PRIVACY NOTICE

Last Updated: [September 2, 2026]

Kaizen Tasarım ve Teknoloji A.Ş. (“Kaizen”, “Kaizen Loyalty”, “we”, “us” or “our”) is committed to protecting the privacy and personal data of individuals who visit our website, contact us, request information or a demonstration, subscribe to our communications, interact with our advertisements, or otherwise engage with Kaizen through digital and offline channels.

This Privacy Notice explains how we collect, use, store, disclose and protect personal data in accordance with applicable data protection laws, including Law No. 6698 on the Protection of Personal Data of the Republic of Türkiye (“KVKK”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).

For the purposes of applicable data protection laws, the data controller is:

Kaizen Tasarım ve Teknoloji A.Ş.

Registered Address: Reşitpaşa Mah. Katar Cad. İTÜ Arı Teknokent 4 Binası No: 2/50 İç Kapı No:6 Sarıyer/İstanbul, 34467

E-mail: [email protected]

Phone: 0 (532) 488 33 63

MERSIS / Company Registration No.: 0489 1045 0650 0001 / 31941-5

1. Scope of This Privacy Notice

 

This Privacy Notice applies to personal data collected through channels including, but not limited to:

  • the Kaizen Loyalty website at kaizenloyalty.com and its related pages;
  • website contact, demo request, newsletter and other online forms;
  • LinkedIn Lead Gen Forms and other LinkedIn advertising products;
  • lead generation forms and advertisements operated through other digital advertising platforms;
  • e-mail, telephone and other business communications;
  • events, webinars, conferences and meetings;
  • sales, marketing and business development activities; and
  • other channels through which you voluntarily provide information to Kaizen.

Where personal data is collected through a third-party platform such as LinkedIn, that platform may also process your personal data independently in accordance with its own privacy policy and terms.

2. Personal Data We May Collect

 

Depending on how you interact with Kaizen, we may collect the following categories of personal data.

Identity Information

 

  • First name
  • Last name

Contact Information

 

  • Business e-mail address
  • Personal or business e-mail address, where voluntarily provided
  • Telephone number
  • Work telephone number
  • Other contact details voluntarily provided by you

Professional and Business Information

 

  • Job title
  • Company name
  • Industry
  • Department or business function
  • Seniority level
  • Company size
  • Country or region
  • Other professional information provided through forms or business communications

Request and Communication Information

 

  • Demo requests
  • Product or service interests
  • Information contained in messages or enquiries
  • Communication history with Kaizen
  • Meeting and appointment information
  • Feedback provided to Kaizen

Marketing and Preference Information

 

  • Newsletter subscription status
  • Marketing communication preferences
  • Consent and opt-out records
  • Areas of interest in Kaizen products, services or content

Technical and Usage Information

 

When you interact with our website and digital services, we may also collect certain technical information such as:

  • IP address
  • Browser and device information
  • Cookie identifiers
  • Website usage information
  • Referral source
  • Advertising campaign information
  • Date and time of interaction

The collection and use of cookies and similar technologies are further explained in our Cookie Policy.

Kaizen does not intentionally request sensitive or special-category personal data through its marketing or Lead Gen Forms.

3. How We Collect Personal Data

 

We may collect personal data:

Directly from you, for example when you submit a contact or demo request form, subscribe to our newsletter, contact our team, attend an event or communicate with us.

Through advertising and lead-generation platforms, including when you voluntarily submit a form through LinkedIn Lead Gen Forms or another advertising platform.

Automatically, when you visit or interact with our website, subject to applicable cookie and privacy requirements.

From business partners or service providers, where permitted by applicable law and where appropriate notice has been provided.

4. Purposes for Processing Personal Data

 

We may process your personal data for the following purposes:

Responding to Requests and Enquiries

 

We may use your personal data to:

  • respond to your questions or enquiries;
  • process demo requests;
  • arrange meetings or product demonstrations;
  • provide requested information about Kaizen Loyalty products and services; and
  • communicate with you regarding a request you have submitted.

Sales and Business Development

 

We may process personal data to:

  • understand your organisation’s requirements;
  • evaluate potential business opportunities;
  • communicate with prospective customers;
  • manage sales opportunities;
  • maintain business relationships; and
  • provide relevant information regarding Kaizen products and services.

If you submit your information through a LinkedIn Lead Gen Form, for example by requesting a demo, Kaizen may use the information you submit, including your name, work e-mail address, telephone number, job title and company information, to respond to your request and contact you regarding Kaizen Loyalty products and services.

Customer and Prospect Relationship Management

 

We may process personal data to:

  • maintain records of communications;
  • manage customer and prospect relationships;
  • organise meetings and follow-ups;
  • maintain CRM records; and
  • provide appropriate support during the sales process.

