Privacy Notice

Last updated: 3 November 2026

Data controller

This notice is provided by Veralisted (Teyobi) under the Turkish Personal Data Protection Law No. 6698 and, where it applies, the GDPR. Contact: [email protected]

Google Analytics

To see in aggregate how the site is used, we run Google Analytics in cookieless mode: no cookie is written to your browser, nothing is used for advertising and Google does not store IP addresses. Data such as page and device information is sent to Google and may be processed abroad.

Invitations

If a member or our team invited you to Veralisted, your email address and any company name are processed to send the invitation. If you do not sign up, this data is deleted after 90 days. You can opt out of invitations through the link in the email; for this we keep only an irreversible hash of your address.

Data we process

The pre-registration form collects: company name or, if you register as a person, your full name, an optional logo or photo, city, category, email and, optionally, phone and website. Without a website, the tax certificate or trade registry record you upload is also processed; these may contain personal data such as an ID number, which you may cover. The submission date and language are also stored.

Purpose and legal basis

We use this data only to contact you about adding your company to Veralisted, to verify your company and to assess your request. Documents are checked automatically with AI against the company name; negative or unclear results are reviewed by a person. The legal basis is that it is necessary to fulfil your request, and our legitimate interest. Submitting the form does not publish your details, and they are not used for marketing messages.

Transfers

Site traffic passes through Cloudflare for security and content delivery, so data may pass through infrastructure outside Türkiye. Uploaded documents are sent to Google's Gemini service abroad for the automatic check, and documents that need review are stored with Microsoft Azure. Your details are not sold, and are not shared with third parties except where the law requires.

Retention

Documents that pass the automatic check are not kept; only the result (document type and company name) is stored. The tax number and approval code on a document, and documents that need review, are deleted when the review is finished. Pre-registrations are deleted after the company has been added, or within 24 months at the latest. You can ask for earlier deletion at any time.

Messages to companies

When you message a company, your name, contact details and message are passed to that company's panel so you can get in touch. Messages are kept until the company deletes them, for 24 months at most.

Reports

When you report a company, your report and any email you give are processed only by the Veralisted team to look into it, and are not shared with the company. Reports are kept for 24 months at most after they are closed.

Visit statistics

To show companies their visit numbers we measure without cookies. Your IP address is not stored; we only keep a one-way summary that changes every day, used to count unique visitors within a day, plus the type of source, device type and country. To improve the site we also count the pages viewed and the search terms typed in the same way, so please don't type personal information into the search box. This data is kept for 13 months at most.

Quote requests

When you request a quote we take your name, email, phone if given, and your request. After you verify your email and confirm, these are shared with up to 5 companies in that field, which contact you using them. Unconfirmed requests are deleted within 7 days, and all others within 12 months at most.

Member accounts

If you create an account, we keep your email address, the date of your consent, and the firms you recommend and save. Firms only see the totals, not who recommended them. Emails are sent through Google's infrastructure. If you sign in with Google, we only receive your email address and account identifier from Google. Accounts with no password set are deleted within 7 days; you can delete your account at any time from My account.

Cookies

Only strictly necessary cookies are used, for form security and the member or company panel session. No advertising or analytics cookies are used.

Your rights

You have the right to access your data, ask for it to be corrected or deleted, and object to its processing. To make a request, write to [email protected].