Privacy Policy

Last Updated: December 2025

ELCHI GROUP PAZARLAMA İÇ VE DIŞ TİC. LTD. ŞTİ. (“Elchi Group,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website www.elchigroup.com (the “Site”) or engage with our international trade, sourcing, and market access services.

This policy complies with the EU General Data Protection Regulation (GDPR), the Turkish Law on Protection of Personal Data (KVKK), and the California Consumer Privacy Act (CCPA).

1. Data Controller Information

Company Name: ELCHI GROUP PAZARLAMA İÇ VE DIŞ TİC. LTD. ŞTİ.
Registered Address: Koza Mah. 1655. Sok. Akbati C Blok Apt. No: 6/C No:53, Esenyurt, 34325 Istanbul, Turkey
Data Protection Contact: admin@elchigroup.com
Website: www.elchigroup.com

For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact us at admin@elchigroup.com.

2. Information We Collect

2.1 Information You Provide Directly

When you use our contact forms, request partnership information, or communicate with us, we may collect:

  • Full name
  • Email address
  • Company name
  • Country of operation
  • Business requirements and inquiry details
  • Any other information you choose to provide

2.2 Information Collected Automatically

When you visit our Site, we automatically collect certain technical information through cookies and similar technologies:

  • IP address
  • Browser type and version
  • Operating system
  • Device information
  • Pages visited and time spent on pages
  • Referring website URLs
  • Geographic location (country/city level)
  • Date and time of access

2.3 Third-Party Data Collection

We use the following third-party services that may collect data:

  • HubSpot CRM: Contact information, form submissions, website interaction data
  • Google Analytics: Website usage statistics, user behavior, traffic sources
  • Marketing Pixels: LinkedIn Insight Tag, Facebook Pixel (if you consent to marketing cookies)
  • Other Analytics Tools: We may use additional analytics services to improve website performance

3. Legal Basis for Processing (GDPR/KVKK)

We process your personal data based on the following legal grounds:

  • Consent: You provide explicit consent when submitting forms or accepting cookies
  • Legitimate Interests: We have a legitimate business interest in responding to inquiries, improving our services, and maintaining website security
  • Contractual Necessity: Processing is necessary to evaluate and respond to partnership or service requests
  • Legal Obligations: We may process data to comply with applicable laws and regulations

4. How We Use Your Information

We use collected information for the following purposes:

  • Service Delivery: To respond to your inquiries, assess partnership opportunities, and provide information about our sourcing, trade, and market access services
  • Communication: To send you information you requested, respond to questions, and provide updates related to your inquiry
  • CRM Management: To maintain records of business contacts and potential partnerships in our HubSpot CRM system
  • Website Improvement: To analyze website performance, understand user behavior, and improve user experience
  • Security: To protect our Site from fraud, abuse, and security threats
  • Compliance: To comply with legal obligations and enforce our terms of service
  • Marketing: With your consent, to send relevant information about our services (you may opt out at any time)

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

5.1 Service Providers

We share data with trusted third-party service providers who assist in operating our website and services:

  • HubSpot Inc. (USA) – CRM and contact management
  • Google LLC (USA) – Analytics and website performance
  • Infomaniak Network SA (Switzerland) – Website hosting
  • LinkedIn Corporation (USA) – Business analytics (if marketing cookies accepted)
  • Meta Platforms Inc. (USA) – Marketing analytics (if marketing cookies accepted)

These providers are contractually obligated to protect your data and use it only for specified purposes.

5.2 Legal Requirements

We may disclose your information if required by law, court order, government regulation, or to:

  • Protect our legal rights
  • Prevent fraud or illegal activity
  • Comply with legal processes
  • Protect the safety of our users or the public

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. International Data Transfers

Elchi Group operates internationally, and your data may be transferred to and processed in countries outside your jurisdiction, including the United States and European Union.

For transfers outside the European Economic Area (EEA) or Turkey, we ensure appropriate safeguards through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data Processing Agreements with third-party service providers
  • Compliance with adequacy decisions where applicable

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

  • Inquiry Data: Contact form submissions are retained for up to 3 years or until you request deletion
  • CRM Data: Business contact information is retained while there is an ongoing or potential business relationship
  • Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely
  • Legal Obligations: Some data may be retained longer to comply with legal, accounting, or regulatory requirements

You may request deletion of your data at any time by contacting admin@elchigroup.com.

8. Your Data Protection Rights

Depending on your location, you have the following rights:

8.1 Rights Under GDPR (EU Residents) and KVKK (Turkish Residents)

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data
  • Right to Restrict Processing: Request limitation of how we process your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: Withdraw previously given consent at any time
  • Right to Lodge a Complaint: File a complaint with your national data protection authority

EU Data Protection Authorities: https://edpb.europa.eu/about-edpb/board/members_en
Turkish Data Protection Authority (KVKK): https://www.kvkk.gov.tr

8.2 Rights Under CCPA (California Residents)

California residents have additional rights:

  • Right to Know: Request disclosure of personal information collected, used, or shared
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt out of the “sale” of personal information (note: we do not sell personal information)
  • Right to Non-Discrimination: Not receive discriminatory treatment for exercising CCPA rights

To exercise these rights, contact us at admin@elchigroup.com. We will respond within 30 days (GDPR/KVKK) or 45 days (CCPA).

9. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies. Please see our Cookie Policy for detailed information about:

  • Types of cookies we use
  • How to manage cookie preferences
  • Third-party cookies and tracking

By using our Site, you consent to our use of essential cookies required for website functionality. You can manage marketing and analytics cookies through our cookie consent banner or your browser settings.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • SSL/TLS encryption for data transmission
  • Secure hosting with Infomaniak (Swiss data protection standards)
  • Regular security updates and vulnerability assessments
  • Access controls and authentication protocols
  • Regular backups with encrypted storage

However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Children’s Privacy

Our Site and services are directed at business professionals and organizations. We do not knowingly collect personal information from individuals under 16 years of age. If we discover we have collected data from a child, we will delete it promptly.

12. Third-Party Websites

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The “Last Updated” date at the top indicates the most recent revision. Continued use of the Site after changes constitutes acceptance of the updated policy.

For material changes, we will provide prominent notice on our Site or via email to registered contacts.

14. Contact Us

For questions, concerns, or to exercise your data protection rights, please contact:

ELCHI GROUP PAZARLAMA İÇ VE DIŞ TİC. LTD. ŞTİ.
Email: admin@elchigroup.com
Address: Koza Mah. 1655. Sok. Akbatı C Blok Apt. No: 6/C-53, Esenyurt, 34325 Istanbul, Turkey

Response Time: We aim to respond to all privacy inquiries within 5 business days.