Privacy Policy

Effective Date: April 24, 2026  |  Last Updated: April 24, 2026

This Privacy Policy explains how Emre Arslan ("I", "me", "my"), operating arslanemre.com ("the Website"), collects, uses, discloses, and protects your personal information when you visit or interact with this Website. By using the Website, you agree to the practices described in this policy.

1. Who I Am

I am an independent Shopify Plus Consultant and ecommerce Project Manager. This Website is a personal portfolio and professional services platform. For any privacy-related inquiries, you can contact me at the details listed at the bottom of this document.

2. Information I Collect

I collect the following categories of personal information:

• Information you provide directly: When you submit the contact form, I collect your name, email address, and the content of your message.
• Usage data: When you visit the Website, I automatically collect technical information such as your IP address, browser type, operating system, referring URL, pages visited, and time spent on pages. This is collected via analytics tools (see Section 4).
• Cookie data: I use cookies and similar tracking technologies. Please refer to my Cookie Policy for full details.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), I process your personal data under the following legal bases:

• Consent: For analytics cookies and marketing cookies, where you have given explicit consent via the cookie banner.
• Legitimate Interests: For security, fraud prevention, and basic website operation.
• Contractual Necessity: To respond to inquiries and provide the consulting services you request.

4. Third-Party Services & Analytics

I use the following third-party tools, which may collect data as described in their own privacy policies:

• Google Analytics 4 (GA4): Collects anonymized usage data. Google Privacy Policy. Analytics are only loaded with your consent.
• Google Tag Manager (GTM): Used to manage and deploy tracking scripts. Google Privacy Policy.
• Microsoft Clarity: Records anonymized session replays and heatmaps. Microsoft Privacy Policy.
• Yandex Metrika: Web analytics service. Yandex Privacy Policy.
• Calendly: Used for scheduling calls. Calendly Privacy Policy.

5. How I Use Your Information

• To respond to your inquiries and provide consulting services
• To analyze and improve website performance and user experience
• To understand how visitors interact with the Website
• To comply with legal obligations
• To protect the Website from fraud, abuse, and security threats

6. Data Sharing & Disclosure

I do not sell, trade, or rent your personal information to third parties. I may disclose your information in the following limited circumstances:

• Service providers: Third-party tools listed in Section 4, operating under their own policies.
• Legal requirements: If required by law, court order, or governmental authority.
• Business transfer: In the unlikely event of a business acquisition or merger.

7. Data Retention

Contact form submissions are retained for up to 24 months for business continuity purposes. Analytics data is retained per the default settings of each analytics provider (typically 14 months for GA4). You may request deletion at any time.

8. International Data Transfers

The Website may transfer your data to countries outside your home jurisdiction, including the United States. These transfers are made using appropriate safeguards (e.g., Standard Contractual Clauses, Privacy Shield frameworks where applicable).

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data I hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure ("Right to be Forgotten"): Request deletion of your data.
• Restriction: Request that I restrict processing of your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time via the cookie settings on the Website.

To exercise these rights, contact me using the details in Section 12.

10. Security

I implement industry-standard security measures including HTTPS encryption, HTTP security headers (HSTS, CSP, X-Frame-Options), and access controls to protect your data. However, no method of internet transmission is 100% secure.

11. Children's Privacy

This Website is not directed at children under the age of 16. I do not knowingly collect personal data from children. If you believe a child has provided personal data to this Website, please contact me immediately.

12. Changes to This Policy

I may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of the Website after updates constitutes acceptance of the revised policy.

---

13. Contact Information