Data Protection Notice

The quote form

From the form: your name, email address and — if you choose to give it — your phone number. About the project: the page count, the services you selected, your existing domain if you have one, and anything you wrote in the message. If you opted in to marketing, that choice is recorded too, so that you can withdraw it later. We also keep a short-lived record derived from your IP address and a technical cookie (formLastSent) to stop the form being abused by automated tools.

Visiting the site

On every page you visit: that it was opened and when, your device type, your operating system and browser, and your approximate location (country and city) derived from your IP address. On a proposal page specifically, we also record how long it stayed open and how far down it was read. This is measured by Google Analytics 4, loaded through Google Tag Manager. If you accepted cookies, Google stores an identifier in your browser (the _ga cookie) that recognises you across visits; if you refused, no cookie is set, no identifier is stored, and two separate visits cannot be linked to each other. Google truncates your IP address before storing it. The personal code in a proposal link — the part after ?t= — is removed before anything is sent to Google, so the measurement cannot say which business opened the page.

The quote form

For four things only: preparing a quote in answer to your request, contacting you about it, keeping a record of the request and of the permission you gave, and preventing automated abuse of the form. Nothing else.

Visiting the site

To understand which pages of the site are useful to visitors, and — on a proposal page specifically — to see whether it reached the person it was sent to and to decide when to follow up. Advertising features and Google Signals are switched off in the measurement property, so the data is not used for advertising, profiling or cross-site targeting. It is never sold, and it is not shared with anyone beyond the measurement provider named below.

The quote form

Because you sent the request yourself, your data is processed under KVKK art. 5/2-c — directly related to the formation or performance of a contract. Abuse prevention and record-keeping rest on legitimate interest under art. 5/2-f. Neither requires your consent. Only marketing communication rests on your explicit consent, and you will receive your quote whether or not you tick it.

Visiting the site

Your explicit consent, under KVKK art. 5/1. The banner shown on your first visit is where it is asked for, and nothing is stored in your browser until you accept. If you refuse, Google Analytics keeps running in a cookieless mode that sets nothing and identifies nobody — the page works identically either way, and refusing costs you nothing. You can change your answer at any time from “Cookie preferences” at the foot of any page. One thing stated plainly: Google Analytics does not act on browser “Do Not Track” or “Global Privacy Control” signals. The banner is what governs this now, not the signal.

The quote form

Electronically and by automated means, when you complete and submit the quote form on this website.

Visiting the site

Electronically and by automated means, the moment you open any page of this site — including the moment you open a link sent to you. A Google Tag Manager container loads Google Analytics in your browser, which reports the visit. There is nothing for you to fill in.

The quote form

Your data is never sold and never shared with third parties for marketing. It does pass through three suppliers the service depends on: the submission arrives as email in Google's infrastructure (Google Workspace / Gmail) and is stored in the studio's mailbox; your enquiry is also recorded in the studio's database on Supabase (Frankfurt, European Union) so that it cannot be lost in a mailbox; and the site is hosted on Vercel, which also measures its traffic. All three suppliers' servers are outside Turkey, so this constitutes a transfer abroad. The email transfer is occasional and necessary for the pre-contractual steps taken at your own request, and is carried out under KVKK art. 9/6(b). The database record is continuous rather than occasional, so art. 9/6(b) does not cover it: it is carried out under art. 9/2(b) on the basis of the standard contract published by the Personal Data Protection Board, notified to the Authority within five business days of signature.

Visiting the site

The site, proposal pages included, is served by Vercel, and the measurements are processed by Google Ireland Limited and may be stored on Google LLC's servers in the United States. Both suppliers are outside Turkey. This transfer is continuous rather than occasional, so art. 9/6(b) does not cover it: it is made under art. 9/2(b) on the basis of the standard contract published by the Personal Data Protection Board, which is notified to the Board within five working days of signature. Google's own standard contractual clauses and its Data Processing Terms apply in addition.

The quote form

For as long as the enquiry is live, and at most one year from the date you sent it. That period covers both the copies in the mailbox and the record in the database; at the end of it all of them are deleted. You can ask us to delete it sooner at any time.

Visiting the site

Visit-level records are kept in the Google Analytics property for fourteen months from your visit and are then deleted automatically by Google. What remains after that is aggregate reporting, which identifies nobody. The _ga cookie, if you accepted it, expires two years after your last visit; you can remove it sooner from your browser settings, or by withdrawing consent from “Cookie preferences” at the foot of any page.