Privacy Policy

Last updated: 28 September 2026

At Kiyi Global we take the protection of your personal data seriously. This Privacy Policy explains which personal data we process when you visit our website, fill in our contact or eligibility assessment forms, or subscribe to our newsletter, for what purposes and on which legal grounds. It has been prepared in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).

1. Data Controller

Your personal data is processed by Kiyi Global as the data controller.

  • Email: info@kiyiglobal.com
  • Phone: +90 532 587 26 10
  • Address: İskele, Ahmet Taner Kışlalı Cd No:59A, 48900 Datça/Muğla

2. Personal Data We Process

  • Identity data: your first and last name.
  • Contact data: your phone number (including WhatsApp) and email address.
  • Enquiry and assessment data: your country of residence, the country, program or property you are interested in, your investment budget, the number of people included in the application and the content of your messages.
  • Security data: your IP address, browser and device information, form submission times and security logs.
  • Marketing data: your email address and language preference if you subscribe to our newsletter.
  • Cookie data: see our Cookie Policy for details.

We do not request special categories of personal data (such as health data or criminal records) through our website. If such documents become necessary as the advisory process progresses, you will be informed separately and your explicit consent will be obtained.

3. Purposes of Processing

  • To respond to your contact and assessment requests and to call or write to you,
  • To identify and present visa, residency, citizenship programs and properties that suit you,
  • To carry out pre-contractual and contractual steps of the advisory service at your request,
  • To send newsletters and updates on programs and projects where you have given consent,
  • To keep the website secure and prevent spam and misuse,
  • To analyse website usage and improve our services where you have given consent,
  • To comply with our legal obligations and requests from competent authorities.

4. Legal Grounds

We process your personal data on the following grounds set out in Article 5 KVKK and Article 6 GDPR:

  • Necessity for entering into or performing a contract (responding to your request and the advisory process),
  • Compliance with a legal obligation,
  • Our legitimate interests, provided they do not override your fundamental rights (website security, prevention of misuse),
  • Your consent (newsletter, analytics cookies and transfers of personal data to partners abroad).

5. Transfers of Personal Data

As our services cover processes in Türkiye, Greece and Portugal, your personal data may be shared only at your request and to the extent necessary with:

  • Partners handling your case such as lawyers, notaries, translators and property developers (your explicit consent is obtained for transfers abroad),
  • Suppliers providing web hosting, email and bot-protection services,
  • Competent public authorities where required by law.

We never sell your personal data or rent it out for marketing purposes.

6. Retention Periods

  • Contact and assessment records: up to 2 years from the last contact,
  • Records relating to an advisory contract: for the statutory retention periods,
  • Newsletter subscription: until you unsubscribe,
  • Security logs: up to 1 year.

At the end of these periods your data is deleted, destroyed or anonymised.

7. Your Rights

Under Article 11 KVKK and the GDPR you have the right to:

  • Learn whether your personal data is processed and request information about it,
  • Learn the purpose of processing and whether it is used accordingly,
  • Know the third parties to whom it is transferred in Türkiye or abroad,
  • Request rectification of incomplete or inaccurate data, and erasure where the conditions are met,
  • Request data portability and restriction of processing,
  • Object to processing and withdraw your consent at any time,
  • Claim compensation for damages arising from unlawful processing,
  • Lodge a complaint with the Turkish Personal Data Protection Authority or, if you live in the EU, your national data protection authority.

8. How to Exercise Your Rights

Please send your requests to info@kiyiglobal.com. We will respond free of charge within 30 days at the latest. We may ask for additional information to verify your identity.

9. Data Security

All communication on our website is encrypted with SSL/TLS. Access to the admin panel is restricted to authorised staff, passwords are stored in irreversible form and our systems are updated regularly.

10. Changes

We may update this policy to reflect changes in legislation or our services. The current version is always published on this page. For any questions, please use our contact page.