Privacy Policy

REHAN MEDIA (info@rehanmedia.com) is an AI and digital marketing agency based in Istanbul. We build conversion-focused websites, lead-generation funnels, paid acquisition campaigns, and custom AI automation solutions for businesses.

For the purposes of data-protection law, we are the "data controller" of the personal information you provide through this website.

We collect only the information we need to respond to you and deliver our services:

• Contact form data: your name, email address, the service you are interested in, and the message you send us.
• Booking data: your name, email address, chosen date, chosen time, and any notes you add when scheduling a call.
• Usage analytics: anonymised or pseudonymised event data such as pages visited, button clicks, scroll depth, referrer URL, device type, browser type, and approximate location. We do not use this to identify individuals.
• Technical logs: standard server and security logs generated automatically when you browse the site, including IP address and user-agent string, kept for operational security and debugging.

We process your personal data for the following purposes:

• To reply to your enquiry and provide the information or services you requested.
• To schedule and manage discovery or strategy calls.
• To evaluate whether we are a good fit for your project before entering a contract.
• To understand how visitors use our website so we can improve content, performance, and user experience.
• To maintain the security, stability, and integrity of our website and infrastructure.
• To comply with legal or regulatory obligations, such as tax or accounting requirements.

Our legal basis for processing is a combination of legitimate interest (responding to enquiries, improving the site, ensuring security) and, where applicable, contractual necessity (preparing or performing a service agreement).

• Lead and booking records: kept for up to 24 months after your last interaction with us, or for the duration of any active business relationship plus any legally required retention period, whichever is longer.
• Analytics and event logs: retained for up to 26 months, after which they are automatically deleted or aggregated so they can no longer identify you.
• Server/security logs: retained for up to 90 days, unless required for a longer period to investigate abuse, attacks, or legal disputes.

When the retention period ends, your data is securely deleted or anonymised. We do not keep personal data indefinitely.

We do not sell, rent, or trade your personal data. We do not share your information with third parties for marketing or advertising purposes.

We only share data with a small number of trusted service providers who help us operate the website and run our business, and only to the extent necessary:

• Cloud hosting and database services — used to store form submissions and booking data securely.
• Email and communication tools — used to respond to your messages and manage appointments.
• Analytics providers — used to collect aggregated, non-identifying usage statistics.

All providers are contractually bound to process data only on our instructions and to maintain appropriate security measures. Where they operate outside your country, we rely on standard contractual clauses or equivalent safeguards.

Our website uses a minimal set of cookies and similar technologies to remember your theme preference (light/dark mode), keep forms secure, and collect anonymous usage analytics.

You can control cookies through your browser settings. Blocking all cookies may affect some features, such as theme persistence, but it will not prevent you from viewing the site or submitting enquiries.

We protect your data using industry-standard measures, including encrypted data transmission (HTTPS/TLS), access controls, row-level database security, rate limiting on forms, and regular review of our infrastructure.

While we take every reasonable step to protect your information, no system is completely secure. If you have reason to believe your data has been compromised, please contact us immediately.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal data.
• Object to or restrict certain types of processing.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email us at info@rehanmedia.com with the subject line "Data Request". We will respond within 30 days.

Our services are not directed at children under 16, and we do not knowingly collect personal data from children. If you believe we have received data from a minor, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date.

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, please contact us:

REHAN MEDIA
Email: info@rehanmedia.com