Privacy Policy

For the purposes of KVKK, the data controller is MHD Invest, a real estate investment consultancy operating from Istanbul, Türkiye. Our current contact details are published at the end of this page and on the contact page of this website.

Contact details you submit through our lead and consultation forms: your name, email address, phone number, preferred language, and any details you choose to share about your investment goals, such as budget, districts of interest, or timeline.

Account data if you create an account or sign in: your email address and profile name, provided either directly or through Google sign-in, together with the session data needed to keep you signed in.

Usage data: basic page view statistics recorded against a random visitor identifier stored in your browser. This identifier is not linked to your name or contact details.

Correspondence: the content of messages you send us by email, phone, or WhatsApp.

To respond to your enquiries and provide investment consultancy services, based on the establishment or performance of a contract and our legitimate interest in running the business (KVKK Article 5/2-c and 5/2-f; GDPR Article 6/1-b and 6/1-f).

To operate, secure, and improve this website, based on our legitimate interest.

To send you investment updates you have subscribed to, based on your consent, which you may withdraw at any time.

We do not sell personal data, and we do not use it for automated decision-making that produces legal effects for you.

We share personal data only with the service providers that host our website, database, and authentication infrastructure, acting on our instructions under contract. Some of these providers store data on servers located outside Türkiye; in such cases we rely on the safeguards foreseen by KVKK Article 9 and, where the GDPR applies, on appropriate transfer mechanisms.

We may also disclose data where required by law or at the request of a competent authority.

We keep enquiry and lead records for as long as needed to handle your request and for up to three years after our last contact, unless a longer period is required by law. Account data is retained until you close your account. Usage statistics are kept in aggregate form.

Under KVKK Article 11 you have the right to learn whether your personal data is processed, to request information about that processing, to learn its purpose and whether the data is used accordingly, to know the third parties to whom it is transferred, to request correction of incomplete or inaccurate data, to request deletion or destruction, to ask that these actions be notified to third parties, to object to a result that arises against you exclusively through automated analysis, and to claim compensation for damage caused by unlawful processing.

Where the GDPR applies, you additionally have the rights of access, rectification, erasure, restriction of processing, data portability, and objection, and the right to lodge a complaint with a supervisory authority. In Türkiye, the competent authority is the Personal Data Protection Authority.

To exercise any of these rights, contact us through the channels listed at the end of this page. We respond within the statutory period of thirty days.

This website sets no third-party advertising or tracking cookies. It stores a small number of functional values in your browser:

mhd-theme (local storage): remembers your light or dark theme choice.

mhd-currency (local storage and cookie): remembers your preferred display currency.

NEXT_LOCALE (cookie): remembers your language choice.

Consent record (local storage): stores the choice you make in our consent notice so we do not ask again.

mhd-visitor (local storage): a random identifier used for page view statistics; it does not identify you personally.

Authentication cookies: set by our authentication provider when you sign in, to keep your session active.

You can delete these values at any time through your browser settings; the site will continue to work with default preferences.

We apply appropriate technical and organizational measures to protect personal data, including encrypted connections and access controls limited to authorized staff. No method of transmission or storage is completely secure, but we work to protect your data in line with industry practice.

We may update this policy from time to time. The date at the top of this page shows when it was last revised, and material changes will be announced on this website.