Kasel Creative

Privacy Policy

Kasel Creative ("Kasel Creative", "we", "us" or "our") is a digital agency providing web development, design, brand identity, content production and performance-marketing services. We are the data controller responsible for the personal data processed through this website. This Privacy Policy explains what personal data we collect, why we process it, who we share it with and the rights available to you. It applies to www.kaselcreative.com and any page, form or service that links to it.

Because we operate across Türkiye and the European Union, we process personal data in line with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU/EEA General Data Protection Regulation ("GDPR"), as applicable to you.

1. Who we are and how to contact us

Data controller: Kasel Creative. For any question about this policy or to exercise your rights, contact us at info@kaselcreative.com. You can request the full registered details of the relevant Kasel Creative entity by writing to the same address.

2. The personal data we collect

Information you give us. When you use our contact form, request a demo or email us, we collect your name, business email address, telephone number (if provided), company name and the content of your message or brief.

Information collected automatically. When you visit the site, our servers and analytics tools record technical data such as your IP address, browser type and language, device and operating system, referring page, the pages you view and the dates and times of access. Some of this data is collected through cookies and similar technologies (see section 4).

Information from third parties. If you interact with our profiles on platforms such as Instagram or LinkedIn, or reach us through them, we may receive limited profile and contact information in accordance with those platforms' own terms.

We do not intentionally collect special categories of data (such as data revealing health, religious or political views). Please do not include such information in the messages you send us.

3. Why we process your data and our legal bases

  • To respond to your enquiries and prepare proposals — performance of a contract or steps taken at your request (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
  • To provide, operate and secure the website, prevent abuse and keep records — our legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
  • To measure and improve the website through analytics — your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)).
  • To send service or marketing communications you have asked for — your consent, which you can withdraw at any time.
  • To comply with legal obligations and to establish, exercise or defend legal claims — compliance with a legal obligation and our legitimate interests (GDPR Art. 6(1)(c) and (f); KVKK Art. 5(2)(ç) and (e)).

4. Cookies and similar technologies

We use strictly necessary cookies to run the site (navigation, security and remembering your privacy choices) and, with your consent, analytics, functional and marketing cookies. Non-essential cookies are not set until you accept them. You can review or change your choices at any time through the panel, or by clearing cookies in your browser.

5. Analytics

We use Google Analytics to understand how visitors use the site. Google Analytics sets cookies and processes usage data, including a truncated version of your IP address, on our behalf. Analytics only runs after you consent, and the reports we see are aggregated and do not identify you. For more information, see Google's privacy documentation.

6. Sharing your data and our service providers

We never sell your personal data. We share it only with:

  • Hosting and infrastructure providers that operate the servers on which the site runs;
  • Email and productivity providers (Google Workspace) used to receive and answer your messages;
  • Analytics providers (Google), as described above;
  • Professional advisers, and public authorities or courts where we are legally required to disclose information.

These providers act as our processors under written agreements and may only use the data to provide their service to us.

7. International data transfers

Some of our providers (for example Google) are based outside Türkiye and the EEA, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, adequacy decisions or your explicit consent, and on the transfer conditions set out in Article 9 of the KVKK.

8. How long we keep your data

We keep enquiry and project correspondence for as long as needed to deal with your request and for a reasonable period afterwards to manage our client relationship and meet legal, accounting and tax obligations (generally up to 10 years where required by law). Server logs are kept for a short period for security and troubleshooting. Analytics data is retained for the period configured in Google Analytics. Data tied to consent is kept until you withdraw consent or it expires.

9. How we protect your data

We apply appropriate technical and organisational measures — including encryption in transit (HTTPS), access controls, least-privilege accounts and regular updates — to protect personal data against loss, misuse and unauthorised access, disclosure or alteration. No method of transmission over the internet is completely secure, but we work to keep our safeguards current.

10. Your rights

Depending on where you are, you have the right to:

  • be informed about, and request access to, the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to delete your data or restrict how we use it;
  • object to processing based on our legitimate interests;
  • receive certain data in a portable format and, where technically possible, have it transferred to another controller;
  • withdraw your consent at any time, without affecting processing already carried out;
  • learn whether your data has been processed, request information on third parties to whom it has been disclosed and, under the KVKK, ask that any adverse outcome caused by automated analysis be remedied.

To exercise any of these rights, email info@kaselcreative.com. We respond within the timeframes set by applicable law (30 days under the KVKK; one month under the GDPR) and may ask you to verify your identity.

11. Complaints

If you believe we have not handled your personal data properly, please contact us first so we can put it right. You also have the right to lodge a complaint with a supervisory authority — in Türkiye, the Personal Data Protection Authority (kvkk.gov.tr); in France, the CNIL (cnil.fr); or the data protection authority in your country of residence.

12. Data we process for our clients

When we deliver services, we may process personal data contained in the systems, content or campaigns we build or manage for a client. In that case the client is the data controller and Kasel Creative acts as a processor, handling the data only on the client's documented instructions and protecting it with the same safeguards described above. A data processing agreement is available to clients on request.

13. Marketing communications

We only send marketing messages if you have asked us to. Every message includes an unsubscribe link, and you can opt out at any time by contacting us. Opting out of marketing does not stop essential service messages about a project or enquiry.

14. Third-party websites

Our site and case studies may link to third-party websites and embed third-party media. We are not responsible for the privacy practices of those sites; please review their policies before providing any personal data.

15. Children's privacy

The site is intended for business audiences and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16 (or the higher age of digital consent in your country). If you believe a child has provided us with personal data, contact us and we will delete it.

16. Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

17. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or the law. We will post the revised version on this page and update the date below; significant changes will be highlighted where appropriate.

18. Contact us

Kasel Creative — info@kaselcreative.com

Effective date: 2 September 2026 · Last updated: 2 September 2026