Privacy Policy

This Privacy Policy explains how GetQA (“GetQA,” “we,” “us,” or “our”) collects, uses, and shares personal data when you visit our website, contact us, apply for a role, or engage our quality-assurance services (together, the “Services”).

GetQA is based in Istanbul, Türkiye (Damar Sokak 14/1, Yeşilce Mah., Kağıthane, 34418 Istanbul) and is the data controller for the personal data described here.

It doesn’t cover the products and systems of our clients. When we test on a client’s behalf, that client is the controller of the data in their systems, and their privacy notice applies.

We collect information in a few ways:

• Information you give us. When you fill in a contact or booking form, apply for a job, or email us, we collect the details you provide, such as your name, company, email, message, and any attachments (like a CV).
• Information from an engagement. To deliver the Services we may process account details, access credentials you grant, and business contact information for the people we work with.
• Information collected automatically.Our host keeps standard server logs, such as IP address, browser type, and the pages requested. If you accept analytics cookies, Microsoft Clarity also records how you use the site, such as clicks, scrolling, and pages viewed, so we can see where it works and where it doesn’t.

We use personal data to:

• provide, operate, and improve the Services;
• respond to your messages and set up calls or engagements;
• review and manage job applications;
• send service and administrative messages, and, where permitted, occasional updates you can opt out of;
• keep the Services secure, prevent abuse, and meet our legal obligations.

We rely on legal bases including performing our contract with you, our legitimate interests in running and improving the Services, your consent (for example, non-essential cookies), and compliance with law.

We use cookies and similar technologies to keep the site running smoothly and understand how it’s used. You decide what’s on: the consent banner lets you accept or decline non-essential cookies. For the full detail, see our Cookies Policy.

We don’t sell your personal data. We share it only:

• With service providers who help us run the business, under terms that limit them to processing on our instructions: Vercel (website hosting), Supabase (storing contact form submissions and job applications, including CVs), Resend (emailing us a copy of each form submission), Microsoft Clarity (site analytics, only if you accept it), Calendly (booking calls), and our email provider;
• For legal reasons when required to comply with law, enforce our agreements, or protect the rights, safety, and property of GetQA or others;
• In a business transfersuch as a merger, acquisition, or sale of assets, in which case we’ll continue to protect your data and notify you of any change.

We keep personal data only for as long as we need it for the purposes in this policy: to deliver the Services, meet legal, tax, and accounting requirements, and resolve disputes. After that we delete or anonymize it. Retention periods vary by the type of data and why we hold it. You can ask us to delete a contact message or a job application at any time.

We use reasonable technical and organizational measures, such as access controls, encryption in transit, and the principle of least privilege, to protect personal data against loss, misuse, and unauthorized access. No method of transmission or storage is perfectly secure, but we work to keep your data safe and to respond quickly if something goes wrong.

Depending on where you live, you may have rights over your personal data, including to access, correct, delete, or port it, to object to or restrict certain processing, and to withdraw consent. These rights may apply to you under Türkiye’s Personal Data Protection Law (KVKK, Law No. 6698), the GDPR if you’re in the EEA or UK, or the CCPA/CPRA if you’re in California.

To exercise any of them, email us at [email protected]. We’ll respond within the timeframe the law requires, and we won’t discriminate against you for exercising a right. You may also have the right to complain to your local data protection authority.

We are based in Türkiye, and our team and service providers work from other countries too, including Germany, other EU countries, and the United States. So your personal data may be processed outside the country you live in. Where we transfer data across borders, we use appropriate safeguards, such as standard contractual clauses, in line with applicable law.

The Services are intended for businesses and are not directed to children under 16. We don’t knowingly collect personal data from children. If you believe a child has provided us data, contact us and we’ll delete it.

Our site may link to third-party websites and tools we don’t control. This policy doesn’t apply to them. We encourage you to read the privacy notices of any site you visit.

We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above and, for material changes, take reasonable steps to let you know. Please check back periodically.

Questions about your privacy or this policy? Reach our team at [email protected]. A real person reads every message.