Marketing Communications

 

Where permitted by applicable law, we may use your contact information to provide:

  • product and service updates;
  • newsletters;
  • event invitations;
  • educational content;
  • industry insights; and
  • other marketing communications relevant to Kaizen Loyalty.

Where consent is legally required for such communications, we will obtain your consent before sending them.

You may unsubscribe or withdraw your consent at any time using the unsubscribe mechanism included in our communications or by contacting us at [email protected]

Where such communications qualify as commercial electronic messages under Turkish law (including email, SMS or callbased marketing), Kaizen hereby acknowledges, accepts and undertakes to obtain and administer the requisite prior consents through the Electronic Communication Management System (İYS), in compliance with Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages.

Website, Analytics and Service Improvement

 

We may process information to:

  • operate and maintain our website;
  • understand how visitors interact with our services;
  • improve website functionality and user experience;
  • evaluate marketing and advertising performance;
  • improve our products, services and communications; and
  • protect our systems against fraud, misuse and security threats.

Legal and Compliance Purposes

 

We may also process personal data where necessary to:

  • comply with applicable laws and regulatory requirements;
  • respond to lawful requests from competent authorities;
  • establish, exercise or defend legal claims;
  • maintain information-security standards; and
  • protect the rights, property and legitimate interests of Kaizen and third parties.

5. Legal Bases for Processing

 

Depending on the circumstances and applicable legislation, Kaizen may process your personal data on one or more of the legal bases described below.

Under KVKK

 

Where KVKK applies, we may process personal data based on one or more of the conditions set out under applicable law, including where:

  • processing is expressly permitted by law;
  • processing is necessary for the establishment or performance of a contract;
  • processing is necessary for Kaizen to fulfil a legal obligation;
  • the relevant personal data has been made public by the data subject;
  • processing is necessary for the establishment, exercise or protection of a right; or
  • processing is necessary for Kaizen’s legitimate interests, provided that the fundamental rights and freedoms of the data subject are not harmed.

Where required under applicable law, we will rely on your explicit consent.

Under the GDPR, Where Applicable

 

Where the GDPR applies, we may process personal data where:

  • processing is necessary to take steps at your request before entering into a contract or to perform a contract;
  • processing is necessary for Kaizen’s legitimate interests, provided that such interests do not override your fundamental rights and freedoms;
  • processing is necessary to comply with a legal obligation;
  • processing is necessary for the establishment, exercise or protection of a legal right; or
  • you have provided your consent where consent is required by applicable law.

For example, when you request a demonstration or ask us to contact you about Kaizen Loyalty, we may process the information required to respond to that request.

Where your consent is used as the legal basis for processing, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. LinkedIn Lead Gen Forms

 

Kaizen may use LinkedIn Lead Gen Forms to allow LinkedIn members to request product information, demonstrations, consultations or other communications from Kaizen.

When you voluntarily submit a LinkedIn Lead Gen Form, Kaizen may receive information such as:

  • first name;
  • last name;
  • work e-mail address;
  • phone number;
  • job title;
  • company name; and
  • other information included in the relevant form.

Kaizen may use this information to:

  • process and respond to your request;
  • contact you by e-mail or telephone;
  • arrange a product demonstration or meeting;
  • provide information about Kaizen Loyalty products and services;
  • manage the resulting business opportunity; and
  • maintain appropriate customer or prospect records.

Information submitted through LinkedIn Lead Gen Forms may be transferred to and stored in Kaizen’s CRM and marketing systems, including HubSpot, and may be accessed by authorised employees and service providers for the purposes described in this Privacy Notice.

LinkedIn independently processes information in connection with its platform according to LinkedIn’s own privacy policies and terms.

Kaizen does not sell personal data collected through LinkedIn Lead Gen Forms.

LinkedIn itself requires advertisers using Lead Gen Forms to provide a privacy-policy link and appropriate notice and consent for their intended use of form data. It also limits sharing of Lead Gen Form data to parties acting on the advertiser’s behalf, such as service providers.

7. Disclosure of Personal Data

 

Kaizen does not sell your personal data.

Where necessary for the purposes described in this Privacy Notice, personal data may be disclosed to authorised third parties acting on behalf of or providing services to Kaizen, including:

  • CRM and customer relationship management providers;
  • cloud hosting and IT infrastructure providers;
  • e-mail and communication service providers;
  • marketing automation providers;
  • advertising and lead-generation platforms;
  • analytics and website service providers;
  • professional advisers, consultants, accountants and legal advisers; and
  • competent governmental, administrative or judicial authorities where disclosure is required by law.

Such third parties are authorised to process personal data only to the extent necessary to provide the relevant services or fulfil applicable legal obligations.

Examples of Service Providers and Platforms We May Use

 

Examples of service providers and platforms we may use include:

  • LinkedIn
  • HubSpot
  • Apollo
  • Google
  • other service providers supporting our CRM, analytics, advertising, communications, website and business operations.

