Privacy Notice
Information under the EU General Data Protection Regulation (GDPR) and Turkish data protection law (KVKK)
1. Controller
The controller of your personal data is AC Web Studio, a sole trader based in İstanbul, Türkiye.
Contact: info@acwebstudio.com
We are established in Turkey and have not appointed a representative in the EU. You can reach us directly at the address above for any privacy request.
2. What we collect
- Messages you send us: when you contact us on WhatsApp or by e-mail, we receive your name, phone number or e-mail address and the content of your message, such as your business name, city and project details.
- Project content: texts, photos, prices, opening hours and contact details you give us to build your website.
- Billing data: name or company name, billing address and tax number, if you buy a package. Card data is entered on the payment provider's page and never reaches our servers.
- Preview request form: business name, line of business, city, package choice and, optionally, a phone number. The phone number is used only with your consent and only to call you about this request; it is never added to a marketing list.
- Cookieless visit counter: our homepage stores no cookies, IP addresses or device identifiers for statistics. We only keep a daily total per event type, for example page views or WhatsApp clicks. If your browser sends "Do Not Track", no count is sent.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR Art. 6(1)) |
|---|---|
| Answering your request and preparing a free preview | (b) steps taken at your request before a contract |
| Building, hosting and maintaining your website | (b) performance of a contract |
| Invoicing and bookkeeping | (c) legal obligation under Turkish tax law |
| Security logs and abuse prevention | (f) legitimate interest in a secure service |
We do not sell your data, we do not use it for advertising profiles and we make no automated decisions with legal effect on you.
4. Who receives your data
- Hosting and infrastructure providers that run this website and your website.
- WhatsApp (Meta) when you choose to contact us there.
- The payment provider, only when you pay online.
- Our accountant and tax authorities, for invoices.
5. International transfers
We operate from Turkey, which does not have an EU adequacy decision. Your data is transferred to Turkey because it is necessary to perform the contract you request (GDPR Art. 49(1)(b)). Hosting providers may also process data in other countries under their own safeguards, such as standard contractual clauses.
6. How long we keep it
- Enquiries that do not lead to an order: up to 730 days.
- Website project files: for the duration of the service and 30 days after it ends.
- Invoices and accounting records: 10 years, as required by Turkish tax law.
7. Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability (GDPR Art. 15–21). Send your request to info@acwebstudio.com. We answer within one month.
You also have the right to lodge a complaint with the data protection supervisory authority in your EU country of residence.
Effective date: 2026-08-19. The Turkish KVKK notice is available at /legal/privacy.