Privacy Policy

Last updated: 20 August 2026 · Effective date: 20 August 2026

MYRA SUPPLIER LTD ("we", "us", "our") operates the website heliosync.app (the "Site"). We are committed to protecting your privacy and handling your personal data lawfully, fairly and transparently. This Privacy Policy explains what data we collect, why we collect it, how long we keep it, who we share it with and what rights you have. It applies to visitors of the Site; the Heliosync platform itself (dash.heliosync.app) is available to authorized users only and is governed by separate agreements.

1. Who is responsible for your data

The data controller for personal data collected through the Site is:

MYRA SUPPLIER LTD
Email: [email protected]

2. Data we collect

a) Data you give us directly. When you use the contact form we collect your full name, email address, phone number, company name (optional) and the content of your message. Providing this data is voluntary; without it we simply cannot respond to your inquiry.

b) Data collected automatically. When you visit the Site, our infrastructure automatically processes limited technical data: IP address, approximate country derived from the IP address, browser type and operating system, requested pages, timestamps, referring URL, and basic usage events (pages viewed, clicks on site elements, session duration) collected through our own first-party measurement. This data is processed for security, abuse prevention, service reliability and understanding how the Site is used.

c) Data stored in your browser. Your language preference (TR/EN) is stored locally in your browser (localStorage) and is never transmitted to our servers. See our Cookie Policy for details.

d) Data we do NOT collect. We do not collect payment information, government identifiers, or special categories of personal data through this Site, and we do not use advertising or cross-site tracking technologies.

3. Purposes and legal bases
  • Responding to your inquiry — name, contact details and message content; legal basis: our legitimate interest in responding to messages you send us, and steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b) and (f)).
  • Security and abuse prevention — IP address, technical metadata, rate limiting and bot detection; legal basis: our legitimate interest in keeping the Site secure (GDPR Art. 6(1)(f)).
  • Compliance with legal obligations — where retention or disclosure is required by applicable law (GDPR Art. 6(1)(c)).

We do not use your personal data for automated decision-making or profiling, and we do not send marketing communications.

4. Who we share data with

We do not sell, rent or trade your personal data. We share data only with service providers that help us operate the Site, strictly for the purposes described above:

  • Cloudflare, Inc. — content delivery network, DDoS protection, DNS and email routing. Cloudflare processes visitor traffic (including IP addresses) as a processor to deliver and secure the Site.
  • Hosting providers — our servers are hosted in professional data centers within Europe.
  • Internal communication tools — contact form submissions are relayed to our operations team over secure internal channels.

We may also disclose personal data where required by law, court order or competent authority, or to establish, exercise or defend legal claims.

5. International transfers

Some of our service providers may process data outside your country of residence. Where personal data is transferred outside the EEA or the UK, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

6. How long we keep your data
  • Contact form messages: kept for as long as needed to handle your inquiry and any follow-up, and no longer than 24 months after the last interaction.
  • Security and access logs: kept for up to 12 months, then deleted or anonymized.
  • Language preference: stored only in your own browser until you clear it.
7. How we protect your data

We apply technical and organizational measures appropriate to the risk, including encryption in transit (TLS), network-level filtering and DDoS protection, strict access controls on a need-to-know basis, hardened server configurations, encrypted off-site backups and full administrative action logging. No method of transmission or storage is 100% secure, but we continuously review and improve our safeguards.

8. Your rights

Depending on your jurisdiction (including the GDPR, UK GDPR and the Turkish Personal Data Protection Law No. 6698 "KVKK"), you have the right to:

  • request access to the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • request deletion of your data ("right to be forgotten");
  • request restriction of processing or object to processing based on legitimate interests;
  • receive your data in a portable format;
  • lodge a complaint with your local supervisory authority.

To exercise any of these rights, email us at [email protected]. We respond to verified requests within 30 days.

9. Children's privacy

The Site is not directed at children under 16 and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it promptly.

10. Third-party links

The Site may contain links to external websites we do not operate. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version, with its effective date, is always published on this page. Material changes will be highlighted on the Site.

12. Contact

For any privacy-related question or request:
MYRA SUPPLIER LTD — [email protected]

© MYRA SUPPLIER LTD — Heliosync