Privacy Notice (KVKK)

Under KVKK, your personal data is processed by Yiğit Azad Polat (“Yiğit Polat”, “we”) acting as the data controller.

• Data controller: Yiğit Azad Polat
• Activity: Individual fitness/transformation coaching and mental-discipline mentoring
• Location: Mersin, Türkiye
• Email: [email protected]
• Phone / WhatsApp: +90 531 600 57 23
• Website: yigitpolat.co

You may use the channels above for any question, request, or application regarding your personal data.

Through our website we process only the data you provide to us and that is needed to operate the service. The main categories are:

Contact form (redirect to WhatsApp):

• Your name
• Your email address
• The coaching goal you select
• Your free-text message

Important: contact-form details are not collected or stored on our server. When you press “Send”, your browser turns what you entered into a ready WhatsApp message and redirects you to WhatsApp to send it. Once you send it, this information is transmitted over the WhatsApp (Meta) infrastructure and reaches us in our WhatsApp account.

YKS Command Center membership (member students only):

• Username
• Password (never stored in plain text; kept only as a one-way cryptographic hash — SHA-256)
• Your display name
• Your study/progress records (the tracking data you enter)

This data is stored on Cloudflare KV so your progress is not lost even if you change your phone or device. This section is closed to search engines (noindex).

Technical and connection data:

• Technical logs such as IP address, browser/device information, and access timestamps, processed automatically by our hosting/CDN provider for security and as required by applicable law when you connect to the site.

We process your personal data for the following purposes, relying on the legal grounds set out in KVKK Article 5:

• To respond to your contact request and to evaluate/establish the coaching relationship — directly related to the conclusion or performance of a contract (Art. 5/2-c) and legitimate interest (Art. 5/2-f). Completing and sending the form also expresses your intent to be contacted.
• To provide the YKS membership service, verify your login, and preserve your progress — necessity for the performance of the membership contract (Art. 5/2-c). For users under 18, this processing additionally relies on the explicit consent of a parent/legal guardian.
• To keep the site secure, prevent misuse, and meet legal obligations — legal obligation (Art. 5/2-ç) and legitimate interest (Art. 5/2-f).

No automated decision-making or profiling that produces legal effects concerning you is carried out on your data.

Our site uses as few cookies as possible. No third-party advertising or profiling/tracking cookies are used.

• Strictly necessary/technical cookie: when you sign in to the YKS Command Center, an HMAC-signed session cookie (yks_oturum), marked HttpOnly and Secure, is used to keep your session secure. This cookie is required for the service to work; it ends when you log out or when it expires (at most 180 days).
• Technical cookies that the hosting/CDN provider (Cloudflare) may set for security and performance.

Because these cookies are necessary for the operation and security of the service, they do not require explicit consent. If analytics or other-purpose cookies are added in the future, this notice will be updated and your consent requested where required.

Your personal data is shared, only to the extent necessary, with the following infrastructure and service providers we use to deliver the service. Because these providers’ servers may be located abroad, such processing may constitute a transfer abroad under KVKK Article 9:

• WhatsApp / Meta Platforms — to transmit your contact messages.
• Cloudflare (Pages hosting and KV) — to publish the site and store YKS membership/progress data.

These transfers are necessary to provide the service at your request (performance of a contract) and are carried out within the conditions set out in KVKK Article 9 — under appropriate safeguards or the exceptions foreseen by law, and relying on your explicit consent where required. We do not sell or rent your data to third parties for marketing. Where legally required, data may be shared with authorized public authorities to the extent the law requires.

We keep your personal data only for as long as the purpose of processing requires and for the limitation/retention periods laid down in applicable law; once the period ends or upon your request, we delete, destroy, or anonymize it.

• Contact (WhatsApp) messages: for the duration of the coaching relationship and the relevant legal periods; deleted upon your request.
• YKS membership and progress data: while your account is active; removed when you request account deletion or after prolonged inactivity.
• Session cookie: at most 180 days, or until you log out.

The YKS Command Center is aimed at students preparing for the university entrance exam, and some users may be under 18. If you are under 18, you need your parent’s/legal guardian’s knowledge and consent before registering or sharing your personal data. If a parent/guardian who believes a child registered without consent contacts us, the relevant account and data will be deleted. Coaching/mentoring services for minors are likewise carried out only with parental/guardian consent.

We do not systematically collect special-category personal data such as health data through the website and its forms. Please do not enter sensitive health details in the contact form’s free-text field; stating your goal in general terms is enough. Any health-related information shared with us during the coaching relationship is handled separately, confidentially, and on the basis of your explicit consent. Yiğit Polat is not a physician, dietitian, or pharmacist and does not provide medical diagnosis, treatment, prescriptions, or the supply of any medication/substance.

We take reasonable technical and administrative measures to protect your data: passwords are stored as a one-way cryptographic hash (SHA-256) rather than plain text, sessions run on an HMAC-signed, HttpOnly cookie, connections are encrypted with HTTPS, and access to data is limited to what is necessary. No system is 100% secure, but where the law requires it we will make the applicable notifications in the event of a security breach.

Under KVKK Article 11, by applying to the data controller you have the right to:

• Learn whether your personal data is being processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties to whom it is transferred domestically or abroad,
• Request correction if it is incomplete or inaccurate,
• Request its erasure/destruction under the conditions set out in KVKK,
• Request that correction/erasure be notified to the third parties to whom the data was transferred,
• Object to a result against you arising solely from automated analysis,
• Claim compensation if you suffer damage due to unlawful processing.

To exercise the rights above, you may send your requests:

• By email to [email protected], or
• Via WhatsApp to +90 531 600 57 23.

So that we can verify your identity, please include information identifying you in your request. We will conclude your requests within 30 days at the latest, in accordance with KVKK Article 13 and the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests are generally free of charge; a fee may apply in the cases determined by the Personal Data Protection Board. If your request is refused or you find our response inadequate, you retain the right to file a complaint with the Personal Data Protection Board (KVKK).

Our site contains links to third-party services such as WhatsApp, Instagram, and Google Maps. When you click these links, the relevant third party’s own privacy policy applies; we are not responsible for the practices of those third parties. We recommend reviewing the relevant service’s privacy policy before sharing your information.

This Privacy Notice may be updated when necessary; the current version is always published on this page. For material changes, we refresh the update date. In case of any discrepancy between the Turkish and English versions, the Turkish version prevails.

Last updated: 27 August 2026