Privacy Policy

1. Data Controller

This privacy policy covers personal data collected through karmiglobal.com and through social media lead forms operated on behalf of Karmi Global Investment, including Meta (Facebook and Instagram) instant forms.

Karmi Global Investment acts as the data controller. Contact: karmi@karmiglobal.com — +90 555 437 05 55 — Atatürk Mah., Ataşehir Bulvarı / Ertuğrul, Gazi Sokak / 34758 Ataşehir, İstanbul

2. Personal Data We Collect

We collect only what we need in order to provide our advisory services:

• Identity and contact data: full name, email address, phone number.
• Enquiry data: the country/market you are interested in, budget range, appointment preference, and your message.
• Usage and security data: IP address, browser and device information, pages visited, and referral source (via cookies and measurement tools).

3. How We Collect It

• Contact and presentation booking forms on this website.
• Meta (Facebook/Instagram) Lead Ads instant forms — when you submit the form, your details are sent directly to us.
• Communication you initiate via WhatsApp, phone, or email.
• Automatically through cookies and similar technologies (Google Analytics, Meta Pixel).

4. Purposes and Legal Bases

• Responding to your enquiry and running the advisory or presentation appointment process — performance of a contract and legitimate interests.
• Presenting suitable real estate investment options and managing the process — legitimate interests.
• Sending campaign, promotional, and marketing communications where you have opted in — consent.
• Measuring site performance and advertising effectiveness — consent (cookie banner) or legitimate interests.
• Meeting our legal and regulatory obligations — legal obligation.

5. Sharing Your Data

We never sell your personal data. It is shared only as far as necessary to deliver the service, and always under confidentiality obligations, with:

• Our CRM provider, Zoho — to record and follow up on your enquiry.
• Our hosting and database infrastructure providers (Vercel, Supabase).
• Measurement and advertising providers (Google, Meta) — within the scope of our cookie policy.
• Our partners in the country you are interested in, including legal and development partners — only to progress your enquiry and with your knowledge.
• Competent public authorities — where required by law.

6. International Transfers

Our infrastructure and CRM providers may host data outside your country of residence. Where that happens, transfers are made under appropriate safeguards and contractual commitments with those providers.

7. Retention

We retain your data for as long as the processing purpose requires and for the statutory limitation periods that apply. Once the purpose ends, data is deleted, destroyed, or anonymised.

8. Security

Data is transmitted over an encrypted connection (HTTPS) and access is limited to authorised personnel. Our admin panel is protected by authentication. That said, no transmission over the internet can be guaranteed to be 100% secure.

9. Cookies and Measurement

Alongside strictly necessary cookies, we use Google Analytics (GA4) to measure usage and Meta Pixel to measure advertising performance. You can block or delete cookies in your browser settings; some parts of the site may then not work as expected.

10. Your Rights

Subject to applicable data protection law, you have the right to:

• Learn whether your personal data is being processed and request information about it.
• Learn the purpose of processing and whether the data is used accordingly.
• Know the third parties, domestic or international, to whom your data has been transferred.
• Request correction of incomplete or inaccurate data.
• Request erasure or destruction of your data where the conditions are met.
• Claim compensation for damage arising from unlawful processing.

11. Marketing Opt-Out

If you no longer wish to receive marketing messages, use the unsubscribe link in the message or email karmi@karmiglobal.com with the subject "Unsubscribe". We action such requests promptly.

12. Children's Data

Our services are not directed at people under 18 and we do not knowingly collect their personal data. If we become aware that we hold such data, we delete it without delay.

13. Changes to This Policy

We may update this policy to reflect changes in legislation or in our services. The current version is always published on this page, and the date at the top shows when it was last updated.