Legal
Privacy Policy
Last updated: 14 September 2026
This Privacy Policy explains how YılPlat collects, uses and protects personal data when you visit our websites (yilplat.com and yilplat.co.uk), contact us, submit an enquiry form, respond to our advertising on Facebook or Instagram, or communicate with us by email, telephone or WhatsApp.
Please read the general sections below, then the section that applies to you: United Kingdom (UK GDPR) or Türkiye (KVKK).
1Who we are
YılPlat manufactures and supplies patented rotating vehicle display platforms (turntables) for automotive showrooms, events and private collections.
Data controller
YILPLAT PLATFORM SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Yukarı Mah. Hürriyet Cad. No: 9 / İç Kapı No: E
Akçakoca · Düzce · Türkiye
Tax ID (VKN): 979 127 59 39 · Akçakoca Tax Office
The same company is the data controller for both markets. We do not operate a separate UK-registered entity; yilplat.co.uk is a sales and marketing website operated by the company named above.
2The personal data we collect
You give us:
- Name and job role
- Business or showroom name
- Email address
- Telephone or WhatsApp number
- Details of your enquiry — for example your showroom location, the vehicle you wish to display, and any photographs of your premises you choose to send us
We collect automatically:
- Website usage data (pages viewed, device and browser type, approximate location derived from IP address)
- Advertising interaction data — for example whether you viewed or clicked one of our Facebook or Instagram ads, or opened one of our lead forms
We do not collect payment card details through our websites or lead forms, we do not knowingly collect data from anyone under 18, and we do not intentionally collect special category data.
3How we collect it
- Enquiry and lead forms, including instant lead forms completed on Facebook or Instagram. Where you complete a form on those platforms, Meta passes the details you submitted to us in accordance with its terms.
- Direct contact by email, telephone or WhatsApp.
- Publicly available business information, such as a dealership's published business contact details, used to introduce our products to relevant businesses.
- Cookies and similar technologies on our websites (see section 6).
4Why we use it, and our legal basis
| Purpose | UK GDPR basis | KVKK basis |
|---|---|---|
| Responding to your enquiry and preparing a quotation | Steps prior to entering a contract / legitimate interests | Contract necessity / legitimate interests |
| Sending information you asked for (brochures, specifications, demo videos, fit checks) | Legitimate interests / consent | Legitimate interests / explicit consent |
| Contacting you by telephone, email or WhatsApp about your enquiry | Legitimate interests | Legitimate interests |
| Business-to-business marketing about relevant products | Legitimate interests, or consent where required | Explicit consent where required |
| Measuring and improving our advertising and websites | Legitimate interests / consent for non-essential cookies | Explicit consent for non-essential cookies |
| Keeping business records and meeting legal obligations | Legal obligation / legitimate interests | Legal obligation |
Where we rely on legitimate interests, that interest is promoting and selling our products to businesses that are likely to need them. You can object or opt out at any time — every marketing email contains an unsubscribe link, and you can reply “STOP” to a WhatsApp message or email us.
5Marketing communications
We may send you information about our products where you have asked for it, where you are an existing or prospective business customer, or where you have consented. You can withdraw consent or opt out at any time using the unsubscribe link, by replying to any message, or by emailing us. Opting out of marketing does not stop service messages relating to an order you have placed.
6Cookies, analytics and advertising
Essential storage only, without asking: the cookie that remembers your language (yp_lang, 1 year) and the one that records your cookie choice (yp_consent, 180 days). Nothing else is set until you choose.
With your consent we use the following measurement tools. You choose in the cookie banner and can change your mind at any time via "Cookie settings" in the footer.
- Analytics — Google Analytics 4 (Google Ireland Ltd): visits, country, device, pages viewed and interactions. Cookies _ga and _ga_* (up to 2 years). Google Analytics does not identify you by name; we learn who you are only if you contact us.
- Advertising measurement — Google Ads conversion tracking (Google Ireland Ltd): whether an enquiry followed one of our ads. Cookies _gcl_au and _gcl_aw (90 days). When you submit a form, a hashed (SHA-256) version of your e-mail address and telephone number may be sent to Google so that the enquiry can be matched to the ad ("enhanced conversions").
- Advertising measurement — Meta Pixel (Meta Platforms Ireland Ltd): whether a visit or enquiry followed one of our Facebook or Instagram ads. Cookies _fbp and _fbc (90 days). The pixel is loaded only after you accept advertising cookies.
If you decline, the Google tag runs in consent mode: it sets no cookies and sends only aggregated, cookieless signals that cannot identify you. You can also control cookies in your browser and advertising preferences in your Google, Facebook and Instagram account settings.
7Who we share it with
We do not sell your personal data. We share it only with:
- Service providers acting on our instructions — website hosting (Vercel Inc.), e-mail delivery of your enquiry (Resend), measurement and advertising (Google, Meta — only with your consent, see section 6), CRM and telephony providers and messaging platforms
- Our group companies, where needed to fulfil your enquiry (for example manufacturing and technical teams)
- Professional advisers (legal, accounting, insurance)
- Authorities or regulators, where required by law
All providers are bound by contract to protect your data and to use it only for the purposes we specify.
8International transfers
We operate from Türkiye and sell into the United Kingdom and other markets, and some of our service providers are located outside your country. Where personal data is transferred internationally, we put appropriate safeguards in place — for UK data, mechanisms such as UK adequacy regulations or the International Data Transfer Agreement / Addendum; for data subject to the KVKK, the transfer mechanisms permitted under that law. Details are available on request.
9How long we keep it
We keep enquiry data for as long as needed to deal with your enquiry and for our legitimate business records — normally up to 3 years from your last contact with us — after which it is deleted or anonymised. Where we are required to keep records for tax, accounting or legal reasons, we retain them for the period required by law.
10Security
We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, and restricting access to staff who need it. No transmission over the internet can be guaranteed completely secure, but we take reasonable steps to protect your information.
11If you are in the United Kingdom (UK GDPR)
You have the right to:
- Access the personal data we hold about you
- Rectification of inaccurate or incomplete data
- Erasure of your data in certain circumstances
- Restriction of processing in certain circumstances
- Objection to processing based on legitimate interests, and to direct marketing at any time
- Data portability — receiving your data in a machine-readable format
- Withdrawal of consent at any time, where processing is based on consent
- No solely automated decisions with legal or similarly significant effects
To exercise any of these rights, email sales@yilplat.com. We will respond within one month.
If you are unhappy with how we have handled your data, you may complain to the Information Commissioner’s Office (ICO) — ico.org.uk · 0303 123 1113.
12If you are in Türkiye (KVKK)
Personal data of individuals in Türkiye is processed under Law No. 6698 on the Protection of Personal Data (“KVKK”) by the data controller named in section 1.
Your rights under Article 11 of the KVKK:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether the data is used in line with that purpose
- Know the third parties to whom the data is transferred, in Türkiye or abroad
- Request correction of incomplete or inaccurate data
- Request erasure or destruction under the conditions set out in Article 7 of the KVKK
- Request that correction, erasure and destruction be notified to third parties to whom the data was transferred
- Object to an adverse result arising from analysis solely by automated systems
- Claim compensation for damage caused by unlawful processing
Applications: you may submit your requests to sales@yilplat.com or to the postal address above, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application will be concluded within 30 days at the latest.
If your application is rejected, you may lodge a complaint with the Turkish Personal Data Protection Board — kvkk.gov.tr
13Changes to this policy
We may update this policy from time to time. The current version is always published at yilplat.com/privacy and yilplat.co.uk/privacy, with the date of the latest revision shown at the top.
14Contact
Questions about this policy or your personal data: