Privacy Agreement

1. Data we collect

We collect the following data through application forms, the contact form, the student portal and document upload links:

• Identity and contact data: full name, phone, e-mail, nationality and passport information
• Education data: diploma, transcript, language proficiency documents and target programme/university preferences
• Process documents: files you upload for application, admission, visa and residence permit procedures
• Payment data: transaction reference, amount, currency and payment status only

2. Purposes of processing

Your data is processed only to deliver the service and to meet legal obligations:

• Submitting and concluding your application with universities
• Planning and delivering the counselling service and communicating with you
• Preparing and tracking documents for residence permit and visa procedures
• Keeping payment, invoicing and accounting records
• Responding to your requests and complaints

3. Sharing of data

Your personal data is never sold or rented to third parties for advertising or marketing. Sharing takes place only with the following parties and only to the extent required:

• International student offices of the universities you apply to (to evaluate the application)
• Authorised public authorities (for visa and residence permit procedures, as required by law and your request)
• The payment institution iyzico (solely to process the payment)
• E-mail delivery, hosting and error monitoring providers (as data processors)

4. Payment data and card details

Payments are collected through the iyzico payment infrastructure. Card number, expiry date and security code are never transmitted to, stored on or logged by StudyGo servers; this data is processed solely by iyzico on its PCI-DSS compliant payment page. On the StudyGo side, only the transaction reference, amount, currency and payment status are recorded.

5. Retention period

Your application and counselling file is retained for the duration of the service relationship. Accounting and invoice records are kept for the period required by legislation (10 years). Data whose retention period has expired is deleted; where deletion is not technically possible, it is anonymised.

6. Data security

Access is role based: application and document data can be seen only by assigned counsellors and authorised administrators, and sensitive operations are logged. Data is encrypted in transit. Where unauthorised access is suspected, affected individuals and the Personal Data Protection Authority are notified within the period set by legislation.

7. Cookies and analytics tools

The site runs cookie-based tools for visit and conversion measurement (Google Analytics and Microsoft Clarity, loaded through Google Tag Manager). These tools collect usage data such as page views, clicks and form interactions. Analytics tools are enabled only on the production domain, and you can block or delete cookies in your browser settings.

8. Your rights and how to apply

Under Article 11 of the KVKK you have the right to access your data, to request its correction, deletion or anonymisation, to object to its processing and to claim compensation for damages. You can submit your requests through the channels on our contact page; applications are answered within 30 days at the latest.