Draft — pending legal review. This page was written from what the site actually collects and the cookies it actually sets. It must be reviewed by the company's legal adviser, and the bracketed fields completed, before it is relied upon.
Last updated: 8 August 2026
This policy explains what personal data The Integral Institute collects through theintegralinstitute.com, why, for how long, and what rights you have. Under Turkish Personal Data Protection Law no. 6698 (KVKK), the data controller is [[Registered company name]].
1. What we collect
Contact form
Your name, email, telephone (optional), organisation (optional), subject and message — plus the page you wrote from, your IP address, your browser details and the moment you gave consent.
Programme application
The above, plus your role and the programme you are interested in.
Newsletter
Your email address, the page you signed up from and your IP address. Subscription is double opt-in: you are not added to the list until you click the link we send you.
Membership account
Your name, email address and password. The password is never stored in plain text; only an irreversible bcrypt hash is kept. If you sign in with Google, we process the name, email and profile picture Google gives us.
Reviews
The name you want shown, your role (optional), your rating, your review and, if you choose, your photograph. Your email address is taken from your account and is never published; we hold it to confirm the review is yours and to contact you if we need to.
Collected automatically
Server logs record IP address, request time and browser. With your consent, Google Analytics measurement. See the Cookie Policy.
2. Why, and on what legal basis
| Purpose | Basis (KVKK art. 5) |
|---|---|
| Answering your enquiry or application | Directly related to concluding or performing a contract |
| Delivering and invoicing training and services | Performance of a contract; legal obligation |
| Running your membership account | Performance of a contract |
| Publishing participant reviews | Explicit consent |
| Sending the newsletter | Explicit consent |
| Preventing spam and abuse (IP, browser record, Turnstile) | Legitimate interest |
| Measuring site usage | Explicit consent |
| Statutory retention and disclosure duties | Legal obligation |
3. Who we share it with
We do not sell personal data and we do not pass it to third parties for marketing. It is shared only as the service requires, with our hosting provider, our email delivery infrastructure, iyzico when you pay (card details never reach us), Google for Analytics or optional sign-in, Cloudflare for bot verification on forms, and competent public authorities where the law requires. Google and Cloudflare may process data outside Türkiye; such transfers rely on your explicit consent or another condition under KVKK article 9.
4. How long we keep it
- Enquiries and applications: 3 years from last contact.
- Newsletter: until you unsubscribe. After that we keep only a record of the address so you are not re-added.
- Membership account: while the account is open; deleted within 30 days of your request.
- Published reviews: until you ask us to remove them.
- Commercial and financial records: 10 years, as the law requires.
- Server logs: 12 months.
5. Security
Connections are encrypted with TLS. Passwords are stored as bcrypt hashes. Access to the admin panel is role-based and every change is written to an audit log. Forms are protected by rate limiting and bot verification. Uploaded images are re-encoded on the server, so an uploaded file is never served back as it arrived.
6. Your rights
Under KVKK article 11 you may ask whether we process your data; request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to, in Türkiye or abroad; have it corrected if incomplete or wrong; ask for it to be erased or destroyed; require that such action be communicated to those it was transferred to; object to a decision produced solely by automated analysis; and claim compensation for damage.
Write to info@theintegralinstitute.com or to Bayar Caddesi No:42 D:18, Kozyatağı, Kadıköy 34742, İstanbul, Türkiye. We answer within 30 days, free of charge.
7. Changes
When this policy changes, the new version is published here and the date above is updated. Material changes are notified to members by email.
