Privacy Policy
Last updated: April 2026
1. Introduction
qaera ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services. qaera is based in Serdivan, Sakarya, Turkey and processes data in compliance with the Turkish Personal Data Protection Law (KVKK, Law No. 6698) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Data We Collect
We collect the following categories of personal data:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, age range | Account creation, lesson matching |
| Contact Data | Email address, phone/WhatsApp number, country | Communication, lesson reminders |
| Payment Data | Payment method, transaction records | Processing payments via Stripe/PayTR |
| Lesson Data | Lesson history, progress records, assessments | Tracking progress, certificates |
| Technical Data | IP address, browser type, device info | Analytics, security, service improvement |
We do not collect sensitive personal data such as health information, religious beliefs, or biometric data. We do not store full credit card numbers — payment processing is handled by our secure third-party providers (Stripe, PayTR).
3. How We Use Your Data
We use your personal data for the following purposes:
- Service delivery: Matching you with teachers, scheduling lessons, tracking progress, and issuing certificates.
- Communication: Sending lesson reminders, schedule changes, and responding to your enquiries via email and WhatsApp.
- Email marketing: With your explicit consent, we may send you newsletters, learning tips, and promotional offers via Brevo. You can unsubscribe at any time.
- Analytics: We use Google Analytics and Meta Pixel to understand website usage patterns and improve our services. This data is aggregated and does not personally identify you.
- Legal compliance: Fulfilling our obligations under Turkish law, including KVKK requirements and tax regulations.
4. KVKK Compliance
As a Turkey-based company, qaera processes personal data in full compliance with the Turkish Personal Data Protection Law (KVKK, Law No. 6698). Under KVKK:
- We process your data based on your explicit consent or for the performance of a contract.
- We implement technical and administrative measures to ensure data security.
- We do not transfer personal data outside Turkey without appropriate safeguards.
- You have the right to learn whether your data is processed, request information about the purpose of processing, request correction of inaccurate data, and request deletion of your data under conditions specified by law.
5. GDPR Compliance (EU/EEA Users)
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). The lawful bases for our processing of your data include consent, contractual necessity, and legitimate interests. You have the right to access, rectify, erase, restrict processing of, and port your data. You also have the right to lodge a complaint with your local data protection authority. To exercise these rights, contact us at reyyancantas@gmail.com.
6. Cookies & Tracking
Our website uses the following cookies and tracking technologies:
- Google Analytics: To measure website traffic, user behaviour, and page performance. Data is anonymised and aggregated.
- Meta Pixel (Facebook Pixel): To measure advertising effectiveness and deliver relevant ads on Meta platforms. You can opt out via your Facebook ad settings.
- Essential cookies: Used to remember your language preference and ensure the website functions correctly. These cannot be disabled.
You can control non-essential cookies through your browser settings. Disabling cookies may affect some website functionality.
7. Data Sharing
We do not sell your personal data. We may share data with the following categories of third parties, solely for the purposes described in this policy:
- Payment processors: Stripe (Australia/international) and PayTR (Turkey) for secure payment handling.
- Communication tools: Brevo (email), Zoom (video lessons), WhatsApp Business (messaging), Crisp (live chat).
- Analytics: Google Analytics and Meta for anonymised usage data.
- Teachers: Your name, learning goals, and progress data are shared with your assigned teacher(s) to deliver personalised instruction.
8. Data Retention
We retain your personal data for the following periods:
- Active student records: Retained for the duration of your enrolment plus 2 years after your last lesson.
- Payment records: Retained for 10 years in accordance with Turkish tax and commercial law.
- Marketing data: Retained until you unsubscribe or request deletion.
- Analytics data: Aggregated analytics data is retained indefinitely; individual session data is retained for 14 months (Google Analytics default).
After the retention period, data is securely deleted or anonymised.
9. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Objection: Object to processing of your data for direct marketing purposes.
- Portability: Request your data in a structured, commonly used, machine-readable format (GDPR users).
To exercise any of these rights, please contact us at reyyancantas@gmail.com. We will respond within 30 days.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), secure payment processing, access controls, and regular security reviews.
11. Children's Privacy
Our Kids Arabic programme serves learners aged 5–14. We collect personal data for minors only with the explicit consent of a parent or legal guardian. Parents may review, correct, or request deletion of their child's data at any time by contacting us.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
qaera — Data Protection
Email: reyyancantas@gmail.com
WhatsApp: +90 554 287 29 49
Serdivan, Sakarya, Turkey