Privacy notice

Last updated: 1 November 2026

This notice explains, under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), what personal data OneForOne collects, why, and what your rights are.

1. Data controller

Data controller: Abdullah Braiga, self-employed founder of OneForOne, Ankara, Türkiye. You can contact us about anything in this notice at onefforone@gmail.com.

2. What we collect

Booking form: your name, email address, phone number (if you give it), your training goal, your boxing experience, any message you write, your confirmation that you are 18 or over or a parent or guardian, and the language of the page.
When you train with us: session dates, payments and notes on your progress.
Health information: before your first session we ask about injuries and medical conditions so we can coach you safely. This is special category data and we only process it with your explicit consent. You can choose not to share it, although we may then not be able to run a session safely. Please don't include health details in the website form.
Photos and videos: we only photograph or film you, and only publish images of you on this website or social media, with your explicit consent, which you can withdraw at any time. For under 18s, a parent or guardian gives this consent.
Technical data: our website host automatically processes basic technical data, such as your IP address, to deliver pages and protect the site from abuse.

3. How we collect it, why, and our legal grounds

We collect personal data through the website form, email, messages and in person, partly by automated means, and use it:

To reply to your enquiry and arrange sessions: because it is directly necessary to enter into or perform a contract with you (KVKK Art. 5(2)(c)).
To run your lessons and take payment: to perform our contract (Art. 5(2)(c)) and to meet our legal obligations under tax law (Art. 5(2)(ç)).
To keep you safe during training: with your explicit consent for health information (Art. 6).
To protect the website from spam and misuse: our legitimate interests (Art. 5(2)(f)).

We do not sell your data and we do not use it for automated decision-making.

We only share your data with service providers who help us run this website and our business:

Netlify, Inc. (USA) hosts this website and processes booking form submissions, including automatic spam filtering.
Google: we use Gmail for email.

These providers may process data outside Türkiye, including in the United States. We carry out these transfers in line with Article 9 of the KVKK and related regulations. We may also share data with public authorities where the law requires it.

5. How long we keep it

Enquiries that don't lead to a booking: deleted within 12 months.
Client records and payments: kept while you train with us, then for as long as Turkish tax and commercial law requires.
Health information: deleted within 12 months of your last session, unless we need it for a legal claim.

6. Cookies

This website doesn't use cookies or tracking tools and doesn't store anything in your browser.

7. Security

This website is only served over an encrypted (HTTPS) connection. We limit who can see your data and use providers with strong security measures. No method of sending data over the internet is completely secure, but we take reasonable steps to protect it.

8. Your rights

Under Article 11 of the KVKK you have the right to:

find out whether we process your personal data and, if so, request information about it
find out why we process it and whether it is used for that purpose
know the third parties in Türkiye or abroad that it is transferred to
ask us to correct data that is incomplete or wrong
ask us to delete or destroy it, under the conditions in Article 7 of the KVKK
ask us to tell the third parties we shared it with about any correction or deletion
object to a result that goes against you and comes only from automated analysis
claim compensation if you suffer damage because your data was processed unlawfully

To use any of these rights, email onefforone@gmail.com. We'll respond within 30 days at the latest, normally free of charge. If you're not satisfied with our answer, you can complain to the Turkish Personal Data Protection Board (kvkk.gov.tr).

If you are in the European Union or the European Economic Area, you also have your rights under the General Data Protection Regulation (GDPR) and can complain to your local data protection authority.

9. Under 18s

If you are under 18, a parent or guardian must make the booking and give any consent on your behalf.

10. Changes and languages

We may update this notice from time to time. The date at the top shows when it was last changed. This notice is available in Turkish, English, Arabic and German; if there is any difference between them, the Turkish version applies.