privacy@kayadevelopment.com. If you have unresolved concerns, you may also lodge a complaint with your local data protection authority — in Türkiye, the KVKK (kvkk.gov.tr).
Security
We apply administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, and unauthorized access. These include encryption in transit, restricted access on a need-to-know basis, employee training, and incident-response procedures. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and the relevant authorities as required.
Cookies & analytics
See our Cookie Preferences page for details on cookies and similar technologies. You can adjust your preferences there at any time.
Children
Our site and services are not directed to children under 16, and we do not knowingly collect data about them.
Changes
We may update this policy from time to time. Material changes will be notified on this page, with a revised "last updated" date. For active engagements and subscribers, we will also notify by email where required.
Contact
Questions about this policy or our handling of your information: privacy@kayadevelopment.com. Postal address available on request.