Last Updated: March 2026
Welcome to the websites operated by Search Fund Plus Danışmanlık A.Ş., headquartered in Istanbul, Türkiye (“Search Fund Plus”, “SFP”, “we”, “us”, or “our”).
This Privacy Policy applies to:
and all related platform interfaces, tools, APIs, and services (collectively, the “Services”).
This Privacy Policy explains how we collect, use, process, and protect Personal Data in accordance with applicable data protection laws, including:
- the Turkish Personal Data Protection Law No. 6698 (“KVKK”)
- where applicable, the EU General Data Protection Regulation (“GDPR”)
- the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”)
- and other applicable data protection regulations
By accessing or using the Services, you acknowledge that your Personal Data may be processed as described in this Privacy Policy.
1. Personal Data We Collect
We collect information that identifies or may identify an individual (“Personal Data”) within the meaning of applicable data protection laws.
Personal Data may be collected:
- directly from you
- through your use of the Services
- through platform interactions and workflows
- from third-party integrations or publicly available sources (where applicable and permitted by law)
1.1 Data You Provide
We may collect Personal Data when you:
- create an account
- complete forms or surveys
- communicate with us
- subscribe to updates
- participate in platform workflows or transactions
This may include:
- name and surname
- email address
- phone number
- company and business information
- job title and role
- professional background
- LinkedIn or similar professional profiles
- communication content and correspondence
1.2 Survey & Structured Data Collection
Search Fund Plus may collect structured data through surveys, forms, and interactive inputs across the platform.
This may include information relating to:
- user intent and objectives within the platform
- interest in buying, selling, or investing in businesses
- expected timelines for transactions or search processes
- professional background, role, and decision-making authority
- company characteristics, acquisition criteria, or investment preferences
- prior experience with transactions, advisors, or financial counterparties
- preferences regarding process structure, communication, confidentiality, and execution
- interaction patterns with platform tools, workflows, and opportunities
This data may also be used to generate inferred profiles, scoring models, recommendations, or matching outcomes within the platform.
This data is used to:
- understand user intent, behavior, and readiness
- segment users based on profiles and preferences
- improve matching between participants within the ecosystem
- enhance workflow design, platform functionality, and user experience
- support deal sourcing, evaluation, and opportunity structuring
- generate insights that improve the efficiency and quality of platform interactions
Providing such data is voluntary. However, certain features of the Services may be limited if this information is not provided.
1.3 Platform & Operational Data
Users may generate or upload operational data, including:
- company pipelines and target lists
- CRM records and notes
- outreach communications
- acquisition scoring inputs and evaluation data
- investor-related communications
- internal analytical or strategic notes
This data may include references to individuals associated with businesses.
Such data is processed strictly for the purpose of providing, maintaining, and improving the Services, and is subject to appropriate access controls and security measures in line with our information security practices.
1.4 Automatically Collected Data
When you use the Services, we may collect:
- IP address
- browser type and version
- device type and operating system
- pages visited and navigation paths
- timestamps and session duration
- usage patterns and interaction data
This information is used for:
- analytics and performance monitoring
- security and fraud prevention
- system optimization and reliability
1.5 Cookies and Tracking Technologies
We use cookies and similar technologies to:
- maintain secure sessions
- remember user preferences
- analyze platform usage and performance
- improve functionality, usability, and security
Where required by applicable law, cookies will be used based on user consent.
Users may control cookie settings through their browser. Disabling cookies may limit certain functionalities of the Services.
2. Legal Basis for Processing
We process Personal Data in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”), and, where applicable, the EU General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).
2.1 Legal Grounds under KVKK
Under KVKK, Personal Data may be processed based on one or more of the following legal grounds:
- where explicitly provided for by law
- where processing is necessary for the establishment or performance of a contract
- where processing is necessary for compliance with legal obligations
- where data has been made public by the data subject
- where processing is necessary for the establishment, exercise, or protection of a right
- where processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed
- where explicit consent is obtained, where required
2.2 Legal Bases under GDPR (Where Applicable)
Where GDPR applies, we process Personal Data based on:
- Performance of a contract
- Compliance with legal obligations
- Legitimate interests, provided such interests are not overridden by your fundamental rights
- Consent, where required
2.3 CCPA/CPRA Notice of Processing
For residents of California, we process Personal Data in accordance with the CCPA/CPRA.
Under CCPA/CPRA, our processing of Personal Data is based on our role as a business collecting and using Personal Information for business and commercial purposes, including:
- providing and operating the Services
- maintaining and improving platform functionality
- analytics and performance monitoring
- security and fraud prevention
- communication with users
- compliance with legal obligations
We do not sell Personal Data and do not share Personal Data for cross-context behavioral advertising within the meaning of the CCPA/CPRA.
Where required under applicable U.S. state laws, users may exercise rights to:
- access and know their Personal Data
- request deletion or correction
- opt out of certain data uses
- limit the use of sensitive Personal Data
3. Purposes of Data Processing
We process Personal Data for the following purposes:
- to provide, operate, and maintain the Services
- to create and manage user accounts
- to enable acquisition workflows and CRM functionality
- to analyze user behavior and improve platform performance
- to personalize user experience and content
- to support matching between users, opportunities, and ecosystem participants
- to generate recommendations and analytical outputs
- to communicate updates, notifications, and support responses
- to ensure platform security, prevent misuse, and detect fraudulent or unauthorized activities
- to comply with legal obligations
- to establish, exercise, or defend legal claims
Aggregated and Analytical Use
We may use anonymized or aggregated data to:
- analyze trends and behaviors
- improve platform features, workflows, and system design
- develop research insights, reports, and data-driven products
- support ecosystem-level analytics and market intelligence
Such data does not identify individual users.
