Privacy Policy
1. Who We Are
PhiTech values the privacy of its website visitors and is committed to protecting personal data with transparency, integrity, and care. This Privacy Policy explains how PhiTech collects, uses, and protects personal data when you visit our website or interact with us through our online forms.
PhiTech operates through the following legal entities:
• PHITECH Biyoteknoloji Bilişim A.Ş. (Türkiye/ acts as the Data Controller)
• Phitech Bioinformatics B.V. (Netherlands)
• Phitech Inc. (United States)
These entities are collectively referred to in this Privacy Policy as “PhiTech,” “we,” “us,” or “our.”
This Privacy Policy applies to visitors and users of our website:
• https://www.phitech.bio
It explains how your Personal Data may be collected and used in this context.
This Privacy Policy may be amended from time to time to reflect changes in applicable data protection laws, regulations, or guidance issued by relevant authorities (“Applicable Data Protection Laws”).
If you provide us with data outside the scope of this Privacy Policy, such as data provided through contractual relationships, collaborations, or platform services, such data will be governed by the relevant agreements and applicable laws and regulations.
This Privacy Policy does not apply to third‑party websites, services, or platforms that may be linked from our website; we are not responsible for the privacy practices of such third parties and encourage you to review their privacy notices separately. You are responsible for ensuring that the personal data you provide to us is accurate and up to date.
2. What Data Do We Collect?
We may collect information that can identify you either directly or indirectly (“Personal Data”). The types of data collected depend on how you interact with our website.
We distinguish between data collected automatically and data that you provide directly.
Data Collected Automatically
When you visit our website, certain technical information may be collected automatically, including:
• IP address
• browser type and version
• device type and operating system
• pages visited
• referring website
• date and time of access
This information helps us:
• ensure proper functioning of the website
• understand website usage
• improve user experience
Some of this information may be collected through cookies or similar technologies. Please refer to our Cookie Policy for additional details.
Data You Provide Directly
We collect personal data when you voluntarily provide information through our website forms.
Contact Requests, Demo Requests, and Meeting Requests
When you request a demo, schedule a meeting, or contact us through our website, we may collect:
• First name
• Last name
• Email address
• Phone number
• Company or institution
• Country
• Professional title or role
• Message content or request details
Purpose of Collection
We use this information to:
• respond to your requests
• provide product demonstrations
• communicate regarding potential collaborations or partnerships
• provide information about our products and services
If you provide your consent, we may also use your contact details to send information about PhiTech products, services, or events.
We ensure that our forms collect only the information necessary to respond to your request.
3. Why Do We Use Your Personal Data?
PhiTech may process personal data for the following purposes:
• responding to inquiries and demo requests
• communicating with potential customers or partners
• improving our website and services
• performing internal analytics
• complying with legal obligations
Personal data may be processed based on one or more of the following legal grounds:
• Consent – when you voluntarily provide personal data through forms or other interactions.(Law on the Protection of Personal Data No. 6698 (“KVKK”) Article 5/1)
• Legitimate Interests – to operate, improve, and promote our services and business activities, provided that such interests are not overridden by your fundamental rights and freedoms. (KVKK Article 5/2(f))
• Contractual Necessity – when processing is necessary to respond to a request related to potential services or partnerships. (KVKK Article 5/2(c))
• Legal Obligations – when processing is required to comply with applicable laws or regulations. (KVKK Article 5/2(a))
Where you are located in the European Economic Area (EEA) or the United Kingdom, these legal grounds correspond in particular to Articles 6(1)(a), 6(1)(b), 6(1)(c), and 6(1)(f) of the GDPR / UK GDPR.
4. With Whom Do We Share Your Personal Data?
PhiTech does not sell or rent your personal data to third parties.
However, we may share personal data with trusted third‑party service providers who assist us in operating our website or business operations, such as:
• website hosting providers
• IT infrastructure providers
These service providers may process personal data only for the purposes specified by PhiTech and are required to maintain appropriate data protection standards.
We may also disclose personal data when required by law, regulatory authorities, or legal processes.
Access to personal data is limited to authorized personnel and service providers who need such access for the purposes described in this Privacy Policy and are subject to confidentiality obligations.
5. International Data Transfers
When personal data is transferred across borders, PhiTech implements appropriate safeguards to ensure such transfers comply with Applicable Data Protection Laws, such as the use of standard contractual clauses or other mechanisms recognised under the GDPR / UK GDPR / KVKK for transfers outside the EEA or UK, where relevant.
6. Compliance with Data Protection Laws
PhiTech processes personal data in accordance with applicable data protection laws and regulations in the jurisdictions where it operates.
These laws may include, where applicable:
• the General Data Protection Regulation (GDPR) of the European Union
• the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018
• the Turkish Personal Data Protection Law (KVKK – Law No. 6698)
• applicable United States privacy laws, including state‑level privacy regulations where relevant
PhiTech implements appropriate technical and organizational measures to ensure that personal data is processed lawfully, fairly, and transparently.
7. Data Security
PhiTech is committed to protecting personal data and implementing appropriate security measures to prevent unauthorized access, loss, misuse, or alteration.
Such measures may include:
• secure hosting infrastructure
• access control mechanisms
• encryption technologies
• internal confidentiality obligations
Despite our efforts, no internet‑based system can guarantee absolute security.
8. Data Retention
PhiTech retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy. For example business communications may be retained for the duration of the business relationship. After this period, personal data will be securely deleted or anonymized.
9. Processing of Minors’ Data
The PhiTech website is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data through the website, we will take steps to delete such information.
10. Your Rights
10.1 Rights Under KVKK (Primarily Turkish Residents)
If the KVKK applies to our processing of your Personal Data, you may have the rights set out in Article 11 of the KVKK, including the right to:
• learn whether your personal data is being processed;
• request information regarding such processing;
• learn the purpose of processing and whether it is used accordingly;
• know the third parties to whom data is transferred domestically or abroad;
• request correction of incomplete or inaccurate data;
• request deletion or destruction of data under the conditions set out in Article 7 of the KVKK;
• request notification of corrections or deletions to third parties to whom personal data has been transferred;
• object to results arising exclusively from automated processing, if such results are to your detriment;
• claim compensation for damages arising from unlawful processing of your personal data.
10.2 Rights Under GDPR / UK GDPR (EEA and UK Residents)
If the GDPR or UK GDPR applies to our processing of your Personal Data (for example, when you are located in the EEA or UK), you may have the following rights, in addition to or overlapping with the above:
• the right of access to your personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure (“right to be forgotten”) in certain circumstances;
• the right to restriction of processing in certain circumstances;
• the right to data portability, to receive your data in a structured, commonly used and machine‑readable format and to transmit it to another controller;
• the right to object to processing based on our legitimate interests, including profiling;
• where processing is based on your consent, the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority. A list of EU supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en, and UK residents may contact the Information Commissioner’s Office (ICO) at https://ico.org.uk.
10.3 How to Exercise Your Rights
To exercise any of your rights under Applicable Data Protection Laws, please contact us using the contact information in Section 11 below. We may need to verify your identity before responding to your request, and we will respond within the timeframes required by applicable law.
11. Contact Us
If you have any questions about this Privacy Policy or how PhiTech processes personal data, or if you wish to exercise your data protection rights, you may contact us at:
Email: privacy@phitech.bio
Website: https://www.phitech.bio
12. Changes to This Privacy Policy
PhiTech may update this Privacy Policy from time to time to reflect changes in legal requirements or our data processing practices. The latest version will always be available on our website.
Last updated: April 7, 2026