Privacy Policy

Last updated: 14 September 2026  ·  Effective date: 14 September 2026

This Privacy Policy explains how Levanta Digital Infrastructure Ltd. ("Levanta", "we", "us", or "our") collects, uses, stores, and protects personal data when you visit our website at levanta-io.com or engage with our services.

We are committed to safeguarding your privacy and handling your personal data in a transparent, lawful, and responsible manner. This Policy is written in compliance with the EU General Data Protection Regulation (GDPR), the Turkish Law on the Protection of Personal Data (KVKK), and the Saudi Personal Data Protection Law (PDPL) as applicable.

1. Who We Are (Data Controller)

Levanta Digital Infrastructure Ltd. is the data controller responsible for the personal data processed in connection with this website and our professional services.

  • Email: privacy@levanta-io.com
  • Operating Markets: Istanbul (Turkey) · Amman (Jordan) · The Gulf (UAE, Saudi Arabia)

2. What Personal Data We Collect

We collect the following categories of personal data:

  • Contact information: name, email address, and any information you voluntarily provide when submitting our contact form or corresponding with us via email.
  • Technical data: IP address, browser type and version, operating system, referring URLs, pages visited, and session duration — collected automatically via server logs or analytics tools.
  • Cookie data: session identifiers and preference settings. See Section 7 for details.
  • Business information: company name, project requirements, and other details you share during the course of a commercial engagement.

We do not collect sensitive personal data (such as health information, racial or ethnic origin, or financial account details) unless explicitly required and consented to in the context of a specific engagement.

3. How We Use Your Personal Data

We process your personal data for the following purposes and on the following legal bases:

  • Responding to enquiries and proposals — Legal basis: Legitimate interest (GDPR Art. 6(1)(f)); Consent (PDPL). We process contact form submissions and email enquiries to assess project fit and respond to your request.
  • Performing a contract or taking pre-contractual steps — Legal basis: Contract (GDPR Art. 6(1)(b)). Where you engage our services, we process your data to deliver the agreed work.
  • Operating and improving this website — Legal basis: Legitimate interest. We use technical data to monitor site performance, security, and usability.
  • Legal compliance — Legal basis: Legal obligation (GDPR Art. 6(1)(c)). We may retain certain records to comply with tax, accounting, or regulatory requirements.

We do not use your personal data for automated decision-making or profiling.

4. How Long We Retain Your Data

  • Contact enquiries: Retained for up to 24 months from the date of last communication, unless a commercial engagement has commenced.
  • Client engagement data: Retained for 5 years from the date the engagement concludes, in accordance with standard business record-keeping requirements.
  • Technical / server log data: Retained for a maximum of 90 days, then deleted or anonymised.
  • Cookie data: Varies by cookie type; see Section 7.

When data is no longer required, it is securely deleted or anonymised.

5. Who We Share Your Data With

Levanta does not sell, rent, or trade your personal data. We may share your data with:

  • Service providers: Third-party vendors engaged to support our operations (e.g., email hosting, analytics platforms, project management tools). All third-party processors are bound by appropriate data processing agreements and are required to handle your data securely and only as instructed.
  • Legal authorities: Where required by applicable law, court order, or government authority. We will notify you where legally permitted to do so.

Where we engage sub-processors that may process data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

6. International Data Transfers

Levanta operates across Turkey, Jordan, and the Gulf region. Your data may be stored or processed in Turkey or other countries in which our service providers operate. Where personal data is transferred from the EEA to a third country, we rely on adequacy decisions, Standard Contractual Clauses, or other appropriate transfer mechanisms as required under GDPR Chapter V.

7. Cookies

This website uses essential cookies only. These are strictly necessary for the website to function and cannot be switched off. They are set in response to actions you take, such as setting your language preference or consenting to this Privacy Policy.

We do not use advertising, tracking, or analytics cookies that profile your browsing behaviour or share data with advertising networks.

You can configure your browser to refuse cookies. Please note that disabling essential cookies may affect the functionality of this website.

8. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may ask us to correct inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): You may ask us to delete your data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
  • Right to restriction of processing: You may ask us to restrict processing of your data in certain circumstances.
  • Right to data portability: Where processing is based on consent or contract, you may request a structured copy of your data in a machine-readable format.
  • Right to object: You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact: privacy@levanta-io.com. We will respond within 30 days of receiving a verifiable request.

If you are an EEA resident and believe we have processed your data unlawfully, you have the right to lodge a complaint with your local Data Protection Authority.

9. Security

Levanta implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security reviews.

While we take the security of your data seriously, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of data transmitted to this website.

10. Children's Privacy

This website and our services are directed exclusively at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

11. Third-Party Links

This website may contain links to external websites not operated by Levanta. We are not responsible for the privacy practices or content of those sites and recommend reviewing their respective privacy policies before sharing any personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Material changes will be indicated by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.

13. Contact and Complaints

For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact our privacy team:

  • Email: privacy@levanta-io.com
  • Response time: Within 30 calendar days of receipt
  • Operating Markets: Istanbul · Amman · The Gulf