Privacy notice

What Locumetry stores about you, why, and for how long. Short version, to be reviewed by counsel before card payments open.

1. Who we are. Locumetry, reachable at [email protected]. This notice also serves as the information duty under the Turkish personal data law (KVKK, article 10).
2. Browsing. The site sets no cookies and runs no analytics or advertising scripts. Our network provider, Cloudflare, and our server keep ordinary access logs (IP address, requested page, time, browser string) for abuse prevention and fault finding, deleted within 30 days.
3. Buying a report. We store the e-mail address you give, the district, the amount, the order status and the payment provider's reference, because we need them to deliver the report and to keep accounts. Order records are kept for the retention period commercial and tax law require (ten years in Turkey). The payment itself is handled by the payment provider under its own notice; we never see card numbers.
4. Partner API and widget. For each key we store the organisation's name and contact, and count requests per day for metering and rate limits. We do not log request contents beyond the district identifier and the route.
5. E-mail. We write to you only about your order or your key. No newsletters unless you ask for one.
6. Legal basis. Performance of a contract (orders, keys) and our legitimate interest in running a secure service (logs). We do not sell personal data and do not share it except with the processors needed to run the service: the hosting and network provider, the e-mail service and the payment provider.
7. Your rights. You may ask what we hold about you, have it corrected or deleted, and object to its processing, by e-mail. We answer within 30 days, as KVKK requires. Deleting an order record before its legal retention ends is not possible, but the e-mail can be anonymised.
8. The data about districts is statistical and about places, not people. It comes from public official sources and open map data and contains no personal data.