Privacy Policy — Ironman Consulting

Last updated: July 27, 2026

This Privacy Policy describes how Ironman Consulting (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit our website at www.ironmanconsulting.com, contact us, or use our services. Please read this policy carefully. By using our website or providing your information to us, you agree to the practices described herein.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Ironman Consulting
Atatürk Mahallesi Ertuğrul Gazi Sokak No:2E
Metropol İstanbul Sitesi A1 Blok Daire:331
34758 Ataşehir / İstanbul, Turkey
Phone: +90 (216) 456 72 32
Email: ironman@ironmanconsulting.com

2. Personal Data We Collect

We may collect the following categories of personal data:

Contact information: name, email address, telephone number, company name, job title, and postal address.
Communication data: information you provide when completing contact forms, requesting information, subscribing to updates, or corresponding with us by email or phone.
Technical and usage data: IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, time spent on pages, and other usage statistics collected through cookies and similar technologies (see our Cookie Policy).
Business relationship data: information relating to proposals, contracts, invoices, project delivery, and client account management.
Marketing preferences: your choices regarding newsletters, event invitations, and promotional communications.

We do not knowingly collect personal data from children under the age of 18. If you believe we have collected such data, please contact us so we can delete it promptly.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to inquiries and provide information about our consulting and technology services.
To deliver, administer, and improve our services under contract with clients.
To manage our business relationship with you, including billing and account administration.
To send service-related communications and, where permitted, marketing materials about our services, events, and insights.
To operate, maintain, secure, and improve our website and online services.
To analyze website traffic and user behavior in aggregated form.
To comply with legal obligations and protect our legal rights.
To prevent fraud, abuse, and unauthorized access to our systems.

4. Legal Basis for Processing

We process personal data on the following legal bases, as applicable:

Performance of a contract — where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legitimate interests — where processing is necessary for our legitimate business interests, such as operating our website, improving our services, and communicating with prospective clients, provided your interests do not override ours.
Legal obligation — where processing is required to comply with applicable laws and regulations.
Consent — where you have given clear consent, such as for non-essential cookies or direct marketing. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. KVKK Disclosure (Law No. 6698)

As a data controller established in the Republic of Türkiye, Ironman Consulting processes personal data in accordance with the Law on the Protection of Personal Data (KVKK — Law No. 6698) and related secondary legislation.

Under Article 10 of KVKK, we inform data subjects that personal data may be processed for the purposes stated in this Privacy Policy, transferred to domestic and/or foreign recipients where legally permitted, and collected through automatic or non-automatic means as part of our data recording systems.

Pursuant to Article 11 of KVKK, data subjects have the right to:

Learn whether personal data is being processed;
Request information if personal data has been processed;
Learn the purpose of processing and whether data is used in accordance with that purpose;
Know the third parties to whom personal data is transferred domestically or abroad;
Request correction of incomplete or inaccurate data;
Request deletion or destruction of personal data under the conditions set forth in KVKK;
Request notification of correction or deletion to third parties to whom data was transferred;
Object to adverse results arising solely from automated analysis of processed data;
Claim compensation for damages arising from unlawful processing.

Requests under KVKK may be submitted in writing or through other methods prescribed by the Personal Data Protection Board to ironman@ironmanconsulting.com. We will respond within the statutory period. You may also lodge a complaint with the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu — KVKK) at www.kvkk.gov.tr.

6. GDPR (Where Applicable)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right of access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with your local supervisory authority.

7. Sharing and Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We may share personal data with:

Service providers and processors who assist us with hosting, IT infrastructure, email delivery, analytics, CRM, and professional services, subject to contractual data protection obligations.
Business partners where necessary to deliver a service you have requested, under appropriate confidentiality agreements.
Professional advisers such as lawyers, auditors, and insurers.
Public authorities when required by applicable law, regulation, court order, or governmental request.
Successors in the event of a merger, acquisition, reorganization, or sale of assets, subject to continued protection of your data.

8. International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection. Where required, we implement appropriate safeguards such as standard contractual clauses approved by relevant authorities or other lawful transfer mechanisms under KVKK and GDPR.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, tax, accounting, or reporting requirements. Typical retention periods include:

Website inquiries: up to 24 months from last contact, unless a business relationship is established.
Client records: for the duration of the engagement and up to 10 years thereafter, as required by applicable commercial and tax law.
Marketing consent records: for the period consent is active and a reasonable archive period thereafter.
Cookie and analytics data: as described in our Cookie Policy.

When personal data is no longer required, we securely delete or anonymize it.

10. Data Security

We implement appropriate technical and organizational security measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include access controls, secure hosting, encryption where appropriate, and staff awareness training.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

11. Your Choices and Rights

Depending on applicable law, you may have the right to access, correct, update, or delete your personal data; object to or restrict certain processing; withdraw consent; and receive a copy of your data in a portable format.

To exercise your rights, contact us at ironman@ironmanconsulting.com. We may need to verify your identity before processing your request. We will respond within the timeframes required by applicable law.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top of this page indicates when the policy was most recently revised. Material changes will be posted on this page. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us: