Privacy Policy
Last updated: April 12th 2026
1. Who We Are
NSDation is a consulting company operating across multiple jurisdictions under the following registered entities:
Each NSDation entity acts as an independent data controller for the personal data it processes in connection with its own regional operations. All references to "NSDation", "we", "us", or "our" in this policy refer to the relevant NSDation entity responsible for processing your data.
Contact: info@nsdation.com
2. What Data We Collect
We collect the following personal data through our website:
- Contact form submissions – name, email address, and any information you provide in your message
- Cookies and analytics data – information about how you use our website, including pages visited, time spent, browser type, device type, and approximate location
We do not collect sensitive personal data. There is no user account or login functionality on our website. Our website is not directed at individuals under 18 and we do not knowingly collect data from minors.
3. How We Use Your Data
We use the data we collect for the following purposes:
- To respond to enquiries submitted through our contact form
- To analyse website usage and improve our website's performance and content
- To comply with legal obligations where applicable
We do not sell, share, or provide your personal data to third parties for marketing or any other purpose.
We do not use automated decision-making or profiling based on your personal data.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
Under KVKK (Turkish Law No. 6698, Article 5):
- Explicit consent – when you submit a contact form or accept non-essential cookies
- Legitimate interest of the data controller – we use analytics data to understand how visitors use our website and improve our services, provided this does not harm your fundamental rights and freedoms (Article 5(2)(f))
Under GDPR (where applicable to EU/EEA visitors):
- Consent (Article 6(1)(a)) – for cookie placement and contact form submissions
- Legitimate interest (Article 6(1)(f)) – for website analytics and performance improvement. We have assessed that our interest in understanding website usage does not override your rights, particularly as analytics data is aggregated and does not directly identify individuals.
Under UAE Federal Decree-Law No. 45 of 2021 (where applicable):
- Consent (Article 4) – for the collection and processing of personal data through our website
NSDation LLC FZ is registered in Meydan Free Zone, Dubai, and is subject to the UAE's federal data protection legislation.
5. Cookies
Our website uses cookies. For full details on which cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.
6. Data Processors
We use the following third-party service providers who process data on our behalf:
Data processing agreements are in place with these providers where required by law.
7. International Data Transfers
Your data may be transferred to and processed in countries outside Türkiye, the UAE, and Syria. In particular:
- Google Analytics and Google Tag Manager process data on Google's servers, which may be located in the United States and other countries
- Website hosting – our website is hosted by Webflow, Inc., whose servers are located in the United States. Contact form submissions are stored on Webflow's servers and forwarded to our team via email at info@nsdation.com
Where data is transferred internationally, we rely on the following safeguards:
- Standard contractual clauses approved by the relevant authorities
- Data processing agreements with all third-party processors
- Adequacy decisions where the receiving country has been deemed to provide adequate protection
8. Data Storage and Security
Contact form submissions are stored on our website hosting platform (Webflow) and forwarded to authorised NSDation personnel via email at info@nsdation.com. No personal data is stored in third-party inboxes or unmanaged email accounts.
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These include:
- Secure (HTTPS/SSL) transmission of data submitted through our website
- Access to personal data restricted to authorised personnel only
- Use of managed business email (info@nsdation.com) for all form notifications
- Regular review of data security practices
9. Data Retention
- Contact form data – retained for a maximum of 3 years from the date of your last correspondence with us, after which it is securely deleted
- Analytics data – retained for 14 months, in accordance with Google Analytics default settings
- Cookie consent records – retained for 12 months, after which consent is re-requested
We do not retain personal data for longer than is necessary for the purposes for which it was collected.
10. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete personal data
- Delete your personal data
- Restrict or object to the processing of your personal data
- Data portability – receive your data in a structured, commonly used, machine-readable format
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at info@nsdation.com. We will respond within 30 days.
Right to complain
You also have the right to lodge a complaint with the relevant data protection authority:
- Türkiye: Kişisel Verileri Koruma Kurumu (KVK Board) – kvkk.gov.tr
- EU/EEA: Your local supervisory authority under GDPR
- UAE: UAE Data Office
11. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:
- Notify the relevant data protection authority without undue delay (and within 72 hours where required by KVKK or GDPR)
- Notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any third-party site you visit.
13. Governing Law
This privacy policy and any disputes arising from it shall be governed by and construed in accordance with the laws of the Republic of Türkiye. Any disputes shall be subject to the exclusive jurisdiction of the courts of Mersin, Türkiye.
14. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
15. Contact Us
If you have any questions about this privacy policy or how we handle your data, please contact: info@nsdation.com