8. International Transfers of Personal Data

 

Some of the technology, advertising, CRM, communications, hosting or other service providers used by Kaizen may operate infrastructure or process personal data outside Türkiye or the country in which you are located.

Accordingly, personal data may be transferred internationally where necessary for the purposes described in this Privacy Notice.

Where personal data is transferred internationally, Kaizen will implement appropriate safeguards required by applicable data protection legislation, which may include:

  • adequacy decisions;
  • standard contractual clauses;
  • binding corporate rules;
  • agreements and safeguards recognised under applicable KVKK legislation; or
  • another legally permitted transfer mechanism.

Where explicit consent is required by applicable legislation for a particular international transfer, such consent will be obtained before the transfer.

9. Data Retention

 

Kaizen retains personal data only for as long as reasonably necessary to fulfil the purposes for which the data was collected, including applicable legal, accounting, reporting and compliance requirements.

Retention periods may vary depending on:

  • the nature of the personal data;
  • the purpose of processing;
  • the existence of an ongoing business relationship;
  • legal limitation periods;
  • statutory retention requirements; and
  • whether consent has been withdrawn or an objection has been made.

Unless a longer period is required or permitted by law, prospective customer and marketing information will be periodically reviewed and deleted or anonymised when it is no longer necessary for the purposes for which it was collected.

LinkedIn may separately retain Sponsored Lead Gen Form data for a defined period under its own data-retention practices; LinkedIn currently states a 365-day retention period for sponsored leads.

10. Data Security

 

Kaizen takes appropriate technical and organisational measures designed to protect personal data against:

  • unauthorised access;
  • unlawful processing;
  • accidental loss;
  • alteration;
  • destruction; and
  • unauthorised disclosure.

Access to personal data is restricted to employees, contractors and service providers who require access for legitimate business purposes and who are subject to appropriate confidentiality and data-protection obligations.

11. Your Rights

 

Rights Under KVKK

 

Under Article 11 of Law No. 6698, where applicable, you may have the right to:

  • learn whether your personal data is being processed;
  • request information regarding the processing of your personal data;
  • learn the purpose for which your personal data is processed and whether it is used in accordance with that purpose;
  • know the third parties to whom your personal data has been transferred domestically or internationally;
  • request correction of incomplete or inaccurate personal data;
  • request deletion or destruction of personal data where the legal requirements are satisfied;
  • request notification of correction or deletion operations to third parties to whom your personal data has been transferred;
  • object to a result arising against you through the exclusive analysis of processed data by automated systems; and
  • request compensation where you suffer damage as a result of unlawful processing.

Rights Under the GDPR

 

Where the GDPR applies, you may also have the right to:

  • access your personal data;
  • rectify inaccurate or incomplete personal data;
  • request erasure of your personal data;
  • restrict processing;
  • object to certain processing activities;
  • withdraw consent at any time where processing is based on consent;
  • receive certain personal data in a structured, commonly used and machine-readable format;
  • request the transfer of certain personal data to another controller where applicable; and
  • not be subject to certain decisions based solely on automated processing that produce legal or similarly significant effects.

You may also have the right to lodge a complaint with the relevant data protection supervisory authority.

12. Exercising Your Rights

 

To exercise your data protection rights or submit a privacy-related request, please contact:

Kaizen Tasarım ve Teknoloji A.Ş.

E-mail: [email protected]

Phone: 0 (532) 488 33 63

Postal Address: Reşitpaşa Mah. Katar Cad. İTÜ Arı Teknokent 4 Binası No: 2/50 İç Kapı No:6 Sarıyer/İstanbul, 34467

Where necessary, we may request additional information to verify your identity before processing your request.

Requests will be handled within the periods prescribed under applicable law.

13. Marketing Preferences and Withdrawal of Consent

 

Where you have consented to receive marketing communications, you may withdraw your consent at any time.

You can:

  • use the unsubscribe link contained in marketing e-mails;
  • contact us at [email protected]; or
  • use another opt-out method provided in the relevant communication.

Withdrawing consent for marketing communications will not prevent Kaizen from contacting you regarding an active request, contractual relationship, service issue or another communication that does not constitute direct marketing.

14. Third-Party Websites and Platforms

 

Our website and communications may contain links to websites or services operated by third parties.

Kaizen is not responsible for the privacy practices of independent third parties. We recommend reviewing the applicable privacy notice of any third-party website or platform you use.

This includes platforms such as LinkedIn, which independently determines certain aspects of how personal data is processed within its services.

15. Changes to This Privacy Notice

 

Kaizen may update this Privacy Notice from time to time to reflect:

  • changes in our services or business activities;
  • changes in the technologies or service providers we use;
  • regulatory or legislative developments; or
  • improvements to our privacy practices.

The latest version will always be published on this page together with the date on which it was last updated.