What I collect, and why.
This site is run by Bahadır Şahin (“I”). For anything about your data, email hello@bahadirsahin.net.
When you request a free review
I store what you type into the form: your store URL, email, and, if you fill them in, what you need, your monthly ad spend and your biggest challenge. Along with it I keep how you found the site (campaign tags such as utm_source, ad click IDs, the referring site and the first page you landed on), your browser type, and a one-way hash of your IP address used only to stop spam.
I use this to prepare and send your review and to reply to you. The legal basis is taking steps at your request before a possible contract (GDPR Art. 6(1)(b)) and my legitimate interest in knowing which channels bring enquiries (Art. 6(1)(f)).
Enquiries are kept for up to 24 months, or longer if we start working together. Ask me any time and I will delete yours.
Cookies and measurement
If you accept cookies, Google Tag Manager loads analytics and advertising tags (Google Analytics, Google Ads, Meta Pixel) so I can see which ads and pages bring clients. If you choose “Only necessary”, these tools receive no cookies and only anonymous, cookieless signals under Google Consent Mode. Visitors outside the EU/EEA, UK, Switzerland and Türkiye are measured by default and can opt out the same way.
| Name | Set by | Purpose | Kept |
|---|---|---|---|
| bs_consent | This site (local storage) | Remembers your cookie choice | Until cleared |
| bs_attr | This site (local storage) | Remembers how you first arrived, sent only with a form | 90 days |
| _ga, _ga_* | Google Analytics | Counts visits and pages (with consent) | Up to 2 years |
| _gcl_* | Google Ads | Links an enquiry to an ad click (with consent) | 90 days |
| _fbp, _fbc | Meta | Links an enquiry to a Meta ad (with consent) | 90 days |
Who else processes it
- Hosting: the site and the enquiry database run on a server I operate.
- Resend (USA) delivers the notification email about your enquiry to me.
- Google and Meta receive measurement data only as described above.
Transfers to the USA rely on the EU–US Data Privacy Framework or standard contractual clauses. I never sell your data or add you to a mailing list.
Your rights
Under the GDPR, UK GDPR and Türkiye’s KVKK you can ask for a copy of your data, have it corrected or deleted, object to its use, or withdraw consent. Email hello@bahadirsahin.net and I will answer within 30 days. You can also complain to your local data protection authority.