Scope
This policy applies to the website at hexacamera.com. When the Hexa camera and the mobile app become available, a separate privacy notice will be published for them and presented inside the app.
What we collect and why
Only the information you give us through two forms:
- Order form: first name, last name, email, phone, delivery address, invoice details, optional club name and note — to process the order, issue the invoice and ship.
- Contact form: name, email, subject, message, optional club name and phone — to get back to you.
You do not need an account to browse the site; the cart stays in your browser and we do not see it. We keep no marketing list; we write to you only about your order or your message.
Forms and email infrastructure
Form submissions are sent over an encrypted connection (HTTPS) and only in the request body; no personal data is written into the address bar. Submissions are received by a small function running on Cloudflare Pages and reach [EMAIL] as an email through the Resend email service; if you placed an order, you also receive a confirmation email.
Resend's servers may be located outside Turkey (USA); the basis for this transfer is explained in the "Who we share it with" section of the Data Protection Notice.
Hosting and server logs
The site is a static site hosted on Cloudflare Pages. For security and performance, Cloudflare keeps short-term technical logs such as IP address, request time and browser details, and may set technical cookies for bot protection. We look at these logs only to troubleshoot; we do not use them to identify you or track your behavior.
Third-party links and content
The site links to WhatsApp, Instagram, YouTube and LinkedIn. When you click these links, that platform's privacy terms apply. If sample match videos are shown through a video platform, that platform may set its own cookies when you start the player.
Match videos
Matches you record with Hexa stay on the device and on your own devices; they do not reach us through the website. The party responsible for player footage in the videos is the club or person making the recording; informing players, parents and spectators on the pitch about the recording is the recorder's responsibility.
Security
Data travels only over encrypted connections; the form functions validate input for size and format and include a bot trap. Order and contact emails are kept in a mailbox only an authorised person can access. No system is completely secure; in the event of a data breach we notify the Personal Data Protection Board within 72 hours as the KVKK requires and inform the people affected.
Children
The site and its forms are not designed for users under 18. Our contact with academies runs through adult officials; we do not knowingly collect personal data from children. If we learn that it was collected by mistake, we delete it.
Changes and contact
We update this policy as needed; the date at the top shows the last change. For questions and KVKK requests: [EMAIL].