Privacy and Cookie Policy

Last updated: 5 August 2026

1. Data controller

This website is operated by Doğuş Kaçmaz (trading as sophon studio), Küçükbakkalköy Mah. Selvili Sk. No: 4 İç Kapı No: 48, Ataşehir/İstanbul, Türkiye, acting as the data controller.

For privacy and personal-data enquiries, contact hello@sophonstudio.com.

2. Scope

This policy explains what information is processed when you visit sophonstudio.com, submit its contact form or manage your cookie preferences.

3. Information we process

Contact information

When you use the contact form, we may process your name, email address, message and any other information you choose to provide.

Please do not submit sensitive personal information, payment details or information that is not necessary for your enquiry.

Technical and security information

To deliver and secure the website, prevent abuse and diagnose technical problems, infrastructure providers such as Cloudflare may process IP address, request time, requested URL, browser and device information, referrer and security-event information.

Cloudflare Web Analytics

We use Cloudflare Web Analytics to measure website performance and general traffic trends. According to Cloudflare, this service does not use cookies or collect or use visitors' personal data. It may provide aggregated measurements such as page views, visited paths, country, browser, device type and page-performance information.

Google Analytics 4

We use Google Analytics 4 to understand traffic sources, visited pages, approximate location, browser and device types, sessions and interactions with the website.

Analytics storage is denied by default. Google Analytics cookies are not read or written unless you accept analytics cookies. However, because the website uses advanced Google Consent Mode, limited cookieless measurement signals may be transmitted to Google while consent remains denied. These signals may include consent status, timestamp, user agent, referrer and limited information concerning the page visited. Google may use these signals for aggregated measurement and modelling.

If you accept analytics cookies, Google Analytics may use first-party identifiers to distinguish visits and sessions. Google Analytics uses IP addresses during collection to derive approximate location. According to Google, the IP address is discarded before being logged on Analytics servers.

Advertising personalisation, remarketing and Google Ads features are not enabled in the current configuration.

4. Purposes and legal bases

We may process information for the following purposes:

  • To respond to enquiries, discuss requested services or quotations and manage a potential or existing business relationship: performance of or steps connected with a contract and, where applicable, our legitimate interest in handling genuine business enquiries.
  • To maintain correspondence records, establish or defend legal claims and meet legal obligations: compliance with legal obligations and our legitimate interests.
  • To protect the availability, integrity and security of the website: our legitimate interest in operating a secure website, provided that your rights and freedoms are not overridden.
  • To remember and apply your cookie choice: necessary operation of the privacy-preference mechanism and compliance with applicable requirements.
  • To store Google Analytics cookies and perform cookie-based analytics: your consent.

Where consent is the legal basis, you may withdraw it at any time. Withdrawal does not affect processing carried out lawfully before withdrawal.

Where the Turkish Personal Data Protection Law No. 6698 applies, these grounds correspond to the relevant processing conditions under Articles 5 and 9. Where the GDPR or UK GDPR applies, the corresponding grounds include consent, contractual necessity, legal obligation and legitimate interests, as applicable.

5. Cookies and similar technologies

Essential preference cookie

sophon-consent-v1 is a first-party cookie used to remember your cookie choice. It is not used for analytics or advertising and is necessary for the preference mechanism to operate. It is created through Cloudflare Zaraz and may remain for up to approximately one year.

Google Analytics cookies

If you accept analytics cookies, the following first-party cookies may be used:

  • _ga: Distinguishes visitors. Its default duration is two years.
  • _ga_[measurement ID]: Maintains session state. Its default duration is two years.

Browser policies may shorten these periods. These cookies are not created or read when analytics storage is denied.

You may change your choice at any time through the "Cookie Preferences" link in the website footer. You may also delete or block cookies through your browser settings.

6. Recipients and international transfers

Where necessary, information may be disclosed to:

  • Cloudflare for hosting, content delivery, security and tag management,
  • Google for analytics,
  • Email, communications, technical-support and IT service providers,
  • Courts, regulators and other legally authorised public authorities.

These providers may process information outside Türkiye or your country of residence. International transfers are made only where a lawful transfer mechanism applies, including an adequacy decision, appropriate safeguards such as applicable standard contractual clauses, or a legally permitted derogation.

Where explicit consent is relied upon for a particular international transfer, you will receive the required information before that transfer takes place.

7. Retention

  • Contact-form records are retained for as long as necessary to respond to your enquiry and manage any resulting business relationship, followed by any applicable statutory or limitation period.
  • Technical and security records are retained only for the period reasonably required for security and according to the relevant provider configuration.
  • Your cookie preference may remain for up to approximately one year.
  • User-level and event-level Google Analytics data may be retained for 2 or 14 months, depending on the Analytics property configuration. Retention of aggregated standard reports is governed by Google's service policies.
  • Information is deleted, destroyed or anonymised when it is no longer required.

8. Your rights

Subject to the law applicable to you, you may have the right to:

  • Obtain confirmation of whether your personal data is processed and request access,
  • Request correction of inaccurate or incomplete data,
  • Request deletion or restriction of processing,
  • Learn the purposes of processing and the recipients of the data,
  • Object to processing based on legitimate interests,
  • Object to a decision based solely on automated processing,
  • Receive data in a portable format where applicable,
  • Withdraw consent at any time,
  • Request compensation where unlawful processing has caused damage,
  • Lodge a complaint with the competent data-protection authority.

To exercise your rights, send a request containing sufficient information to verify your identity and understand your request to Küçükbakkalköy Mah. Selvili Sk. No: 4 İç Kapı No: 48, Ataşehir/İstanbul, Türkiye or, where legally permitted, to hello@sophonstudio.com from an email address previously provided to us.

Requests under the Turkish Personal Data Protection Law will be answered as soon as possible and no later than 30 days, subject to applicable law.

9. Changes to this policy

We may update this policy when our services, processing activities or legal obligations change. The current version and its update date will be published on this page.