Skip to main content

LEGAL

Privacy Policy

How we collect, use, and protect your personal information when you visit this website or contact us.

Last updated: September 11, 2026

1. Introduction

At POA LAW Firm, protecting your privacy matters to us. This Privacy Policy explains what personal information we collect when you visit poaturkiye.com or contact us through it, why we collect it, how we use and protect it, and the rights and choices available to you.

It applies to this public website only.

2. Who We Are

POA LAW Firm is an international law firm based in Türkiye, serving foreign individuals, families, investors, entrepreneurs, and companies with legal and business interests in Türkiye. For the purposes of applicable data protection law, POA LAW Firm is the data controller responsible for your personal information collected through this website.

3. Information We Collect

We collect information in two ways: information you provide to us directly, and information collected automatically as you browse the site.

Information you provide directly — when you submit our consultation/contact form, we collect your name, email address, phone number, country, subject, message, preferred language, and preferred contact method.

Information collected automatically — with your consent (see "Cookies" below), we collect a randomly generated session identifier, your IP address, the pages you view, scroll depth, and clicks on key call-to-action elements, so we can understand how visitors use the site and prioritize genuine inquiries.

If you use the WhatsApp button on this site, you will be taken to WhatsApp (operated by Meta) with a pre-filled message that includes the page you came from and your session identifier — this exchange then takes place on WhatsApp's own platform, under WhatsApp's own privacy terms, not ours.

4. How We Use Your Information

We use the information we collect to:

  • Respond to your enquiry and provide the legal information or consultation you requested
  • Understand how visitors engage with the site, so we can improve it
  • Prioritize and route incoming enquiries to the right member of our team
  • Maintain the security of our systems and prevent abuse (e.g. spam submissions)
  • Comply with our own legal and regulatory obligations

5. Legal Basis for Processing

As a firm operating in Türkiye, our processing of your personal information is primarily governed by the Turkish Personal Data Protection Law No. 6698 ("KVKK"). We process your information on the basis of your explicit consent (for optional cookies/analytics), because it is necessary to respond to your enquiry, and because it is necessary for our legitimate interests in operating and securing this website.

If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) may also apply to our processing of your information, to the extent your data protection rights extend to us as a controller established outside the EU/UK.

6. Cookies and Tracking Technologies

We use a small number of cookies and similar technologies. When you first visit the site, a cookie banner lets you choose which categories to allow — nothing outside "Necessary" is set until you actively opt in, and you can change your choice at any time by clearing your browser's local storage for this site (a dedicated preferences link will be added here in a future update).

  • Necessary — required for the site to function (e.g. a session identifier, and remembering your cookie choice itself). These cannot be disabled and do not require consent.
  • Analytics — page views, scroll depth, and clicks on key buttons, used only to understand and improve the site. Only set if you opt in.
  • Marketing — reserved for measuring the effectiveness of future communications. Not currently used to serve any advertising; only set if you opt in.
  • Social — reserved for future social-media sharing/embed features. Not currently in use; only set if you opt in.

7. How Long We Keep Your Information

Your session identifier and related browsing activity are retained for 30 days from your last visit. Your cookie consent choice is remembered for up to 180 days, after which we will ask again.

We retain consultation and contact form submissions only for as long as reasonably necessary to respond to your enquiry, maintain our own business and client records, and meet any applicable legal, accounting, or regulatory retention requirements. Once that information is no longer needed for these purposes, it will be permanently deleted.

8. Who We Share Your Information With

We do not sell your personal information. We may share limited information with:

  • Service providers who help us operate this website (e.g. our email delivery and hosting providers), under obligations to protect your information
  • WhatsApp/Meta, only if you choose to use the WhatsApp contact button — see "Information We Collect" above
  • Courts, regulators, or other authorities, where we are legally required to disclose information

9. International Data Transfers

Some of the service providers we use to operate this website — for example, hosting or email delivery — may process information outside Türkiye. Where this is the case, we take reasonable steps to ensure your personal information continues to receive an appropriate level of protection, consistent with KVKK and, where applicable, GDPR requirements.

10. How We Protect Your Information

We use reasonable technical and organizational measures to protect your personal information, including restricting internal access to visitor and enquiry data to authorized staff, and logging staff access to that data for accountability. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Under KVKK Article 11, you have the right to learn whether we process your personal information, request information about that processing, learn its purpose and whether it is used accordingly, know the third parties to whom it is transferred, request correction of incomplete or inaccurate information, request its deletion or destruction, request notification of any correction/deletion to third parties it was shared with, object to a result that is to your detriment resulting solely from automated analysis, and claim compensation for damages arising from unlawful processing.

If GDPR applies to you, you have broadly equivalent rights, including access, rectification, erasure, restriction, portability, and objection.

To exercise any of these rights, contact us using the details in "Contact Us" below.

12. Children's Privacy

This website is not directed at children, and we do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, please contact us so we can remove it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "last updated" date above. We encourage you to review this page periodically.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, or wish to exercise any of your rights, please contact us: