Privacy Policy

1. Who this policy covers

ITShield operates the website itshield.org. We are headquartered in Türkiye and also carry out work in Syria. For the website activities described here, ITShield is responsible for deciding how personal information is used.

This policy covers browsing our website and contacting us through its form or published email addresses. A client engagement may involve separate confidentiality, data-handling, and service agreements that explain the processing needed for that work.

2. Information collected

Information you provide

Our contact form asks for your name, email address, and organization. You may also select an urgent-request option and include a message. If you contact us by email, we receive the information in that message and any attachments you choose to send.

Information from website use

Website delivery, security, and measurement services can process technical information such as your IP address, browser and device characteristics, requested pages, referral information, timestamps, interaction events, and security or anti-spam signals. Cookies or similar identifiers may be involved, depending on the service and your browser settings.

3. Why information is used

• Responding to requests: understanding your question, replying, and discussing possible support.
• Operating the website: delivering pages, managing language and technical functionality, and maintaining the service.
• Protecting the service: detecting spam, abuse, faults, and suspicious activity.
• Understanding website use: reviewing how visitors use pages and improving their usefulness through the measurement services described below.
• Meeting responsibilities: handling privacy requests, keeping necessary business records, and meeting applicable legal obligations.

Under Türkiye’s Personal Data Protection Law No. 6698 (KVKK), the relevant processing condition depends on the purpose. It may include steps directly related to a contract, a legal obligation, the establishment or protection of a right, or a legitimate interest that does not override your fundamental rights. Where explicit consent is required, it must be specific and requested separately.

This policy is an information notice, not a request for blanket consent. Visiting the site or sending a question does not by itself give consent to unrelated processing. See the KVKK’s explanation of the law.

4. Cookies and external website services

The website uses WordPress and related tools for publishing, administration, and language functionality. These can use cookies or similar storage for sessions, preferences, and technical operation. Administrator login functionality is separate from ordinary public browsing.

Your browser controls

You can review, delete, or restrict cookies through your browser. Blocking a resource can affect the feature that uses it. Clearing cookies does not erase information already received by a provider, and private browsing does not stop all network collection. Google also provides information about its Analytics opt-out browser add-on.

Browser settings and this notice do not replace any separate consent that applicable law requires for optional tracking.

5. Recipients and international processing

Information may be handled by authorized ITShield personnel and the service providers needed for website hosting, email delivery, maintenance, security, backups, and measurement. The external services identified above can receive information directly from your browser. Disclosure may also be necessary to meet a lawful requirement or establish or protect a legal right.

Some providers operate internationally, so information may be processed outside Türkiye or the country where you are located. Our work in Syria does not mean that every website inquiry is sent there.

Transfers under our responsibility must satisfy applicable legal requirements, including Article 9 of the KVKK where it applies. The appropriate basis and safeguards depend on the particular transfer; this policy does not claim that one mechanism covers every provider. You can contact us to ask about the recipients and transfer arrangements relevant to your information.

See the KVKK’s information on international-transfer rules.

6. How long information is kept

Retention depends on why the information is held. Inquiry correspondence is kept for handling the request, necessary follow-up, and any resulting business relationship. Technical and security records are kept according to operational needs, incident investigation, and the relevant system settings. Legal duties or an actual dispute can require some records to be held longer.

The decision should take account of the purpose, the sensitivity of the information, whether the matter is still active, and any applicable legal requirement. Information that is no longer needed should be deleted or anonymized through the relevant system’s process. Backup copies can remain until the applicable backup cycle expires.

External providers may have their own retention arrangements. Ask us if you need the retention criteria relevant to a particular message or category of information.

7. Security and sensitive information

Access restrictions, website security controls, and maintenance support the protection of information. No website, email service, or transmission method can promise absolute security. Please use the general contact channels to arrange a suitable way to exchange confidential material.

Our public contact form is intended for professional inquiries. It is not a channel for uploading children’s records, medical information, or information about vulnerable people. If you believe inappropriate personal information has been sent to us, contact the privacy address so it can be reviewed.

8. Your rights and requests

Where the KVKK applies, you may ask whether your personal data is processed, request information about the processing and its purpose, and learn the recipients in Türkiye or abroad. You may also seek correction, deletion or destruction where the legal conditions are met, notification of relevant corrections or deletion to recipients, objection to a detrimental result arising solely from automated analysis, and compensation for damage caused by unlawful processing.

Start by emailing info@itshield.tech, preferably from the address you previously provided, with the subject “Privacy request”. Explain your request and the interaction it concerns. We may need to verify your identity or explain the formal submission requirements before disclosing information or acting on a request. Do not send an identity-document copy unless an appropriate secure process has been agreed.

Valid KVKK applications must be answered as soon as possible and within 30 days. You can complain to Türkiye’s Personal Data Protection Board through the applicable procedure if your request is refused, inadequately answered, or not answered in time. Other rights may apply under the law relevant to your circumstances.

Read the KVKK’s guide to data-subject rights and request procedures.

9. Questions and policy updates

We may update this policy when website services, processing arrangements, or applicable requirements change. The date at the top identifies the latest version. Changes to this notice do not remove rights relating to earlier processing.

For rules about using the website and linked tools, see our Website Terms.