Privacy Policy

1Who we are

HADARA Real Estate (registered trade name: HADARA Investment İnşaat Sanayi ve Ticaret A.Ş.; “HADARA”, “we”) is a real estate development and marketing company based in Istanbul. We are the data controller for the personal data collected through www.hadararealestate.com (the “Website”).

This policy explains what information we collect, why we collect it, and the rights you have under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

2Information we collect

We only collect the information you choose to give us, plus the limited technical information needed to run the Website:

• Contact and request forms: your name, email address, phone number, the projects or topics you are interested in, your budget and preferences (for property and consultancy requests), and your message.
• Private video tour bookings: your name, email address, phone number and preferred way of contact, the projects and time you choose, the call app and language, and your local time zone (see section 5).
• Resale portal accounts: your name, email address, phone number and country, the listings and photos you submit, and the messages buyers send about your listings.
• Advertising source: if you arrive from one of our ads, the campaign details in the link (such as utm_source or gclid) are kept during your visit and added to your message, so that we know which ad brought you.
• Technical data: your IP address, browser and device type, and the pages you visit, recorded by our hosting provider and, when enabled, by the measurement tools described below.

3Anonymous visit statistics

To understand how many people visit the site and which projects interest them, our server records each page view anonymously. For each page we keep only:

• the page address, without any query parameters;
• the site language (English, Arabic, Persian, French or Russian);
• where the visit came from — only the name of the referring website (for example google.com) or the previous page on our site, never the full link;
• your approximate country and city, estimated by our hosting provider (Vercel) from your connection;
• the name of the ad campaign, if you arrived through a link in one of our ads (such as utm_source and utm_campaign), so we know which ad brought visitors;
• whether you accepted, declined or did not answer the cookie notice;
• the type of device (phone, tablet or computer), its operating system and browser (for example iOS and Safari), the screen size, the time zone set in your browser, and whether the browser reports that it is controlled by automation software — never the device model or any identifier;
• how each page was used: how many seconds it was visible, how far down it was scrolled, and the number of seconds in which there was touch, mouse or keyboard activity (never what was typed or where you clicked);
• the main buttons you pressed and the forms you started or sent (such as WhatsApp, call, "I'm interested", saving a project, playing a video or enlarging the map), with the project concerned — never anything you typed into a form;
• a random session number, and the date and time.

The session number is created by your browser and kept in its session storage (sessionStorage), only for the current tab. It is not a cookie, it is not linked to your name or device, and your browser deletes it when you close the tab.

We do not store your IP address or any personal information in these statistics, and we do not use them to identify anyone. Seller account and administration pages are not recorded.

Visit records are deleted automatically after one year (12 months); we use them in aggregate to understand what interests visitors and to improve the site. When a new visit starts, our team receives an internal notification (via Telegram) with the same anonymous details: approximate location, page, language and source. This notification is updated during the visit (the pages opened, in order, roughly how long each was viewed, the number of pages and the visit length), and a separate notification is sent when the visitor opens the contact page or a request form. These details are used, anonymously, to tell real visits from automated ones, and each morning our team receives a summary of the previous day's visits on the same anonymous basis.

4How your messages reach us

Messages and requests you send through the Website's forms (contact, custom property request, engineering design consultation and Buyer's Guide questions) are saved directly in our system. Our team receives an internal notification by Telegram and email, and you receive a confirmation email with your request number. Only our team handles them, recording their follow-up status and internal notes in order to serve you. If our system cannot be reached for a technical reason, your email app opens with a prepared message instead, and the information then reaches us only when you send that message yourself. Private video tour bookings are also recorded in our system (see section 5). Messages sent through WhatsApp are subject to WhatsApp's own privacy policy.

When you use "Chat with our team" in the assistant window, your messages and our team's replies are saved in our system, together with the name and contact details you choose to add, the page you wrote from, the Website language, your approximate country and city (never your IP address) and the ad source, if any. Your messages reach our team on Telegram so they can reply, and a secret code for the conversation is kept only in your browser (local storage) so you can see the replies when you come back.

5Booking a private video tour

When you book a private video tour, your appointment is recorded directly in our system, and we keep only:

• your name, email address, phone number and preferred way of contact;
• the time you chose, the projects and what you would like to see, the app and the tour language;
• the site language, your time zone (to show the appointment in your local time) and the advertising source, if any;
• the booking reference, date and status.

We use this information only to organise the tour and contact you about it: you receive a confirmation email, and our team receives an internal notification (by email and Telegram) with the booking details. Only our management team can see bookings. If our team confirms or changes the time, you receive another email; a new time comes with two buttons to tell us whether it suits you, and your answer is saved with the booking. The day before the tour, you receive a reminder by email.