4. Sharing of Personal Data
Sharing of Personal Data
We may share Personal Data in limited circumstances:
Service Providers
With vendors providing hosting, analytics, communication, or technical infrastructure services.Such parties process Personal Data on our behalf and are subject to contractual confidentiality and data protection obligations.
Legal Obligations
Where required by law, regulation, or official authority.
Business Transfers
In connection with mergers, acquisitions, financing, due diligence processes, or restructuring.
Affiliates
With entities under common control, in accordance with this Privacy Policy.
With User Consent
Where explicitly authorized by the user.
Platform Visibility
Certain information shared within workflows, deal processes, or collaboration features may be visible to other authorized users within the platform.
International Transfers
Where Personal Data is transferred outside Türkiye, such transfers are carried out in accordance with applicable data protection laws and appropriate safeguards.
We take reasonable steps to ensure that all third parties receiving Personal Data implement appropriate technical and organizational measures consistent with applicable data protection laws and our ISO/IEC 27001-certified information security standards.
Users are responsible for the information they choose to share within the platform.
5. Data Subject Rights
Under applicable data protection laws, including KVKK and, where applicable, GDPR, users may have the right to:
- learn whether their Personal Data is processed
- request information regarding processing
- learn the purpose of processing and whether data is used accordingly
- know third parties to whom data is transferred
- request correction of incomplete or inaccurate data
- request deletion or destruction of data
- request notification of such actions to third parties
- object to unfavorable outcomes resulting from automated processing
- request compensation for damages arising from unlawful processing
Where applicable under certain jurisdictions (such as the United States), users may also have rights related to:
- requesting access to specific categories of Personal Data
- requesting deletion of Personal Data
- opting out of certain data sharing practices
Requests may be submitted to:
We may verify identity before processing requests and respond within legally required timeframes.
6. Data Retention
Personal Data is retained only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and in accordance with applicable data protection laws.
Retention periods are determined based on:
- the nature, scope, and sensitivity of the data
- the purposes for which the data is processed
- contractual requirements
- applicable legal and regulatory obligations
We may retain Personal Data for longer periods where necessary to:
- comply with legal or regulatory requirements
- resolve disputes
- enforce agreements
- establish, exercise, or defend legal claims
- maintain system integrity, security, and audit requirements
In line with our information security practices and ISO/IEC 27001-certified information security management system, we apply appropriate data retention and deletion controls.
When Personal Data is no longer required, it is:
- securely deleted
- irreversibly anonymized
- or retained in a restricted manner where required by law
We periodically review our data retention practices to ensure that Personal Data is not retained longer than necessary.
7. Data Security
Search Fund Plus implements appropriate technical and organizational safeguards designed to protect Personal Data, including:
- role-based access controls
- secure infrastructure and hosting systems
- encryption of data in transit
- monitoring and logging mechanisms
- internal data protection policies
Our information security management system is certified in accordance with ISO/IEC 27001, an internationally recognized standard for information security management.
We continuously monitor, review, and improve our security practices to ensure the confidentiality, integrity, and availability of Personal Data.
Despite these measures, no system is completely secure.
Users are responsible for maintaining the confidentiality of their credentials and should avoid sharing sensitive information unnecessarily.
8. Third-Party Services
The Services may include links or integrations with third-party platforms.
Search Fund Plus does not control and is not responsible for the privacy practices of such third-party services.
As a general principle, Search Fund Plus does not sell or commercially distribute Personal Data to third parties.
However, in order to operate, maintain, and improve the Services, Search Fund Plus may share or process certain data with third-party service providers or partners in limited circumstances.
Such sharing may include:
- infrastructure and hosting providers
- analytics and performance monitoring tools
- communication and system operation services
Where possible and appropriate, data shared with third parties will be:
- anonymized or aggregated so that it does not directly identify individuals, or
- limited to the minimum data necessary for the relevant purpose
Search Fund Plus takes reasonable steps to ensure that any third-party service providers:
- process data only in accordance with our instructions
- implement appropriate data protection and security measures
- do not use Personal Data for their own independent purposes
Search Fund Plus does not authorize third parties to use Personal Data for marketing, resale, or unrelated commercial purposes.
9. Children
The Services are not intended for individuals under the age of 18.
We do not knowingly collect Personal Data from minors.If we become aware that Personal Data has been collected from a minor without appropriate authorization, we will take steps to delete such data.
If you believe that a minor has provided Personal Data through the Services, please contact us at privacy@searchfundplus.com, and we will take appropriate steps to investigate and delete such information.
10. International Data Transfers
Personal Data may be processed or stored outside Türkiye where necessary for the operation of the Services.
In such cases, appropriate safeguards are implemented in accordance with applicable data protection laws.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- legal or regulatory changes
- platform updates
- operational improvements
Updated versions will be published with a revised “Last Updated” date.
Continued use of the Services constitutes acceptance of the updated Privacy Policy.
12. Contact
For any questions, requests, or concerns regarding this Privacy Policy: