Data protection notice
Last updated: 1 October 2026
How we handle personal data collected through lyconiq.com, written to meet Article 10 of Turkey's Personal Data Protection Law (KVKK).
Who is responsible
Lyconiq is not yet incorporated. The company is being set up, with incorporation planned in the United Kingdom or the United States. Until that is done, the data controller is the founder who operates Lyconiq.
Once the company exists this notice will be updated with its registered name, address and, where required, its registration details.
Questions about this notice, and requests under Article 11 of the law, go to admin@lyconiq.com.
What we process
This is a marketing and waiting-list site. There are no accounts, no sign-in and no payments. We handle two pieces of data:
- Email address
- When you type it into the waiting-list form
- IP address
- Collected automatically on submission, to prevent abuse
- Visit data
- Page viewed, referrer, country and device type, counted in aggregate
Why, and on what basis
- To email you about new products and launches — your explicit consent, which you can withdraw at any time.
- To rate-limit the form and block automated abuse — our legitimate interest.
- To count in aggregate which pages are read and how often — our legitimate interest.
- To meet legal obligations where the law requires it.
How it is collected
Your email address is collected only through the waiting-list form. Visit data is measured as you browse, partly by automated means.
We measure visits with Vercel Analytics. It sets no cookie and leaves no lasting marker in your browser; to count visitors it derives a digest from your request that changes every day. Your IP address is not stored for this purpose, the data is not tied back to an individual, and nothing follows you between sites.
Who else sees it
We use the following providers. All four run their servers outside Turkey, so your data is transferred abroad.
- Resend
- Holds the mailing list and sends the mail — email address
- Upstash
- Rate limiting — IP address, for a 60-second window
- Cloudflare
- Bot verification (Turnstile) — IP address
- Vercel
- Hosting, server logs and visit measurement (Analytics)
How long we keep it
Your email address is kept until you leave the list, and for no more than six months after that. The IP address held for rate limiting is discarded after 60 seconds. Visit data is held by Vercel only as an aggregate count and cannot be traced back to one visitor.
Your rights
You may ask us to:
- Tell you whether we hold data about you, and what it is
- Explain why we process it and whether it is used for that purpose
- Name the third parties it has been transferred to, at home or abroad
- Correct it where it is incomplete or wrong
- Delete or destroy it, where the law allows
- Pass any correction or deletion on to those third parties
- Object to a decision reached solely by automated analysis
- Compensate you for damage caused by unlawful processing
Making a request
Write to admin@lyconiq.com. We answer within thirty days at the latest.