Each booking is deleted automatically one year after the tour date, and you can ask us to delete it sooner by writing to info@byhadara.com

6Why we use your information

We use your information to:

• Answer your enquiries and send you the project information, prices and documents you ask for.
• Arrange and hold private video tours and visits to our projects.
• Prepare offers and guide you through the purchase process when you decide to buy.
• Run the resale portal: create your account, review and publish listings, and pass buyers' messages to sellers.
• Measure how the Website and our advertising perform, and improve them.
• Meet our legal obligations and protect our legal rights.

7Legal basis

We process your data on the grounds set out in Article 5 of the KVKK (and, where applicable, Article 6 of the GDPR): taking steps at your request before entering into a contract, and performing a contract; complying with our legal obligations; our legitimate interests in running and improving our business, provided they do not override your rights; and your explicit consent where the law requires it, for example for advertising cookies.

We do not sell your personal data, and we do not send you marketing messages you have not asked for.

8Cookies and similar technologies

The Website stores a few small items in your browser. Except for the session number, they stay on your device and are not sent to us:

• Your language preference, so that we show the Website in your language on your next visit.
• The projects you save with the heart button.
• Your chat assistant conversation, your Find My Project answers and your tour booking progress (kept only until you close the browser tab).
• The advertising source of your visit (kept only until you close the browser tab).
• A random session number, sent only with our anonymous visit statistics (see section 3) and deleted when you close the browser tab.
• Your sign-in session, if you use a resale portal account.
• Your cookie choice (accept, decline, or your choice for each type), so that we do not ask you again on every visit.

We use Meta Pixel (Facebook and Instagram), Google Analytics and Google Ads to count visits, measure which ads bring enquiries and show our ads on Facebook, Instagram and Google to people who have visited the Website, but only if you choose “Accept” in the cookie notice. These tools may set cookies and collect your IP address and browsing data. Once you accept, our server also sends the same Meta events directly to Meta (the Conversions API) so they are counted reliably; when you send a form or book a tour, your email address, phone number and name go with them only in encrypted (hashed) form, so that Meta can match the event to your Facebook or Instagram account. If you choose “Decline”, they are not loaded at all. You can change your choice at any time through “Cookie settings” at the bottom of every page, and you can also block or delete cookies in your browser settings. The Website keeps working either way. Through “Customise” in the cookie notice you can also allow them separately: “Analytics” loads only Google Analytics, and “Advertising” loads only the Meta Pixel, the Conversions API and Google Ads.

9Who we share your data with

We share personal data only when it is needed, and only the data that is needed:

• Service providers who run the Website for us: Vercel (hosting, and the approximate location of visits), Supabase (resale portal database and sign-in, messages from the Website's forms, tour bookings, and anonymous visit statistics), Google (fonts, analytics and advertising) and Meta (WhatsApp, ad measurement and showing our ads, and the details you send us through a form or a WhatsApp message inside one of our Facebook or Instagram ads). The map on our contact page is provided by OpenStreetMap.
• Telegram and email, which deliver internal notifications to our team: new visits (with anonymous details only), new messages and requests (including requests sent through a form inside one of our Facebook or Instagram ads), and tour bookings. Confirmation emails to you are sent through the email service Resend.
• Project developers, when it is needed to complete your request, for example to reserve a unit or complete a purchase.
• In the resale portal: buyers' messages are shared with the owner of the listing, and approved listings are published on the Website.
• Public authorities, when the law requires it.

10International transfers

Some of these service providers store or process data outside Türkiye, for example in the European Union or the United States. Such transfers are carried out in line with the KVKK and, where applicable, the GDPR.

11How long we keep your data

We keep your data for as long as it is needed to answer your enquiry and serve you, and afterwards for as long as the law requires (for example, for tax and commercial records). You can ask us to delete your data at any time, unless we are required to keep it by law. Anonymous visit records are deleted automatically after one year (12 months). Tour bookings are deleted automatically one year after the tour date. Messages and requests from the Website's forms are deleted automatically two years after they were last updated. Live chat conversations are deleted automatically 90 days after their last message.

12Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and access controls on the resale portal. No transmission over the internet is completely secure, but we work continuously to protect your information.

13Your rights

Under Article 11 of the KVKK (and the GDPR where it applies), you have the right to:

• Learn whether your personal data is processed, and request information about it.
• Learn the purpose of the processing and whether your data is used for that purpose.
• Know the third parties in Türkiye or abroad to whom your data is transferred.
• Ask for incomplete or inaccurate data to be corrected.
• Ask for your data to be deleted or destroyed.
• Ask for these corrections or deletions to be notified to the third parties who received your data.
• Object to a result against you that arises solely from the automated analysis of your data.
• Claim compensation for damage caused by the unlawful processing of your data.
• Withdraw your consent at any time, without affecting processing carried out before.

To use these rights, write to us at info@byhadara.com. We will reply as soon as possible, and within 30 days at the latest.

Because our anonymous visit statistics contain nothing that identifies you, they cannot be linked to a specific person.

14Children

The Website is intended for adults. We do not knowingly collect personal data from anyone under the age of 18.

15Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.