Privacy Policy

This Privacy Policy explains how Aetii (“Aetii,” “we,” “us,” or “our”) collects, uses, and protects personal information when you visit aetii.com or interact with our services. We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA) as applicable.

1. Data Controller

The data controller responsible for your personal information is:
Aetii
Istanbul
Email: hello@aetii.com

2. Information We Collect

2.1 Information you provide

When you use our contact form, we collect: your name, email address, company name (optional), inquiry type, and the contents of your message.

2.2 Information collected automatically

We use Vercel Analytics and Vercel Speed Insightsto understand site usage and performance. These services are cookieless and do not track individuals across sites. They collect: page views, referrer, approximate location (country), device type, browser, and anonymized performance metrics.

3. Legal Bases for Processing (GDPR)

• Consent— where you voluntarily submit a contact form.
• Legitimate interests— for analytics, site security, and improving our services.
• Legal obligation— where required by law (e.g., tax records, regulatory requests).

4. How We Use Your Information

• To respond to inquiries you submit through our contact form.
• To send transactional confirmations of your inquiry.
• To analyse aggregate site traffic and improve our content.
• To detect, prevent, and address technical or security issues.

5. Third-Party Service Providers

We share data only with the following processors:

• Vercel Inc.— hosting, analytics, and performance monitoring (United States; relies on Standard Contractual Clauses for EU transfers).
• Twilio SendGrid— transactional email delivery for contact form responses (United States; SCCs in place).

We do not sell, rent, or trade your personal information. We do not use your information for automated decision-making or profiling.

6. International Data Transfers

Your information may be processed in countries outside the EEA or UK, including the United States. Where this occurs, we rely on Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office.

7. Data Retention

Contact inquiries are retained for up to 24 months unless an ongoing business relationship requires longer retention. Analytics data is retained in aggregated, anonymized form. You can request deletion at any time (see Section 8).

8. Your Rights

Under GDPR, UK GDPR, and CCPA, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information (“right to be forgotten”).
• Object to or restrict processing.
• Receive a portable copy of your information.
• Withdraw consent at any time.
• For California residents: opt out of any “sale” or “sharing” of personal information (we do not engage in either).
• Lodge a complaint with your local supervisory authority (EU/UK) or the California Attorney General.

To exercise any of these rights, email hello@aetii.com. We respond within 30 days.

9. Security

We implement industry-standard technical and organizational measures (TLS encryption in transit, access controls, vetted processors). No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Children

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced on this page with a new “Last updated” date.

12. Contact

Questions about this Policy or your data:
Email: hello@aetii.com
Postal: Istanbul