How your information
is handled.
This notice covers the Beyin Spektrumu website, book sales, reader bonuses, programme applications and the practitioner certification process.
1. Purpose of this notice
This notice explains how information is handled when you use www.beyinspektrumu.com and its related pages, contact Beyin Spektrumu, request reader bonuses, apply to a product or programme, or take part in a purchase or certification process.
It sets the general privacy approach that covers R.I.S. — the Relational Impact Spectrum — and, once they become active, the DEPTH, ZYY and other Beyin Spektrumu programmes. Only the information needed for the service you actually use is processed.
2. Information we collect
2.1. Website and contact information
- First name, surname, email address, phone number and contact preference;
- Messages, requests and support records sent through the contact form, email, phone or other channels;
- IP address, browser and device type, access time, error and security logs;
- Cookie preferences and, where you have allowed them, advertising and performance measurement data.
2.2. Sales and payment information
- The product or programme purchased, order number, transaction and delivery date;
- Information required for invoicing and delivery;
- Transaction records made through Shopier, or payment confirmation details for bank transfers;
- Withdrawal, refund, delivery and customer support correspondence.
For card payments made through Shopier, Beyin Spektrumu does not see or store your card number, expiry date or security code. Card data is processed by the payment provider's own infrastructure.
2.3. Certification and practitioner information
- Phone number and email address;
- Diploma, professional certificate, occupation and curriculum vitae;
- Application answers, examination answers, scores, assessment notes and results;
- Photographs, video or audio recordings — only where the assessment method requires them and only after separate advance notice;
- Where necessary, anonymised case text that does not identify the client;
- If the practitioner separately requests a directory listing: name, photograph, city, occupation or title, profile link, contact preference, certificate or licence number and active status.
National identity numbers and dates of birth are not requested as a rule during certification applications. Where identity verification, invoicing or an explicit legal obligation makes it necessary, only the required information is processed, on a limited basis, with its purpose and legal ground explained separately. Copies of identity documents are not retained unless there is a mandatory and lawful need. In case studies we do not ask for a client's name, phone number, email, full address or any detail that would make them recognisable.
3. How we use information
- To operate the website, detect technical faults and maintain security;
- To answer questions, provide support and manage requests;
- To handle orders, payments, invoices, access, delivery, refunds and withdrawals;
- To assess applications and run examination and qualification processes;
- To record and verify certificate and practitioner licence status;
- To publish a profile in the approved practitioner directory, at the person's own request;
- Where permitted, to send campaign communications and measure advertising performance with tools such as Meta Pixel;
- To prevent fraud, unauthorised sharing of materials, examination security breaches and other misuse;
- To meet legal obligations and protect our rights.
If we ever need to use information for a new purpose that is incompatible with the one it was collected for, we will inform you first and, where the law requires it, ask for your permission separately.
4. Service providers
We rely on certain technical and commercial providers in order to deliver the service. They receive only the information their task requires:
| Provider / type | Purpose | Information shared |
|---|---|---|
| Vercel | Website hosting and technical delivery | IP, device, access and technical log data |
| Shopier | Order and payment processing | Order, customer, payment and delivery data |
| Bank / wire transfer | Payment confirmation | Sender, amount, reference and transaction data |
| systeme.io | Forms, email and automation | Name, email, form answers and contact records |
| Supabase | Storage of form submissions and application documents | Form answers, contact details and uploaded documents |
| Meta Pixel | Advertising and conversion measurement, where permitted | Cookie and device identifiers, page and conversion events |
| Professional advisers | Accounting, legal, technical support and security | Limited records needed for the service |
In addition, information may be shared with courts, tax authorities, law enforcement and other bodies legally entitled to request it — but only where there is a legal obligation or a valid request. Personal data is never sold.
5. International transfers
Some providers, including Vercel, Supabase, systeme.io and Meta, may be established outside Türkiye or process data on systems located abroad. Any such transfer is carried out in line with the applicable provisions of Turkish Data Protection Law No. 6698 and valid international transfer mechanisms. Non-essential advertising and analytics tools are not run before the required preference and consent mechanism is in place.
If you are in the European Economic Area or the United Kingdom, transfers of your data to Türkiye and to our providers are made on the basis of appropriate safeguards, and you keep the rights described in section 12.
6. Cookies and similar technologies
The site may use strictly necessary cookies to provide core functionality and security. Non-essential cookies used for advertising, performance and measurement depend on your choice. You can change your preferences or withdraw consent from the cookie panel at any time. Cookies can also be deleted through your browser settings, although blocking strictly necessary cookies may affect some site functions.
The name, provider, purpose and storage period of each cookie is set out in the separately published Cookie Policy.
7. Marketing messages
Electronic messages about campaigns, new books, training or programmes are sent only when the necessary legal conditions are met. Marketing consent is never a condition of buying a product or joining the certification process. You can stop marketing messages using the unsubscribe link in any message, or by writing to destek@beyinspektrumu.com. Service, order, security and contractual notices are not marketing messages and may be sent where necessary.
8. Confidentiality in certification case studies
Candidates must not disclose the identity of third parties in case or coursework texts. Names are replaced with pseudonyms; contact details, full addresses, exact dates, institution names and distinctive details that would make a person recognisable are removed. Texts that are not sufficiently anonymised may be rejected and their secure deletion requested.
Beyin Spektrumu programmes do not remove a practitioner's own professional confidentiality and data protection responsibilities towards their clients. Practitioners remain separately responsible for their own notice, security and retention arrangements.
9. Practitioner directory
Earning a certificate or practitioner licence does not mean a person's details will automatically be made public. A directory profile is published only on separate request. The person chooses which fields may be published, and may later ask for the profile to be updated or removed. A record of certificate and licence validity may be kept separately, to the extent needed to prevent false or misleading use of titles.
10. Retention and deletion
Information is kept for as long as needed to deliver the service, perform the contract, meet legal obligations, verify certificates and licences, and handle possible disputes. Once the purpose has ended and no other legal retention ground remains, information is deleted, destroyed or anonymised. Where video or audio recordings are made, the shorter retention period announced before recording applies. Marketing data is processed until consent is withdrawn, and non-essential cookies until the published expiry period.
11. How we protect data
- Limiting access by need and authorisation;
- Account and connection security, reasonable password and access controls;
- Encrypted transmission and secure services where required;
- Backups, updates, and monitoring for errors and misuse;
- Confidentiality obligations for staff and service providers;
- Not collecting data that does not need to be processed, and removing expired records.
No method of transmission or storage over the internet can guarantee absolute security. If you notice a security risk, please report it without delay to destek@beyinspektrumu.com.
12. Your rights and choices
You can change your contact preferences, refuse non-essential cookies, update or remove your practitioner directory profile, and request information about your personal data.
Under Article 11 of Turkish Data Protection Law No. 6698 you have the right to learn whether your personal data is being processed; to request information if it has been; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it has been transferred, in Türkiye or abroad; to request correction of incomplete or inaccurate data; to request erasure or destruction where the legal conditions are met; to request that correction, erasure or destruction be notified to third parties the data was transferred to; to object to a result reached solely through automated analysis that works against you; and to claim compensation for loss caused by unlawful processing.
If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time and to lodge a complaint with your local supervisory authority.
Requests can be sent to destek@beyinspektrumu.com or to the business address at the top of this notice. For security, we may ask you to verify your identity and your request. Requests are answered within the period set by law and, as a rule, free of charge.
13. Children's privacy
Beyin Spektrumu certification programmes are aimed at professional adults. We do not knowingly accept certification applications from people under 18. Where books or general information content are purchased by a minor, support from a parent or legal guardian may be required. If you believe a child's information has been collected by mistake, please contact us.
14. Third-party links
The site may link to Shopier, Amazon, social media, DOI and research pages, or other third-party sites. These services have their own privacy rules and data responsibilities. We do not control the content or privacy practices of third parties we link to, and we recommend reviewing their policies before sharing information.
15. Changes to this notice
This notice may be updated when services, providers or legislation change. The current version and date are published on the site. Where a change significantly affects your rights or how data is used, an appropriate additional notice is given and, if required, preferences or consent are collected again.
16. Contact
- Selman Uyanık — Beyin Spektrumu
- Email: destek@beyinspektrumu.com
- Phone: +90 530 123 09 39
- Address: Osmangazi Mah. Mehmet Deniz Kopuz Cad. No: 22, Esenyurt / İstanbul, Türkiye