Privacy policy

Last updated 9 September 2026

BeLinked (“we”) helps people living in Türkiye with residence permits, university registration, health insurance, translation, certificate accreditation, accommodation and airport transfers. This policy explains what we collect when you use our customer portal, why we hold it, and what you can ask us to do with it.

What we collect

• Your account. Your name and email address, received from Google when you sign in. We never see your Google password. If you turn on two-factor authentication we store the setup for your authenticator app.
• Your profile. Nationality, current address, WhatsApp number and preferred language, where you give them.
• Your requests. The service you ask for, the details you enter, and the appointment or timing preferences you choose.
• Residence permit intake. Where you apply for residence support we also collect the details the application itself needs: your name as written on your passport, Turkish mobile number, mother’s and father’s names, your address in Türkiye, permit type, and — depending on your route — your university, student number or graduation date.
• Your documents. The files you upload, which typically include identity documents such as a passport, along with supporting paperwork for your case.
• Your messages. Correspondence with our team, including WhatsApp messages and any files sent through it, plus the case notes our staff record while working on your request.
• Session cookies. The portal uses essential authentication cookies so you can stay signed in and so staff security checks keep working. We do not use advertising cookies in the portal.
• Technical records. Ordinary server logs kept by our hosting providers, such as IP address and request times, used to keep the service running and secure.

Why we use it

We use your information to carry out the service you asked us for, to contact you about your case, to keep records of the work we have done, and to keep accounts. We use it because you have asked us to act for you, because we need it to perform that work, because we have legal record-keeping obligations of our own, and because we have a legitimate interest in keeping the portal secure. Where a service requires sensitive personal data or official identity documents, we use that information only for the case you asked us to handle.

Who we share it with

We do not sell your information and we do not use it for advertising. We share it only in these situations:

• To do the work you asked for. Where your case requires it, we pass the relevant details and documents to the body handling your application — for example a university, an insurer, a translation office, a notary, an embassy or a Turkish government authority. We only send what that step needs.
• Our service providers. Supabase stores our database and your uploaded files. Vercel hosts and serves the portal. Google handles sign-in. If you contact us on WhatsApp, that conversation also passes through WhatsApp’s own systems.
• Where the law requires it, or to establish or defend a legal claim.

Where it is stored

Our database and your uploaded documents are held in the European Union, in Amazon Web Services’ Ireland region, through Supabase. Because our hosting, sign-in and messaging providers operate internationally, some of your information may be handled outside Türkiye and the EU. Before using a provider for personal data, we expect an appropriate contract or other lawful transfer safeguard to be in place.

How long we keep it

We keep your case records and documents for three years after your case is closed, so that we can answer questions about work we did for you and meet our own record-keeping obligations. You can ask us to delete your information sooner, and we will do so unless we are required to keep it.

How we protect it

Your documents are stored in private storage that is not publicly reachable. Access is enforced at the database level, so one customer’s records cannot be read by another. Staff access is limited by role, and staff must confirm their identity with an authenticator app before opening customer records or documents. Uploads are restricted to PDF, PNG and JPEG files and are checked to confirm the file really is the type it claims to be. No system is perfectly secure, and we cannot guarantee that a determined attack will never succeed.

Your rights

Under Turkish data protection law (Law No. 6698, KVKK) you can ask us whether we hold information about you, ask for a copy, ask us to correct anything wrong, ask us to delete it, and object to how we use it. If you are in the European Union, comparable rights apply to you under the GDPR. To exercise any of these, contact us using the details below. We will not charge you for a reasonable request.

Contact us

Email info@belinked.io or message us on WhatsApp at +90 505 100 7119. Our address is Istanbul, Türkiye. If you are not satisfied with our answer, you can complain to the Turkish Personal Data Protection Authority (KVKK).

If we change this policy we will update the date at the top of this page.