Privacy notice

Last updated: 19 October 2026

This notice explains how Ironstone Tech ("Ironstone", "we") handles personal data when you visit this website or apply for a job with us. We process personal data in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR).

Who is responsible

Ironstone Tech is the data controller. You can reach us at hello@ironstonetech.co.

Job applications

When you apply, we receive the information you choose to send us, usually:

• your name and contact details,
• your CV, portfolio and links (LinkedIn, GitHub, website),
• anything else you write in your application and what we discuss during the hiring process.

Please don't send a photo, ID number, health information, religion or other sensitive personal data. We don't need it to assess your application.

We use this information only to assess your application, contact you and, if we make an offer, prepare your hiring. The legal basis is taking steps at your request before entering into an employment contract, and our legitimate interest in hiring the right people.

How long we keep it

If you're not hired, we keep your application for up to 12 months so we can contact you about future roles, then delete it. You can ask us to delete it sooner at any time.

Who we share it with

We don't sell your data. Your application is stored in our email and document tools (Google Workspace), whose servers may be outside Türkiye. We only share it with people at Ironstone involved in hiring.

Website visitors

This site doesn't use advertising or tracking cookies. We use Cloudflare Web Analytics, which counts visits without cookies and without identifying you. Our hosting provider (Cloudflare) processes technical data such as IP addresses to deliver and protect the site.

Your rights

You can ask whether we process your data, get a copy, have it corrected or deleted, object to processing, and learn who it was shared with. Email hello@ironstonetech.co and we'll reply within 30 days. You can also complain to the Personal Data Protection Authority (KVKK) in Türkiye.