PRIVACY

KVKK
privacy notice.

How we handle the personal data you share with us, under Türkiye’s Personal Data Protection Law (KVKK, No. 6698).

In short

  • We only collect what you send us: your name, contact details and message.
  • We use it to reply to you and, if we work together, to run the project.
  • We don’t sell your data, and this website uses no cookies or tracking.
  • You can ask us to see, correct or delete your data at any time.

This notice is provided under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”). It explains how we process the personal data of people who visit our website, fill out our contact form or get in touch with us in any other way.

1. Who we are

The data controller is ARM Creative, operating as Arm Creative (armcreativeworks), an AI-powered creative agency based in Istanbul, Türkiye.

Address
Beşiktaş, Istanbul, Türkiye

2. What we collect

  • Identity: your name.
  • Contact: your email address and, if you share it, your phone number.
  • Professional: your company or brand name, if you share it.
  • Your request: the service you’re interested in, your message and anything else you choose to tell us.
  • Consent record: that you ticked the privacy box on our form, and when.
  • Technical: your IP address, browser type and the pages you requested, recorded briefly by our hosting provider for security and to keep the site running.

Please don’t send us special categories of personal data (such as health information) through the form. We don’t need it and don’t ask for it.

3. How we collect it

We collect your data partly by automated and partly by non-automated means:

  • through the contact form on our website;
  • when you email us, call us or message us on WhatsApp or Instagram;
  • automatically, through our hosting provider’s server logs, when you visit the site.

4. Why we use it and on what legal basis

We process your data to:

  • reply to your message and answer your questions;
  • prepare an offer and plan a project with you;
  • run the project and stay in touch if we work together;
  • keep our website secure and working;
  • meet our legal obligations, for example on records and invoicing.

We rely on the following legal grounds under Article 5(2) of the KVKK:

  • processing is necessary to set up or carry out a contract with you, when you ask us for an offer or work with us (Article 5(2)(c));
  • processing is necessary for us to comply with a legal obligation (Article 5(2)(ç));
  • processing is necessary for our legitimate interests, such as answering inquiries and keeping our website secure, without harming your fundamental rights and freedoms (Article 5(2)(f)).

Where the law requires your explicit consent, we ask for it separately, and you can withdraw it at any time.

5. Who we share it with

We never sell your personal data. We only share it, as far as needed, with:

  • Web3Forms, which delivers the messages sent through our contact form to our inbox;
  • Cloudflare, which hosts and secures this website;
  • our email provider, where our inbox is kept;
  • Meta (WhatsApp, Instagram), only if you choose to contact us there; their own privacy terms apply;
  • public authorities, when the law requires it.

Some of these providers keep data on servers outside Türkiye. Such transfers are made in line with Article 9 of the KVKK and the safeguards it requires.

6. How long we keep it

We keep your data only as long as we need it for the purposes above. Messages that don’t lead to a project are kept for up to two years after our last contact. If we work together, we keep project and invoicing records for as long as Turkish law requires. After that, your data is deleted, destroyed or anonymised.

7. Your rights

Under Article 11 of the KVKK, you have the right to:

  • find out whether we process your personal data;
  • ask for information about that processing;
  • learn why we process it and whether we use it for that purpose;
  • know who we transfer it to, in Türkiye or abroad;
  • ask us to correct it if it’s incomplete or wrong;
  • ask us to delete or destroy it under the conditions in Article 7 of the KVKK;
  • ask us to tell the people we shared it with about any correction or deletion;
  • object to a result against you that comes only from automated analysis of your data;
  • claim compensation if you suffer damage because your data was processed unlawfully.

8. How to use your rights

Send your request in writing to hello@armcreativeworks.com, or by post to the address above, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Please include your name and contact details and tell us clearly what you’re asking for, so we can confirm it’s you.

We’ll answer within 30 days at the latest, free of charge. If answering requires a significant cost, we may charge the fee set by the Personal Data Protection Board. If you’re not happy with our answer, you can complain to the Personal Data Protection Authority (KVKK Kurumu).

9. Cookies and tracking

This website doesn’t use cookies, analytics or advertising trackers, and our fonts are served from our own site. Links to Instagram, LinkedIn and WhatsApp take you to those services, which have their own privacy policies. If we ever add analytics or cookies, we’ll update this notice first and ask for your consent where needed.

10. Changes to this notice

We may update this notice when our services or the law change. The latest version is always on this page.

Last updated: November 2026

Questions about your data? Reach us through the contact page or at hello@armcreativeworks.com.

LET’S TALK

Tell us about your brand.

We reply within a day. In a hurry? Message us on WhatsApp.