Privacy Policy

Last updated: 9 May 2026

KAEL Creative ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and the Turkish Personal Data Protection Law (KVKK).

1. Data We Collect

• Contact form / email: name, email, phone (optional), message, project details
• Automated: IP address, browser type, device info, pages visited, session duration
• Cookies: See our Cookie Policy

2. How We Use Your Data

• Respond to your inquiries and prepare proposals
• Manage contractual relationships
• Send service updates with your consent
• Analyze site performance and improve our offerings
• Comply with legal obligations (tax, audit, court orders)
• Protect against fraud and security threats

3. Legal Basis (GDPR Art. 6)

• Consent: for marketing communications
• Contract: client requests and proposals
• Legitimate interest: site analytics, security
• Legal obligation: mandatory record-keeping

4. Who We Share With

We do not sell your data. We share only with:

• Hosting: Vercel Inc. (USA — Standard Contractual Clauses)
• Email: Resend / SendGrid (GDPR-compliant DPAs)
• Analytics: Plausible (cookieless, EU-hosted) or Google Analytics 4 (with IP anonymization)
• Legal: court orders, regulatory authorities

5. International Transfers

Some processors are based outside the EU/UK/TR. Transfers are protected by Standard Contractual Clauses (SCCs) or adequacy decisions.

6. Data Retention

• Contact form submissions: 2 years
• Client contract records: 10 years (Turkish Commercial Code)
• Analytics data: 14 months
• Financial records: 5 years (Turkish Tax Procedure Law)

7. Your Rights

Under GDPR, UK GDPR, and KVKK you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Data portability — receive your data in a machine-readable format
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with your local Data Protection Authority

8. Security

We use HTTPS, secure email providers, and encrypted storage. Despite reasonable safeguards, no online transmission is 100% secure.

9. Children

Our services are not directed at children under 16. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy. Material changes will be notified by email or homepage banner. Continued use after notice constitutes acceptance.

11. Contact

Data Controller: KAEL Creative
Address: Nicosia, Cyprus
Email: ai.bilgimedya@gmail.com

For complaints, you may also contact your local Data Protection Authority (e.g. ICO in the UK, KVKK in Turkey, your Member State DPA in the EU).