Privacy Policy

Scope and data controller

This privacy policy applies to all pages under the moonworkshop.com domain and to the requests submitted through them. The data controller is:

• Legal name: Moon Workshop Dijital Reklam Ajansı
• Address: Güzeloba Mah. Çağlayangil Cad. Hatice Güleser İş Merkezi No:39 İç Kapı No:104, Muratpaşa / Antalya, Türkiye
• Email: info@moonworkshop.com
• Phone: +90 850 840 48 65
• Website: moonworkshop.com

The policy applies to every visitor to the site. Data processed under a client agreement for advertising and software services is additionally governed by that agreement and by the Turkish data protection (KVKK) notice.

The data we collect

Two kinds of data are collected through this site: what you send us directly, and what is generated technically during your visit.

Data you provide directly

• Identity and contact data: full name, email address, phone number, company name.
• Request content: whatever you write in the contact form, an email or a WhatsApp message, including the service you are interested in and the budget range you indicate.

Data generated automatically

• Usage data: pages visited, time on page, clicks, referring source.
• Technical data: IP address (truncated in analytics tools), browser and operating system, device type, screen resolution, language preference.
• Cookie data: identifiers created by strictly necessary, analytics and marketing cookies. See the Cookie Policy for details.

We do not request special categories of personal data (such as health or biometric data) through this website, and we ask that you do not enter such data into the form fields.

Purposes of processing

1. Responding to your request: preparing proposals, scheduling free account audits and answering your questions.
2. Delivering the service: running ad management, software development and reporting once an agreement is in place.
3. Improving the site: understanding which content is read and where visitors run into friction.
4. Measuring advertising performance: understanding which channel turns a visit into an inquiry and allocating ad investment accordingly.
5. Security and legal obligations: preventing misuse and meeting statutory retention requirements.

Your data is not used for purposes beyond these without your explicit consent, and it is never sold to third parties for marketing.

Legal basis

Personal data is processed on the grounds set out in Article 5 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK):

Processing activity	Legal basis
Contact form and email correspondence	Directly related to the conclusion or performance of a contract (Art. 5/2-c) and legitimate interest (Art. 5/2-f)
Strictly necessary cookies	Legitimate interest (Art. 5/2-f); required for the site to function
Analytics and marketing cookies	Explicit consent (Art. 5/1)
Invoicing and accounting records	Legal obligation (Art. 5/2-ç)
Security logs	Legal obligation (Art. 5/2-ç) and legitimate interest (Art. 5/2-f)

For visitors located in the European Union, the corresponding bases are GDPR Art. 6(1)(b), 6(1)(c), 6(1)(f), and Art. 6(1)(a) where consent applies.

Retention periods

Data type	Retention period
Contact form and email inquiries	Up to 2 years after the request is closed
Records within a client relationship	10 years after the agreement ends (statute of limitations)
Invoices and accounting documents	10 years, as required by tax legislation
Analytics data	Up to 14 months, per the retention setting of the tool
Cookie identifiers	The periods listed in the Cookie Policy

When the period expires or the purpose of processing disappears, the data is deleted, destroyed or anonymized.

Third-party services we use

The following services are used on this website for measurement and advertising. Their providers may act as data processors or as independent controllers under their own privacy policies.

Service	Provider	Purpose
Google Analytics 4	Google Ireland Ltd.	Visit and behavior measurement, content performance
Google Tag Manager	Google Ireland Ltd.	Management of measurement tags
Google Ads	Google Ireland Ltd.	Ad conversion measurement and remarketing
Meta Pixel	Meta Platforms Ireland Ltd.	Facebook and Instagram ad measurement, remarketing
Microsoft Clarity	Microsoft Corporation	Anonymous usage analysis (heatmaps, session statistics)
Google Maps	Google Ireland Ltd.	Displaying the office maps on the contact page

These services may run on servers located outside Türkiye. Cross-border transfers take place under the conditions of Article 9 of the KVKK and the providers’ standard contractual clauses.

Data security

• Site traffic is transmitted over TLS encryption.
• Access to data is limited to employees who need it for their work and is managed by role.
• Two-step verification is used for access to client accounts.
• Access rights are reviewed regularly and revoked when someone leaves.

No system offers absolute security. In the event of a data breach, affected individuals and the Turkish Data Protection Authority are informed within the period required by law.

Your rights as a data subject

Under Article 11 of the KVKK you have the right to:

• Learn whether your personal data is processed and request information about it.
• Learn the purpose of processing and whether the data is used in line with that purpose.
• Know the third parties, in Türkiye or abroad, to whom the data has been transferred.
• Request the correction of incomplete or inaccurate data.
• Request deletion or destruction of the data where the legal conditions are met.
• Request that corrections and deletions be notified to third parties who received the data.
• Object to a result reached solely through automated analysis that works against you.
• Claim compensation if you suffer damage due to unlawful processing.

Send your requests to info@moonworkshop.com. Applications are concluded within 30 days at the latest.

Changes to this policy and contact

This policy is updated when legislation changes or when the tools we use change. The current version is always published on this page, with the last update date shown at the top.

For questions about this policy:

• Legal name: Moon Workshop Dijital Reklam Ajansı
• Address: Güzeloba Mah. Çağlayangil Cad. Hatice Güleser İş Merkezi No:39 İç Kapı No:104, Muratpaşa / Antalya, Türkiye
• Email: info@moonworkshop.com
• Phone: +90 850 840 48 65
• Website: moonworkshop.com