Privacy notice.

This Project Inquiry Privacy Notice explains who handles your data, what is collected, why it is used, the legal grounds, who may receive it, how long it is kept and how to exercise your rights. It is designed as a collection-specific notice rather than a general-purpose privacy policy.

1. Data controller and contact

Controller: Batuhan Berkay Tunç
Business type: Sole proprietorship established in Türkiye
Trading name: Beaduck Localization Studio
Service address: Birlik Mahallesi, 428. Cadde, 365 Alışveriş Merkezi, No: 41, Çankaya, Ankara, Türkiye
Privacy and project contact: hello@beaduckstudio.com

The controller determines why and how personal data submitted through the project inquiry form and published business email is processed.

2. Scope and data collected

This notice covers information you provide when asking about a potential localization project. Depending on what you choose to submit, this may include your name, work email, studio or company, game or project name, approximate word count, target language, target date, platform, requested services, message content and related correspondence.

The web server may also process limited technical data needed to deliver and protect the form, such as request time, IP address, browser-generated request headers and short-lived session information.

Do not use this form for passwords, access tokens, payment data, identity documents, special-category personal data or unreleased game files. A separate, appropriately protected transfer channel can be agreed if a project moves forward.

3. Purposes

Inquiry data is used only to:

• review and understand your request;
• communicate with you about scope, schedule, files and access;
• prepare and discuss a project-specific quotation or possible agreement;
• maintain necessary business correspondence and records;
• protect the form, mailbox and website against spam, fraud and technical abuse;
• establish, exercise or defend legal claims and comply with applicable law where necessary.

Submitting an inquiry does not subscribe you to marketing messages. Beaduck does not sell inquiry data or use it for advertising profiles.

4. Legal grounds

Under Türkiye’s Law No. 6698 on the Protection of Personal Data (KVKK), processing is intended to rely, as applicable, on the grounds that it is necessary to take steps relating to a possible agreement at your request, necessary for the establishment or performance of an agreement, necessary for the controller’s legitimate interests without harming your fundamental rights and freedoms, necessary to comply with legal obligations, or necessary for the establishment, exercise or protection of a right.

Where the EU or UK GDPR applies, the corresponding grounds may include steps at your request before entering into a contract, performance of a contract, compliance with legal obligations and legitimate interests in responding to genuine business inquiries, maintaining limited business records and protecting the service. Beaduck does not rely on the form itself as consent for unrelated marketing.

5. Recipients, service providers and international transfers

Access is limited on a need-to-know basis to the Beaduck team members responsible for project review and administration. Data may also be processed by the website hosting provider and business email provider solely to host the service and deliver correspondence; by professional advisers where necessary; or by competent authorities where disclosure is legally required.

Website hosting: GoDaddy Economic Web Hosting (cPanel), with Europe selected as the hosting region in the customer account, provided by the GoDaddy contracting entity identified in that account and supported by affiliated infrastructure providers. The current hosting endpoint resolves to a GoDaddy/Host Europe network registered in Germany. Network registration and the selected region do not by themselves guarantee the physical location of every processing operation.
Business email: GoDaddy business email, provided by the GoDaddy contracting entity identified in the customer account. Email data may be processed through GoDaddy’s international infrastructure, affiliates and documented subprocessors; GoDaddy’s current list identifies Titan Solution Ltd SEZC in the Cayman Islands for mailbox provisioning.

Because these services involve processing outside Türkiye, the controller must document and apply the transfer mechanism required by KVKK Article 9 and any other law applicable to the relevant transfer before enabling the public inquiry form.

6. Retention

An inquiry that does not become a project is scheduled for deletion or anonymisation no later than 12 months after the last substantive correspondence, unless a shorter period is requested or a longer period is necessary to establish, exercise or defend a legal claim. If an inquiry becomes a client relationship, relevant correspondence and transaction records may be retained for the duration of the relationship and the statutory periods that apply to contractual, accounting and legal records.

The form’s rate-limit session expires when the browser session ends. Operational security records, if generated by the hosting provider, are retained according to the confirmed provider’s documented security schedule.

7. Cookies, analytics and automated decisions

The current website does not use analytics, advertising trackers, behavioural profiling or non-essential cookies. When the form is submitted, a strictly necessary first-party session cookie is used to slow repeated submissions; it is not used to track visitors across websites. Its name, purpose, duration and controls are documented in the separate Cookie Policy.

Inquiry data is not used for automated decision-making or profiling. A person reviews each genuine project inquiry.

8. Your rights

Depending on the law that applies, you may ask whether personal data is processed, request access or a copy, request correction, deletion or restriction, object to certain processing, request information about recipients, and exercise the other rights available under KVKK Article 11 or applicable GDPR rules. You may also lodge a complaint with the Turkish Personal Data Protection Authority or another competent supervisory authority where the relevant law permits.

Send a request to hello@beaduckstudio.com with enough information to identify the relevant inquiry. Additional information may be requested only when reasonably necessary to verify identity and protect the data from unauthorised disclosure.

9. Security and confidential project material

Beaduck applies data minimisation, access limitation, HTTPS, restrictive browser security headers and form-abuse controls. No internet transmission is completely risk-free. Confidential builds, localization kits and unreleased assets should be exchanged only through a separately agreed secure channel and, where appropriate, after confidentiality terms are in place.

10. Changes

This notice will be reviewed whenever the form, business identity, hosting, email infrastructure, retention practice or applicable processing activity changes. Material changes will be reflected by a new effective date at the top of the page.