Privacy Policy

Effective Date: October 17, 2026  |  Last Updated: October 17, 2026

This Privacy Policy explains how Emre Arslan ("I", "me", "my"), operating arslanemre.com ("the Website"), collects, uses, discloses, and protects your personal information when you visit or interact with this Website. Optional analytics and embedded scheduling follow the choices you make in the cookie preference center.

1. Who I Am

I am an independent Shopify Plus Consultant and ecommerce Project Manager. This Website is a personal portfolio and professional services platform. For any privacy-related inquiries, you can contact me at the details listed at the bottom of this document.

2. Information I Collect

I collect the following categories of personal information:

• Information you provide directly: When you submit the contact form, I collect your name, email address, and the content of your message.
• Usage data: The hosting server processes technical request data for website operation and security. Optional analytics tools collect usage information only after you accept analytics cookies (see Section 4).
• Cookie data: I use cookies and similar tracking technologies. Please refer to my Cookie Policy for full details.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), I process your personal data under the following legal bases:

• Consent: For analytics cookies and marketing cookies, where you have given explicit consent via the cookie banner.
• Legitimate Interests: For security, fraud prevention, and basic website operation.
• Contractual Necessity: To respond to inquiries and provide the consulting services you request.

4. Third-Party Services & Analytics

I use the following third-party tools, which may collect data as described in their own privacy policies:

• Google Analytics 4 (GA4): Collects usage information after analytics consent. Contact names, email addresses and message contents are not included in the lead events sent by this website. Google Privacy Policy. Analytics are only loaded with your consent.
• Microsoft Clarity: Provides usage analytics, session replay and heatmaps after analytics consent. Microsoft Privacy Policy.
• Yandex Metrika: Usage analytics after analytics consent. Session replay is disabled in the website configuration. Yandex Privacy Policy.
• Calendly: The embedded calendar loads after personalization consent. A direct link also lets you open the scheduling service yourself. Calendly Privacy Policy.

5. How I Use Your Information

• To respond to your inquiries and provide consulting services
• To analyze and improve website performance and user experience
• To understand how visitors interact with the Website
• To comply with legal obligations
• To protect the Website from fraud, abuse, and security threats

6. Data Sharing & Disclosure

I do not sell, trade, or rent your personal information to third parties. I may disclose your information in the following limited circumstances:

• Service providers: Third-party tools listed in Section 4, operating under their own policies.
• Legal requirements: If required by law, court order, or governmental authority.
• Business transfer: In the unlikely event of a business acquisition or merger.

7. Data Retention

Contact form submissions are delivered to business email. Message and analytics retention depends on the settings of the email and analytics providers. Contact me to request information about your data or its deletion.

8. International Data Transfers

The services listed above may process information outside your country. Their linked privacy notices explain their processing locations and transfer arrangements.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data I hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure ("Right to be Forgotten"): Request deletion of your data.
• Restriction: Request that I restrict processing of your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time via the cookie settings on the Website.

To exercise these rights, contact me using the details in Section 12.

10. Security

I implement industry-standard security measures including HTTPS encryption, HTTP security headers (HSTS, CSP, X-Frame-Options), and access controls to protect your data. However, no method of internet transmission is 100% secure.

11. Children's Privacy

This Website is not directed at children under the age of 16. I do not knowingly collect personal data from children. If you believe a child has provided personal data to this Website, please contact me immediately.

12. Changes to This Policy

I may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of the Website after updates constitutes acceptance of the revised policy.

---

13. Contact Information