Privacy Policy

1. Who we are

Alper Zan Consultancy ("we", "us", "our") is the data controller for personal data submitted through https://alperzanconsultancy.co.uk. You can contact us at team@alperzanconsultancy.co.uk.

2. What we collect

• Information you submit via our enquiry form — name, email, phone, company, message and consent timestamp.
• Technical data automatically collected by our server when you visit (IP address, browser type, pages viewed) for security and performance.
• Usage data collected via Google Analytics (see "Cookies" below). We do not use advertising trackers or social pixels.

3. Why we collect it

• To respond to your enquiry and provide the services you've asked about.
• To protect our site from abuse (rate limiting, spam prevention).
• To comply with our legal obligations under UK GDPR and the Data Protection Act 2018.

4. How long we keep it

Enquiry data is retained for as long as needed to fulfil the engagement plus 24 months for record-keeping, after which it is deleted. Server logs are retained for 90 days.

5. Who we share it with

We do not sell, rent or share your personal data with third parties for marketing purposes. Limited sharing occurs with our hosting provider (Hostinger), email infrastructure for the purpose of delivering the service, and Google Analytics for website usage measurement (see "Cookies" below).

6. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise any of these rights, email us at team@alperzanconsultancy.co.uk.

You may also lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

7. Cookies

Alongside strictly-necessary session and security cookies, this site uses Google Analytics (gtag.js) to understand how visitors use the site — pages viewed, time on site, general location and device type. Google Analytics sets cookies and collects an IP address, which is processed by Google under its own privacy policy. You can opt out using a browser extension such as the Google Analytics Opt-out Browser Add-on, or by blocking cookies in your browser settings.

8. Security

Personal data is transmitted over HTTPS and stored on UK/EU-hosted infrastructure with access controls, regular backups and standard server hardening. Where forms are submitted, we use CSRF protection, anti-spam measures and rate limiting.

9. Changes

We may update this policy from time to time. Material changes will be announced on this page with a revised "last updated" date.