About your information.

In short.

We use the details you send through the project form to reply to you, prepare a quote and see which channel brought you here.

We do not store your IP address. There are no marketing cookies or tracking pixels.

Who is responsible?

The data controller is Erishan, an individual. For anything about this notice, write to hello@erishan.com.

What information?

The form asks for the type of need, a project summary, timing, a budget range, your name and email. Link, business name and phone are optional.

With each form we also store the time it was sent, the page language, any UTM parameters and a submission ID.

Your IP address is not stored in our records. Cloudflare processes it to protect the site, for the security check (Turnstile) and rate limiting.

Purpose and legal basis.

Your details are used to reply to your request and prepare a quote. We also use them to measure which channel (an ad or a link) brought you to the site. They are not used for anything else and never sold.

Replying to your request and preparing a quote are directly related to forming a contract. This processing is based on Article 5(2)(c) of Turkey’s data protection law (KVKK).

Who processes it?

The form and email rely on these service providers.

Cloudflare

Hosting, security and cookie-free analytics

Supabase

Form records, stored in the EU (Frankfurt)

Resend

Sending email

Google (Gmail)

The hello@erishan.com mailbox

Telegram only receives a notice that a new request has arrived. No personal data is sent there.

These providers may keep servers outside Turkey. Transfers abroad are subject to KVKK Article 9.

Cookies.

There are no marketing cookies or pixels. Only necessary cookies are used, for your language choice and the security check.

Visit statistics come from cookie-free analytics.

Your form draft is kept only in this browser tab (sessionStorage). It is deleted when you close the tab or send the form, and it never reaches our server before you send it.

How long is it kept?

Form records are deleted automatically after 12 months.

Your rights.

Under KVKK Article 11, you can ask whether we process your data, have it corrected or deleted, and object to processing.

Send requests by email to hello@erishan.com. We answer within 30 days at the latest.

If you are in the EU.

Where the GDPR applies, we process your details to take steps you asked for before a possible contract (Article 6(1)(b) GDPR).

You can ask for access, correction, deletion and a portable copy of your data.

You can also complain to the data protection authority in your country.

Cloudflare, Resend and Google are based in the US. Transfers to them are subject to Chapter V of the GDPR.

Updates.

This notice was last updated in October 2026.