1. Objective

This policy clearly explains the privacy approach and technical data flow of the online legal consultancy system on online.helinmentese.com to the user. For mandatory disclosure under the Personal Data Protection Law (KVKK), the KVKK Disclosure Statement is used as the basis.

2. System and Data Flow

3. Attorney-Clearing Secrecy and Confidentiality

Information obtained during consultations is handled under the obligation of confidentiality within the framework of Article 36 of the Attorneys' Law and professional rules. The office processes information regarding the client's legal problem only to the extent necessary for the service and will not share it with unauthorized third parties.

4. Meeting Platforms

Zoom, Google Meet, and WhatsApp are third-party platforms independent of the office. The platform used is determined based on the appointment. These providers may process account, device, traffic, and technical usage data according to their own policies. Therefore, it is recommended not to share the meeting link with third parties and to hold the meeting in a private environment.

5. Audio/Video Recording

The office does not record audio or video of online consultation sessions. Clients are also required not to record, publish, or share the session with third parties without explicit information and a legally valid basis.

6. Card Security

Card information is transmitted to Moka for payment. Card information is not intended to be permanently stored in WooCommerce order records, emails, or client profiles. Card information should never be sent via email, WhatsApp, or Zoom/Meet chat.

7. Data Minimization

The appointment form should not require the uploading of all details of the legal case or the entire file. If documents are needed prior to the appointment, only those documents necessary for the specific legal service should be requested. Unnecessary data belonging to third parties should be redacted as much as possible.

8. Information Security

The site runs over HTTPS/TLS. Access permissions are restricted for WordPress, WooCommerce, and related plugins; updates, backups, and necessary security checks are performed regularly. Strong authentication methods are intended for administrator accounts.

9. International Services

The use of Google, Meta/WhatsApp, Zoom, and other global services may lead to the processing or transfer of personal data abroad, depending on the technical nature of the service. When data transfer abroad occurs, the current regulations under Article 9 of the Personal Data Protection Law (KVKK) are taken into account.