Privacy Notice
How we handle the personal data you send us through this website.
Who we are. This website is operated by Metin Kodal, trading as NSM Sourcing, Ankara, Türkiye ("we"). We are the data controller for the personal data described below. Contact: contact@nsmsourcing.com.
What we collect. When you use the contact form, we collect your name, organisation, business e-mail address, country, area of interest and the content of your message. Please do not include special categories of personal data, such as health information, in your message.
When you load the form, our spam protection service (Cloudflare Turnstile) processes technical signals from your browser, such as your IP address and browser type, to check that the form is being sent by a person. This data is not used to identify you.
Why we use it. We use your details only to reply to your enquiry and, if you wish, to discuss a possible engagement. The legal bases are the steps needed before entering into a contract and our legitimate interest in answering enquiries about our services (KVKK Article 5(2)(c) and (f); GDPR Article 6(1)(b) and (f)).
How your message reaches us. The website does not store your message. It is sent as an e-mail to contact@nsmsourcing.com and kept in our mailbox. We use the following service providers, all based in the United States:
| Service | Provider | Where data is processed |
|---|---|---|
| Website hosting and spam protection | Cloudflare, Inc. | Cloudflare's global network |
| Delivery of form messages by e-mail | Resend (Plus Five Five, Inc.), using Amazon Web Services, Inc. | Sent from Ireland; records stored in the United States |
| Mailbox and domain | Spaceship, Inc. | United States |
| Forwarding of our mailbox to our working inbox | Google LLC (Gmail) | United States |
This means your data is transferred outside Türkiye, to the United States, on the basis of the consent you give in the contact form. We do not sell your data or share it with anyone for marketing.
How long we keep it. Enquiries that do not lead to an engagement are deleted within 12 months. If an engagement follows, records are kept for as long as the law requires.
Your rights. Under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR), you may ask whether we hold your data, ask for a copy, ask us to correct or delete it, object to its processing and withdraw your consent at any time. Write to contact@nsmsourcing.com; we reply within 30 days.
Cookies. This website does not use analytics or advertising cookies. Cloudflare may use strictly necessary technical data to deliver the site securely and to run the spam check on the form.
Turkish notice. The KVKK information notice in Turkish is available here: Kişisel Verilerin Korunması Aydınlatma Metni
Last updated: 4 October 2026