Get in Touch

Bosphorus Pharma

Privacy Policy

Last updated:

This Privacy Policy explains how BOSPHORUS PHARMA DIŞ TİCARET LİMİTED ŞİRKETİ ("Bosphorus Pharma", "we", "us") processes personal data through this website, bospharma.com. It is complemented by our KVKK Information Notice, which sets out the information required under Turkish Personal Data Protection Law No. 6698 ("KVKK").

1. Who we are

Bosphorus Pharma is the data controller for the personal data described in this policy.

Company
BOSPHORUS PHARMA DIŞ TİCARET LİMİTED ŞİRKETİ
Registered address
HUZUR MAH. AZERBAYCAN CAD. SKYLAND A NO: 4 A İÇ KAPI NO: 211 SARIYER/ İSTANBUL 34485

2. At a glance

  • We only collect personal data that you choose to send us through the Contact form or the Product Sourcing Request form.
  • The website does not use analytics, advertising or marketing trackers, and does not set cookies or use browser storage.
  • The website application does not store your submissions or uploaded documents in a database or on disk. Submissions are delivered to our business mailbox by email.
  • We do not sell personal data and do not use it for marketing or newsletters.

3. What we collect and why

3.1 Contact form ("Get in Touch" / "Contact Us")

When you send a message, we receive your company name, your email address and your message. We use this information to read and respond to your enquiry, including general partnership and regional distribution enquiries.

3.2 Product Sourcing Request

When you submit a Product Sourcing Request, we receive the information you enter, which may include:

  • Contact and company details: company name, full name / contact person, business email address, phone or WhatsApp number, company website, role or job title and department, and country or region.
  • Request details: the product or material, category, dosage form, strength, pack size, specification or grade, manufacturer preference, quantity and unit, target unit price, requested quality standards or documentation, technical and regulatory notes, destination, delivery timeline, Incoterm, payment terms and order-frequency preferences, and any additional notes.
  • Your acknowledgement that you have read this Privacy Policy and our KVKK Information Notice and accepted the Terms of Sourcing, together with the version of that wording shown to you.

We use this information to review your request, assess whether it can be sourced, and follow up with you where appropriate. Most request details relate to products rather than to individuals; the personal data involved is primarily your name and business contact details.

3.3 Uploaded documents

You may attach up to five files (PDF, DOCX, XLSX, JPEG, PNG or WebP; 10 MB in total), such as product specifications or certificates. We use them only to evaluate your request. Please do not upload documents containing personal data that is not needed for the request, and in particular no health data or other sensitive personal data.

3.4 Security and anti-abuse processing

To protect the forms from automated abuse, the website:

  • uses Cloudflare Turnstile, a bot-protection service. When you open or use a form, your browser loads the Turnstile widget from Cloudflare, which assesses the interaction and issues a token. Our server sends that token and our Turnstile key to Cloudflare to verify it; we do not send your IP address to Cloudflare as part of this verification;
  • applies a rate limit to form submissions. For this purpose our server derives a one-way (hashed) value from your IP address and holds it in memory for up to ten minutes; the IP address itself is not stored or logged by the application;
  • checks that submissions come from this website, uses a hidden field and a form timing check to detect automated submissions, and checks the type and content of uploaded files.

3.5 Browsing the website

You can browse the website without providing any personal data. As with any website, our hosting provider necessarily receives technical connection data (such as your IP address, browser information, the page requested and the time of the request) in order to deliver pages to you and to operate and secure its service. We do not use this data for analytics or profiling.

We rely on the following legal grounds, as applicable:

  • Steps before or for a contract — to review and respond to a Product Sourcing Request and to take steps you have asked for before any business relationship is established.
  • Legitimate interests — to respond to enquiries sent through the Contact form, and to keep the website and its forms secure and free from abuse, provided this does not override your fundamental rights and freedoms.
  • Legal obligations — where we are required by law to keep or disclose information.
  • Establishing, exercising or defending legal claims, where necessary.

We do not rely on your consent for the processing described above. Ticking the acknowledgement on the Product Sourcing form confirms that you have read our notices and accepted the Terms of Sourcing; it is not a request for consent to data processing.

5. How your submission is handled and where it is kept

The website application processes each submission in memory only for as long as it takes to check and deliver it. It does not save submissions or uploaded files in a database, on disk or in any file storage.

Each valid submission is sent as an email notification, via our transactional email provider, to our business mailbox info@bospharma.com. The notification contains the information you entered and any attached documents, and uses the email address you provided as its reply address so that we can answer you directly. Copies of the submission and attachments therefore exist in our mailbox and may also be held temporarily in the operational systems of the service providers involved in delivering and hosting that email, in line with their own terms.

6. Service providers

We use the following service providers, who process data on our behalf to provide their services:

  • Render — hosting and running the website and its form handling.
  • Cloudflare — Turnstile bot protection for the forms.
  • Resend — delivery of form notifications by email.
  • Bluehost — our domain, DNS and the business email service forinfo@bospharma.com.

We may also disclose information to public authorities where we are legally required to do so. We do not share your personal data with any other third party for their own purposes.

7. International processing

Some of our service providers operate infrastructure outside Türkiye, so personal data may be processed abroad. Where personal data is transferred abroad, we do so in accordance with Article 9 of KVKK and other applicable data protection law.

8. How long we keep information

The website application itself does not retain submissions. Information that reaches us by email is kept for as long as necessary to handle your enquiry or request and any business relationship that results from it, and thereafter only for as long as required by applicable law (for example, commercial and tax record-keeping obligations) or needed to establish, exercise or defend legal claims. It is then deleted, destroyed or anonymised. Hashed values used for rate limiting are held in memory for up to ten minutes.

9. Cookies, analytics and tracking

The website does not set cookies, does not use localStorage, sessionStorage or similar browser storage, and does not use analytics, advertising or marketing tracking technologies. Fonts and images are served from our own website. The Turnstile widget is provided by Cloudflare in its own frame when you use a form; Cloudflare's own privacy information applies to that service.

10. Application logs

To operate the service, the application records short technical events — for example that a submission was received, rejected by the bot check, or delivered, and for sourcing requests which form layout was used and how many files were attached. These events do not contain your name, email address, message, request details, file names or IP address. Our hosting provider also keeps its own operational logs of web requests as part of running its platform.

11. Security

The website is served over HTTPS and applies input validation, file-type and content checks, size limits, rate limiting, bot protection and security headers. No method of transmission or storage is completely secure, but we take appropriate measures to protect the information you send us.

12. Automated decisions

We do not make decisions about you based solely on automated processing, and we do not profile visitors.

13. Your rights

Under Article 11 of KVKK you may, among other things, ask whether we process your personal data, request information about it, ask for it to be corrected or deleted, and learn to whom it has been transferred. The full list of rights and how to apply is set out in our KVKK Information Notice. You may also have rights under other data protection laws that apply to you.

To exercise your rights or ask a question about this policy, contact us at info@bospharma.com or write to the registered address shown in section 1.

14. Changes to this policy

We may update this policy when our website or our processing changes. The date of the current version is shown at the top of this page.

Get in Touch

Get In Touch

Let’s Work Together

We use these details to respond to your message. See our Privacy Policy (opens in a new tab) and KVKK Information Notice (opens in a new tab).