Privacy Policy

Who is responsible for your data?

For the purposes of this policy, the data controller isLook Advertising Studio. The data controller determines the purposes and means by which personal data is processed.

For privacy and personal data requests, you may contact us athello@lookcreative.agencyor by phone at0 (536) 282 32 79.

What data may be processed?

The categories of personal data processed may vary depending on how you use the website and the channel through which you contact us. Please do not share data that has not been requested or is unrelated to the relevant purpose.

• Identity and contactName and surname, company/brand name, email address, telephone number and your preferred communication channel.
• Request and projectMessages, briefs, quotation requests, project scope, files you submit and communication history.
• Technical and usageIP address, browser/device information, visit time, referring page, security records and server logs.
• Cookies and preferencesCookie identifiers, consent preferences and, where enabled, analytics or marketing interactions.

Why do we process data and on what legal basis?

Personal data is processed for specified, explicit and legitimate purposes and in a manner that is relevant and proportionate to those purposes. The applicable legal basis is assessed separately for each processing activity.

How is data collected?

Data may be collected through contact or quotation forms on the website, email, telephone, online meetings, files you provide, server logs, cookies and similar digital technologies, by automated, partially automated or non-automated means provided that the processing forms part of a data filing system.

If a different processing activity takes place through a form or communication channel, an activity-specific privacy notice should be provided when the personal data is collected.

With whom may data be shared and for what purposes?

Personal data may be shared only to the extent required for the relevant service with hosting and website infrastructure providers, email and communication service providers, information technology and security vendors, authorised analytics or media services, legal and financial advisers, business partners and public authorities authorised by law.

Such transfers are limited to operating the website, responding to requests, managing project and contract processes, ensuring security, fulfilling legal obligations and protecting legal rights.

International transfers

Where infrastructure, cloud, email, analytics or embedded media services located abroad are used, personal data may be transferred outside Türkiye. Any such transfer is carried out in accordance with the applicable mechanism under Article 9 of Law No. 6698, including an adequacy decision, appropriate safeguards or the limited exceptional circumstances provided by law.

Cookies and similar technologies.

Strictly necessary cookies may be used to enable website functionality and ensure security. Where functional, performance/analytics or advertising/marketing cookies are used, and no other lawful processing condition applies, those cookies should not be activated before the user's preference is obtained and the available choices should be presented separately.

You can delete or block cookies through your browser settings. Blocking strictly necessary cookies may prevent certain parts of the website from functioning as expected.

How long is data retained?

Personal data is retained by taking into account the period necessary for the processing purpose, the contractual relationship, mandatory retention periods under applicable legislation, limitation periods and the period required to protect rights in potential disputes.

When the purpose of retention or legal basis ceases to exist, the data is erased, destroyed or anonymised in accordance with applicable legislation and the company's retention and disposal policy.

How do we protect your data?

We implement technical and organisational measures proportionate to the nature of the processing and the level of risk in order to prevent unlawful processing and access and to safeguard personal data. Examples include access controls, password and account security, up-to-date systems, logging and monitoring, backups, vendor assessment and staff awareness.

No method of transmission or storage over the internet can guarantee absolute security; nevertheless, we maintain reasonable and practicable measures to reduce risks and respond to incidents in a timely manner.

Your rights under Law No. 6698.

Under Article 11 of Law No. 6698, you may apply to the data controller to exercise the following rights:

• Learn whether data is processedLearn whether your personal data is being processed.
• Request informationRequest information if your personal data has been processed.
• Learn the purposeLearn the purpose of processing and whether the data is used in accordance with that purpose.
• Know the recipientsKnow the third parties to whom your personal data has been transferred in Türkiye or abroad.
• Request rectificationRequest rectification of incomplete or inaccurate personal data.
• Request erasure or destructionRequest erasure or destruction where the conditions under the Law are met.
• Request notificationRequest that rectification and erasure operations be notified to third parties to whom the personal data has been transferred.
• Object to automated outcomesObject to a result that is against you where it arises exclusively from analysis by automated systems.
• Claim compensationClaim compensation if you suffer damage due to unlawful processing of personal data.

How can you exercise your rights?

You may submit your request together with sufficient information to verify your identity and the subject of your request, in writing to the office addresses above, to our registered electronic mail (KEP) address if available, using a secure electronic signature or mobile signature, or through an email address that you have previously provided to us and that is registered in our systems.

For general contact and guidance regarding privacy requests, you may usehello@lookcreative.agency. Requests are concluded free of charge as soon as possible and, as a rule, no later than 30 days depending on their nature. If the procedure requires an additional cost, the fee determined by the Personal Data Protection Board may apply.

Links and embedded content.

The website may contain YouTube videos, social media links, maps, forms or similar third-party content. When you interact with these services, the relevant provider may use its own cookies or similar technologies and process data in accordance with its own privacy policy.

We are not responsible for the content, security or privacy practices of third-party websites. We recommend reviewing the relevant provider's policy before opening a link or interacting with the service.

Can this policy change?

This policy may be updated when our services, the technologies we use or applicable legislation changes. The current version is published on this page together with its effective date. Where appropriate, significant changes may also be communicated through suitable channels.

Last updated:11 August 2026