Privacy notice

Who is responsible

This website is operated by Laurus HQ. For privacy questions and requests, contact privacy@laurushq.com.

Information we receive

When you use the inquiry form, we receive your name, business email, optional company or website, the service you are interested in, your project description, your optional budget range, and your confirmation that we may use these details to reply. Please do not include sensitive personal information (such as health, identity numbers, or financial account details).

The form also runs a security check provided by Cloudflare Turnstile, and a rate limiter that uses a keyed hash of your IP address. Neither of these stores the content of your inquiry. We do not run analytics, advertising, or marketing trackers, and we do not offer accounts.

Why we use it and on what basis

We use your details only to read your inquiry, assess whether we can help, and reply to you. We do not use them for marketing lists, do not sell or rent them, and do not make automated decisions about you. The legal bases are taking steps at your request before a possible agreement and our legitimate interest in responding to business inquiries (GDPR Article 6(1)(b) and (f); KVKK Article 5(2)(c) and (f)).

Who processes it for us

• Vercel hosts the website.
• Cloudflare provides the Turnstile security check.
• Upstash keeps short-lived rate-limit counters, keyed by a hashed IP address and without inquiry content.
• Resend delivers the inquiry to our mailbox as an email.
• Google Workspace hosts the mailbox where inquiries are read and stored.

These providers process data on our behalf and may do so outside your country, including in the United States and the European Union. Where the law requires safeguards for such transfers, we rely on the contractual and organizational measures these providers offer. Contact us for more detail.

How long we keep it

Rate-limit counters expire after ten minutes. We do not store inquiries in a database; they exist as emails in our mailbox and, for a limited time, in the delivery and hosting providers’ own logs under their policies.

If an inquiry does not lead to a project, we delete it from our mailbox within six months. If we start working together, your details are kept as part of the engagement under the applicable agreement and for as long as legal and accounting obligations require.

Cookies and browser storage

We do not use analytics, advertising, or marketing cookies. The privacy notice banner and your language and theme choices are saved in your browser (local storage or a functional cookie) so they do not need to be set again. The Cloudflare security check on the contact page may use technical storage strictly to verify that the request comes from a person.

Your rights

You can ask us to confirm whether we hold your data, give you a copy, correct it, delete it, restrict or stop its use, and, where applicable, provide it in a portable format. Under KVKK Article 11 you can also ask about the purposes of processing and the third parties it is shared with, and claim compensation for unlawful processing. Write to privacy@laurushq.com; we reply within 30 days.

You may complain to the Turkish Personal Data Protection Authority (KVKK), or to the data protection authority in your country of residence in the EEA or UK.

Children

This website is intended for businesses and is not directed at children.

Changes

If we change how we handle information, we will update this page and its date. If we later add analytics or similar tools, we will update this notice and ask for your consent where the law requires it.