1. Overview & Data Controller
This Privacy Policy outlines how Kaan Zorlu ("we", "our", or "operator"), operating as an individual in the State of California, United States, collects, utilizes, and safeguards information obtained through kaanzorlu.com.
For inquiries, access requests, or deletion of personal information, contact the controller directly at [email protected].
2. Direct Data Collection
2.1 Newsletter & Waitlist Inscriptions
When you subscribe to the technical pipeline newsletter, Learning Hub waitlist, or Marketplace release notifications, your email address is transmitted directly to and stored upon our private server database. We do not sell, rent, or synchronize this data with third-party email broker services.
2.2 Communication & Contact Submissions
Inquiries initiated via the contact portal or pipeline inquiry forms collect your name, email address, and message content. Form submissions are dispatched securely through our form processor, Formspree Inc., directly to our administrative inbox for the exclusive purpose of evaluating projects, consulting inquiries, and direct communication.
3. Analytics, Cookies & Tracking Technologies
3.1 Google Analytics 4 (GA4)
This website employs Google Analytics 4 to evaluate aggregated, anonymized visitor telemetry. In compliance with international standards and California privacy frameworks:
- We execute Google Consent Mode v2. By default, analytics tracking cookies (
analytics_storage) remain denied until explicit visitor consent is granted via the floating interface pill. - IP addresses are automatically anonymized at ingestion and are never correlated with identifiable individual records.
- Visitors may revoke or grant consent at any time via the cookie preferences interface.
3.2 Edge Security & Content Delivery (Cloudflare)
Traffic is routed through Cloudflare, Inc. for reverse-proxy caching, DDoS mitigation, and SSL termination. Cloudflare processes operational connection data (such as transient IP addresses and request headers) strictly for firewall integrity and malicious traffic detection.
3.3 Embedded Media (YouTube)
Specific project breakdowns and speaking event recordings utilize embedded players hosted by YouTube (Google LLC). Interacting with embedded players may transmit telemetry or set third-party cookies governed by YouTube's independent privacy regulations.
4. Data Retention & Security Architecture
Server records, newsletter subscriber entries, and contact records are retained only as long as necessary to fulfill operational, communication, and business purposes. We maintain modern transport encryption (TLS/SSL) across all public endpoints and apply restrictive database access policies.
5. California Consumer Rights (CCPA / CPRA)
Under the California Consumer Privacy Act and the California Privacy Rights Act, California residents possess specific statutory rights:
- Right to Know & Access: You may request disclosure of the specific categories and pieces of personal information collected.
- Right to Deletion: You may request the irrevocable removal of your stored email address or form transmissions from our servers.
- No Sale or Sharing of Personal Data: We do not sell personal information, nor do we share personal data with external ad networks for cross-context behavioral advertising.
- Non-Discrimination: Exercising your privacy rights will never result in service degradation or altered access.
6. Inquiries & Rights Requests
To exercise your rights or request verified deletion of your information, submit an electronic request to:
Character Technical Director
Email: [email protected]
Location: California, United States