Privacy Notice
Last updated: 28 September 2026
Controller and contact
SIPHER is the controller for the website enquiry process. Privacy requests may be sent to info@siphercyber.com. SIPHER operates from Istanbul, Türkiye.
Data we collect and why
We collect the name/organization, business email address, selected service area, enquiry text and source information that you submit. We use these data to receive and respond to your request, assess the requested service, take steps toward a potential engagement, maintain business correspondence, protect our systems and establish or defend legal claims where necessary.
Legal bases
Where the GDPR applies, processing is based as appropriate on steps taken at your request before entering into a contract (Article 6(1)(b)) and legitimate interests in handling genuine business enquiries, securing the service and maintaining necessary records (Article 6(1)(f)). Under Türkiye's Law No. 6698 (KVKK), the corresponding processing is carried out where necessary for the establishment or performance of a contract and/or for SIPHER's legitimate interests without harming fundamental rights and freedoms.
Recipients and international processing
Data may be processed by authorized SIPHER personnel and by infrastructure providers used to host the website, deliver transactional email and secure the service. Some infrastructure providers may process data outside Türkiye or the country in which you are located. Where legally required, such transfers must be implemented using an applicable transfer mechanism and safeguards.
Retention
Enquiries are kept only for as long as reasonably necessary to respond, manage a resulting business relationship, meet legal obligations, resolve disputes and protect legitimate interests. Retention may vary where a contract or legal obligation requires a longer period.
Your rights
Depending on applicable law, you may have rights to request information and access, correction, deletion or restriction, object to certain processing, request portability, and lodge a complaint with a competent supervisory authority. Under KVKK, data subjects also have the rights set out in Article 11. Requests can be sent to the contact address above; we may need to verify identity before acting on a request.
Security and data minimisation
We use technical and organizational safeguards appropriate to the website enquiry process. Do not submit passwords, authentication secrets, special-category personal data, incident evidence or other unnecessary sensitive information through the general contact form. For an active security incident, contact SIPHER first to agree a suitable transfer channel.
Cookies
This version of the SIPHER website does not intentionally use advertising or behavioural tracking cookies. Infrastructure providers may process limited technical request data required for security, delivery and operation of the service.