Privacy Policy

1. Who we are

CoreTrade Business operates coretradebusiness.com and is the data controller for personal data collected through it.

You can reach us at info@coretradebusiness.com or on +90 532 474 86 02.

2. What this policy covers

It covers the website only. Personal data we process inside a commercial relationship, such as the contact details of people at a supplier or distributor we already work with, sits outside this policy and is governed by the agreement we hold with that party.

3. What we collect

Enquiry form

When you submit the form on our home page, we receive the fields you filled in:

• Full name
• Email address
• Company
• Phone number
• Which side of a transaction you are on, the service you are asking about, and the product category
• Whatever you write in the message field

Our form processor also records the time of submission and the IP address the submission came from, which it uses to filter spam.

Please do not put sensitive information in the message field. It is a first-contact form, not a secure channel.

Email and phone

If you write or call, we hold whatever you choose to tell us, along with the correspondence itself.

Server logs

Our hosting provider keeps standard web server logs, which typically record IP address, request time, the page requested, and browser user agent. These exist so the server can be operated and secured. We do not use them to identify individual visitors.

What we do not collect

No cookies. No local or session storage. No analytics, no advertising or social media pixels, no heatmaps, no session recording, no newsletter tracking. There is nothing on this site that follows you to another one.

4. Fonts loaded from Google

The site loads the Inter typeface from Google Fonts. Your browser therefore makes a request to fonts.googleapis.com and fonts.gstatic.com, and Google receives your IP address and user agent as part of that request. Google states that it does not use Google Fonts requests to build advertising profiles; their handling is described in the Google Privacy Policy.

This is the one third-party request the site makes before you interact with it. If you would rather it did not happen, a browser extension that blocks third-party font requests will stop it, and the site falls back to a system typeface without breaking.

5. Why we process it, and on what basis

Purpose	Data	Legal basis (GDPR Art. 6)
Answering your enquiry and discussing whether we can work together	Form fields, correspondence	Art. 6(1)(b), steps taken at your request before entering a contract
Following up on a live commercial conversation	Contact details, correspondence	Art. 6(1)(f), our legitimate interest in pursuing business we were invited into
Keeping the site running and blocking abuse	Server logs, submission IP	Art. 6(1)(f), our legitimate interest in a secure, working site
Meeting accounting, tax and trade record obligations once we do business	Records of the transaction	Art. 6(1)(c), legal obligation

Under Turkish law (KVKK Art. 5), the same processing rests on the equivalent grounds: necessity for the conclusion or performance of a contract, our legitimate interests where your fundamental rights are not overridden, and compliance with a legal obligation.

We do not send marketing email. If that ever changes we will ask for your consent first, separately.

6. Who else handles it

We do not sell personal data, and we do not share it for anyone else's marketing.

Two providers process data on our behalf:

• Formspree receives and stores enquiry form submissions and forwards them to us by email. See the Formspree privacy policy.
• Hostinger hosts the site and its server logs. See the Hostinger privacy policy.

Beyond that, we disclose personal data only where the law requires it, or where you have asked us to introduce you to a counterparty and sharing your details is the point of the introduction. In that second case we tell you who we are approaching before we do it.

7. Where it goes

We are based in Türkiye. Our form and hosting providers operate infrastructure outside Türkiye and, depending on the provider, outside the European Economic Area. Sending us an enquiry therefore involves an international transfer of your data.

Where a transfer leaves the EEA or the UK, we rely on the mechanisms our providers put in place, which are set out in their own policies and data processing terms, most commonly the European Commission's Standard Contractual Clauses. Under KVKK Art. 9, transfers abroad rest on your explicit consent or on the exceptions that provision allows.

8. How long we keep it

• Enquiries that go nowhere: deleted within 24 months of the last contact.
• Correspondence tied to an active or past commercial relationship: kept for the life of that relationship and then for as long as tax, accounting and trade law require, which in Türkiye is generally 10 years.
• Server logs: kept for the period our hosting provider applies, typically a matter of weeks.

Ask us to delete something sooner and we will, unless a legal obligation stops us.

9. Your rights

If the GDPR applies to you, you can ask us to give you access to your data, correct it, delete it, restrict or object to how we use it, or hand it to you in a portable format. You may also object specifically to processing we base on legitimate interests.

If KVKK applies to you, Art. 11 gives you a comparable set: to learn whether your data is processed, to be told why and to whom it has been transferred, to have errors corrected, to have data deleted or destroyed, to object to a result produced solely by automated analysis, and to claim compensation for damage caused by unlawful processing.

We make no automated decisions about you, and we do not profile you.

10. How to exercise them

Email info@coretradebusiness.com. We answer within 30 days. We may need to confirm who you are first, so that we do not hand your data to somebody else.

If our answer does not satisfy you, you can complain to your local data protection authority. In Türkiye that is the Personal Data Protection Authority (KVKK); in the EEA, the supervisory authority of the country you live or work in.

11. Security

The site is served over HTTPS, and form submissions travel encrypted. Access to enquiries is limited to the people who need to answer them. No transmission over the internet is completely secure, so we cannot promise absolute safety, which is the reason for the note in section 3 about what not to put in the message field.

12. Children

This is a business-to-business site. It is not aimed at children and we do not knowingly collect their data.

13. Changes

We will update this page if what we do changes, and the date at the top will move with it. Material changes get a note on the page for a reasonable period.

← Back to the site