Last updated: 29 June 2026
1. Who is responsible for your data
The data controller is Lexin Legal Law & Consultancy (“Lexin Legal”, “we”, “us”).
- Address: Gürsel Mah. Karataş Sk., SNS Plaza, Kat 3 No 6, 34413 Kağıthane, Istanbul, Türkiye
- Email: info@lexinlegal.com
- Phone: +90 850 242 4043 · WhatsApp: +90 850 242 4043
2. What this notice covers
This notice explains how we handle personal data submitted through this website — mainly our contact form and our careers application forms — and data collected automatically when you browse. It does not replace the separate engagement terms and confidentiality that apply once you become a client; those are agreed with you directly.
3. What we collect
Information you give us
- Contact form: your name, email address, the subject of your matter and the message you write.
- Careers forms: your name, email, phone, education / bar-registration / experience details, your stated salary expectation, the language levels you select, an optional CV file, and any note you add.
- Direct messages: anything you choose to send us by email or WhatsApp.
Information collected automatically
Our hosting provider keeps standard server logs (such as IP address and basic request data) for security and to keep the site running. We use Google Analytics (provided by Google) to understand how visitors use the site and to improve it. Google Analytics sets cookies and collects usage data such as the pages you view, your approximate location (country/region) and your device type. See section 9 on cookies, which also explains how to opt out.
When you use our interactive legal tools, we may store anonymous, non-identifying usage data — which tool you used, your language, a coarse country, the categorical answers you select and the result level — to understand common questions and improve the tools. This contains no name, email, phone, IP address or free text, and cannot be used to identify you.
4. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR / KVKK) |
|---|---|
| To answer your enquiry and give you the information or service you ask for | Steps taken at your request before entering a contract; our legitimate interest in responding (GDPR Art. 6(1)(b)/(f)); KVKK Art. 5 — necessity for a contract / legitimate interest, together with your explicit consent for the form submission |
| To assess a job or internship application | Steps prior to a possible employment relationship and our legitimate interest in recruitment (GDPR Art. 6(1)(b)/(f)); KVKK Art. 5, with your explicit consent |
| To keep the website secure and operational | Our legitimate interest in security (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| To meet legal, regulatory and bar obligations | Compliance with a legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
When you tick the consent box on a form, you give explicit consent for us to process the data in that submission for the purpose above. You can withdraw that consent at any time (section 7); withdrawal does not affect processing already carried out.
5. Who can see it, and how it is processed
Form submissions are delivered straight to our firm email inbox. We do not sell your data and we do not share it for anyone else’s marketing. The only third parties that process data on our behalf are the service providers that run the website and deliver these emails:
- Cloudflare — hosting and the form-handling function;
- Resend — secure delivery of the form email to our inbox;
- Google Workspace — the email account where your message is received;
- Google Analytics — provided by Google; measures, in aggregate, how visitors use the site so we can improve it. It uses cookies and processes usage data on our behalf, and Google operates servers outside Türkiye.
- A US-based AI service (Poe) — reads only the free-text description of your matter (never your name, email or phone) to tag the enquiry by legal topic for our internal triage. Because this provider is in the United States, this step transfers that description outside Türkiye.
We may also disclose data where the law, a court or a competent authority requires it.
6. International transfers
Some of the providers above operate servers outside Türkiye and the EEA. Where personal data is transferred abroad, we rely on appropriate safeguards (such as the providers’ contractual data-protection commitments) and, where required by KVKK, on your explicit consent. You can ask us for more detail at any time.
7. How long we keep it
- Enquiries: kept for as long as needed to deal with your matter and, where relevant, for the period required by law or professional rules, then deleted or anonymised.
- Job / internship applications: kept for up to 12 months so we can consider you for suitable openings, then deleted — unless you ask us to remove them sooner, or agree to a longer period.
8. Your rights
Under the GDPR and KVKK (Art. 11) you can ask us to:
- confirm whether we hold your data and obtain a copy of it;
- learn the purpose of processing and whether it is used accordingly;
- correct inaccurate or incomplete data, or have it deleted;
- restrict or object to processing, and request data portability;
- withdraw your consent at any time;
- know any third parties to whom data has been transferred;
- request that the consequences of unlawful processing be remedied.
To exercise any of these, email info@lexinlegal.com. We respond within the periods set by the applicable law. If you believe your rights have been breached, you may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu) or, in the EEA/UK, to your local data-protection authority.
9. Cookies
This website uses Google Analytics cookies to measure traffic and improve the site; apart from those, we use only cookies strictly necessary to serve and secure the pages. Web fonts are self-hosted on this site, so requesting a font does not send your IP address to any third party. You can opt out of Google Analytics by blocking analytics cookies and scripts in your browser settings (or by installing Google’s opt-out add-on), without losing access to the content.
We use Google’s Consent Mode: until you choose “Accept” on the cookie banner, no analytics cookie is set and Google Analytics does not receive any signal that could identify you or your device. If you decline or do not respond, Google may still receive a basic, cookie-less and anonymous ping — for example, that a page on this site was viewed — which cannot be tied back to an identified or identifiable person and which we use only to see overall traffic trends, not to track you individually. Because that signal does not relate to an identified or identifiable natural person, it falls outside the definition of “personal data” under KVKK Art. 3(1)(d) and does not require your consent; choosing “Accept” additionally lets Google set the full analytics cookie described above, and choosing “Decline” removes any such cookie already set on your device.
Separately from Google Analytics, we count how often the contact links on this site are actually used. When you click a WhatsApp, telephone or e-mail link, or when a form on this site is sent successfully, your browser also requests a short address on this same domain that records only three things: which kind of link it was (WhatsApp, telephone, e-mail or form), where on the page it sat, and which page you were on. Nothing is written to your device — no cookie, no local storage — and the request carries no name, no e-mail address, no telephone number and no message text. It is not tied to the cookie banner, because there is nothing in it that could identify you or your device. Your IP address is not stored by us for this count; our hosting provider sees it in its own standard server logs, as it does for every page you open (see section 3). We use these totals for one purpose: to see which pages and which contact routes people actually use, so we can make them easier to find.
10. Security
Form data is sent over an encrypted connection (HTTPS) and is accessible only to the lawyers and staff who need it. No method of transmission is completely secure, so please avoid sending highly sensitive details until we have agreed a secure way to receive them.
11. Children
This website and its forms are intended for adults. We do not knowingly collect data from children.
12. Changes to this notice
We may update this notice as our practices or the law change. The “last updated” date above shows the current version.