Last updated: July 10, 2026 · Designed for business contacts in the United States, Canada, the Gulf region, Latin America, and other markets we serve.
This notice explains what MoreSight collects, why it is used, where it may be processed, and the choices available to you. We do not sell personal data or use it for cross-site behavioral advertising.
This notice covers moresight.io, its business intake forms, correspondence, research, and client diagnostics. The data controller for these activities is Murat Uzunlu, operating the MoreSight service from Istanbul, Türkiye.
Privacy requests may be sent to murat@moresight.io. Additional legal and billing identification will be included in a written engagement document where required for a paid service.
For personal data supplied by a client solely for processing on that client's documented instructions, the parties may have different controller and processor roles. Any required data processing terms will be stated in the written engagement scope.
Do not submit passwords, payment card numbers, government identifiers, health data, biometric data, criminal records, or other sensitive or regulated information unless a written scope expressly requires it and appropriate safeguards are agreed first. Do not provide personal data about another person unless you are authorized to do so.
Fields identified as required are needed to evaluate or deliver the requested service. If they are not provided, we may be unable to respond to the intake or proceed with an engagement.
| Purpose | Basis used where applicable |
|---|---|
| Responding to an intake, assessing fit, preparing questions, and delivering an agreed diagnostic | Steps requested before a contract and performance of a contract |
| Communicating with you and managing the business relationship | Contract and legitimate business interests |
| Researching your organization, sector, and market using public sources | Legitimate interests in providing evidence-based business analysis |
| Operating, securing, troubleshooting, and preventing abuse of the website and service | Legitimate interests and, where applicable, legal obligations |
| Maintaining invoices, tax records, dispute records, and compliance documentation | Legal obligations and establishment or defense of legal claims |
| Sending optional product or research updates | Consent, or another basis permitted for business communications in your jurisdiction, with an easy opt-out |
| Improving methods using aggregated or de-identified patterns | Legitimate interests; genuinely anonymized information is no longer personal data |
Where the GDPR or UK GDPR applies, these bases correspond principally to Articles 6(1)(a), (b), (c), and (f). Where Türkiye's KVKK applies, they correspond principally to Articles 5(1), 5(2)(c), 5(2)(ç), and 5(2)(f). Other jurisdictions use their equivalent lawful grounds.
We do not make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.
MoreSight may use AI tools to support research, question design, synthesis, and drafting. AI is an analysis aid, not the final decision-maker.
If your organization restricts particular AI providers or cross-border processing, tell us before sharing confidential information. The restriction can be documented in the engagement scope.
We disclose data only as reasonably necessary to the following recipient categories:
We do not sell or rent personal data. We do not disclose a client name, logo, testimonial, or identifiable case study without separate written permission.
MoreSight is operated from Türkiye and serves international business clients. Data may be processed in Türkiye and in countries where our service providers operate, which may include the United States and the European Economic Area.
Where a law restricts international transfers, we use a lawful mechanism appropriate to the transfer. This may include an adequacy decision, contractual safeguards, the European Commission's Standard Contractual Clauses, the UK Addendum, or mechanisms available under KVKK Article 9, including an applicable standard contract and required notification. Equivalent safeguards are used where laws in Canada, Brazil, the UAE, Saudi Arabia, or another relevant jurisdiction require them.
You may request information about the safeguard relevant to your data by using the contact in Section 1.
| Data category | Usual retention period |
|---|---|
| Intake where no engagement follows | Up to 12 months after submission |
| Engagement materials, working files, and reports | Up to 24 months after final delivery, unless the written scope states otherwise |
| Business contact and correspondence records | During the relationship and up to 24 months afterward |
| Invoices, tax, accounting, sanctions, and dispute records | For the period required by applicable law or necessary for legal claims |
| Security logs | For the period reasonably necessary for security and abuse prevention |
Data may be deleted earlier when it is no longer needed or following a valid request. Residual copies may remain temporarily in routine backups until they are overwritten. Minimal opt-out records may be retained to respect communication preferences.
We use measures proportionate to the current scale and risk of the service, including encrypted connections, access controls, account security, data minimization, and reputable infrastructure providers. Client business information is also protected by the confidentiality terms applicable to the engagement. No online system is completely secure, so please use appropriate care when choosing what to submit.
Depending on the law that applies, you may ask us to confirm processing, provide access, correct inaccurate data, delete data, restrict or object to processing, provide portable data, withdraw consent, or explain an automated decision. You may also opt out of non-essential communications at any time.
Send requests to murat@moresight.io with the subject “Privacy Request.” We may request reasonable information to verify identity and authority. We respond within the period required by applicable law and do not discriminate against anyone for exercising a privacy right.
If an applicable US state privacy law grants you rights, these may include access, correction, deletion, portability, and the right to opt out of sale, targeted advertising, or certain profiling. MoreSight does not sell personal information or share it for cross-context behavioral advertising. An authorized agent may submit a request where permitted. This notice is not an admission that any particular state statute or threshold applies to MoreSight.
Where PIPEDA or an applicable provincial law applies, you may request access to and correction of your personal information and challenge our compliance. You may contact the Office of the Privacy Commissioner of Canada where appropriate.
Where Brazil's LGPD applies, rights may include confirmation of processing, access, correction, anonymization, blocking or deletion, portability, information about sharing, and withdrawal of consent. You may petition Brazil's ANPD after first contacting us. In Mexico and other Latin American jurisdictions, we honor applicable access, rectification, cancellation or deletion, objection, and consent-withdrawal rights.
Where an applicable Gulf privacy law applies, including the UAE Personal Data Protection Law or Saudi Arabia's Personal Data Protection Law, rights may include being informed, access, correction, obtaining a copy, deletion or destruction, restriction, withdrawal of consent, and complaint to the competent authority. The exact right and any exception depend on the applicable national or free-zone law.
Where the GDPR or UK GDPR applies, you may exercise access, correction, deletion, restriction, objection, portability, and consent-withdrawal rights and lodge a complaint with your local supervisory authority. MoreSight does not currently target consumer services in the EEA or UK, but these protections are honored when the law applies.
Because the controller is located in Türkiye, KVKK may apply to processing operations. Rights under KVKK Article 11 include learning whether data is processed, requesting information, learning purposes and recipients, correction, deletion or destruction, notification to recipients, objection to certain automated results, and claiming compensation where legally available. Requests under KVKK Articles 11 and 13 will be handled within the legally required period, no later than 30 days.
The public site may use technically necessary cookies and security logs required to operate and protect the service. We do not currently use advertising or cross-site tracking cookies. If optional analytics or advertising technologies are introduced, this notice and the site's consent controls will be updated where required.
The service is designed for business and professional users and is not directed to anyone under 18. We do not knowingly collect personal data from children through the business intake.
We may update this notice when the service, providers, operating entity, or applicable law changes. The revision date will be updated, and material changes will be highlighted where appropriate.
Murat Uzunlu, PhD
Operating the MoreSight service as an independent consultant
Istanbul, Türkiye
Email: murat@moresight.io · Web: moresight.io
Professional profile: LinkedIn
MoreSight · Find the value. Fix what is stuck. Scale what works. This notice is provided in English for international business users. A local-language notice may be provided where legally required.