Skip to content
EN TR
Start a project

Looking for the answer to a question? See the frequently asked questions

Privacy Policy

Last updated: 19 October 2026

Leopati Agency cares about the protection of personal data and the secure handling of information belonging to site visitors, artists, brands and project partners. This Privacy Policy explains how personal data is processed in connection with communications, site use and project enquiries made through www.leopati.com and its language versions.

1. Data controller and contact details

For the purposes of this Policy, the data controller is Güneş Polater, the founder of Leopati Agency. Leopati Agency is an AI agency founded by Güneş Polater, based in Ankara, Türkiye, and operates as a sole proprietorship. Address: Kavaklıdere Mahallesi, Atatürk Bulvarı No: 68, Floor 5, 06700 Çankaya/Ankara, Türkiye.

Contact details:

2. Personal data we may process

When you contact us by email, WhatsApp or another communication channel published on the site, we may process your name, email address, telephone number, company or brand details, the content of your message and project information that you choose to provide. Depending on the project, this may include creative briefs, budgets, timelines, references, images, videos, audio files, scripts and related materials.

When you visit the site, technical records may include your IP address, browser and device information, approximate location, pages visited, referring page and date/time information. The scope of this processing depends on the cookie and analytics settings in use.

If you contact us through Leopati profiles on social media, freelance platforms or other third-party services, the privacy policy of the relevant platform also applies. Leopati is not responsible for the data processing activities of those platforms.

Forms on the site. Messages you send through the contact form are, in addition to being delivered by email, recorded in the site’s administration panel. When you submit a question from a project or service page, your name, optionally your organisation, your email address and the text of your question are processed; answered questions may be published on the site with their answer and without your name, organisation or email address, and your email address is used only to tell you that the answer has been published. When you write a client review at Leopati’s invitation, your email address, organisation, job title, name and the text of your review are processed; the review is published with your consent, signed with the organisation, failing that the job title, failing that your name. For each email address used in these activities a summary contact record is kept, consisting of name, organisation, telephone and the times of the first and latest activity. A security verification runs during form submissions to check that a submission is not made by automated tools.

3. Purposes of processing

We may process personal data to respond to enquiries, understand project requirements, prepare proposals or initial assessments, conduct contract discussions, plan and deliver production services, manage project files, maintain communications and rights-related records, keep the site secure and operational, measure site use and improve the content experience.

We may also use data to comply with legal obligations, establish or protect our rights in disputes, prevent misuse and security incidents, and respond to lawful requests from public authorities.

4. Legal bases

Personal data may be processed under the Turkish Personal Data Protection Law No. 6698 and other applicable legislation on the basis of, where relevant, the necessity of processing for the establishment or performance of a contract, compliance with a legal obligation, the establishment, exercise or protection of a right, the legitimate interests of the data controller, and applicable security requirements.

For non-essential analytics, functional or marketing cookies, we obtain your consent where applicable law requires it. You may withdraw consent at any time through the cookie preference interface or by contacting us. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

5. Cookies and embedded content

The Leopati website may use cookies that are strictly necessary for the site to operate. Where you permit it, the site may also enable technologies for usage measurement and analytics. When you first visit the site, the cookie preference interface allows you to accept, reject or later change non-essential categories. Playing embedded video does not depend on your cookie choice; see “Embedded media (YouTube)” below.

Cookie categories and providers may change over time, so the current explanations in the cookie preference interface should be treated as the most up-to-date source. Disabling non-essential cookies may affect analytics functions. You can also delete or block cookies through your browser settings.

Cookies and local storage currently in use

The list below states the cookies and browser storage keys actually used on www.leopati.com, checked directly rather than assumed. Where an exact duration could not be independently confirmed, that is stated rather than estimated.

Embedded media (YouTube). Video content on our website is embedded directly via the privacy-enhanced youtube-nocookie.com domain. No marketing or tracking cookies are stored prior to playback. Once playback starts, YouTube/Google may store technical identifiers required for video stream performance and functionality.

Cloudflare performance beacon. Separately from the cookie categories above, this site’s hosting network (Cloudflare) sends a short performance beacon (/cdn-cgi/rum) on page load to measure loading speed and Core Web Vitals. It does not set a browser cookie or use local storage, and it is not part of the Analytics consent category, it is disclosed here as a distinct technical measurement, separate from on-site analytics.

Your control. Analytics and Media & marketing are switched off by default; each can be turned on or off independently, and Necessary cannot be disabled because the site could not function without it. You can review or change your choice at any time using “Manage privacy preferences” in the site footer.

6. Recipients and transfers

Personal data may be shared, only to the extent necessary for the relevant purpose, with hosting, domain, CDN and technical maintenance providers; email and communications providers; site security and analytics providers; embedded media providers; accounting or legal advisers; project partners engaged for a production; and competent public authorities.

If files submitted for a project need to be processed through selected storage, production, editing, AI-assisted generation or similar third-party services, the processing will be limited to what the service requires and applicable privacy, security and contractual safeguards will be considered. If a project-specific data processing or confidentiality arrangement is agreed, that arrangement may take priority over this Policy for the relevant project.

Some service providers may be located outside Türkiye. If an international transfer occurs, the requirements and safeguards applicable to international transfers under the relevant legislation will be considered. You may contact us to ask for current provider or transfer details.

7. Retention

Personal data is retained for as long as necessary for the relevant purpose and, where applicable, for the retention, limitation or dispute periods required by law. Communication records may be kept after a project assessment or contractual relationship ends to the extent required by the processing purpose and legal obligations. Technical logs and cookie periods may vary depending on the relevant system and provider configuration.

Form messages, questions, review invitations and contact records are kept for 12 months from the date of the latest activity; at the end of that period they are deleted or anonymised. Published questions and reviews are kept for as long as they remain published; the email address and name behind them are deleted at the end of the 12 months. You may ask at any time for a published question or review to be removed. Further detail is given in the Personal Data Notice (KVKK).

8. Security

We apply reasonable technical and organisational security measures to prevent unlawful processing, access, alteration or loss of personal data. No transfer over the internet can be guaranteed to be completely risk-free; please avoid sending sensitive or unnecessary personal information by email, WhatsApp or any other channel.

9. Your rights

Under applicable data protection law, including Article 11 of Turkish Personal Data Protection Law No. 6698 where applicable, you may have the right to learn whether your personal data is processed; request information about the processing; learn the purposes of processing and whether data is used consistently with those purposes; learn the third parties to whom data is transferred in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where the legal conditions are met; request notification of correction, deletion or destruction to third parties; object to an adverse result arising from analysis by automated systems; and seek compensation for damage caused by unlawful processing.

You may send requests, together with information sufficient to verify your identity, to agency@leopati.com. Requests will be assessed in accordance with the applicable procedures and time limits. We may need to verify your identity, clarify the scope of a request or ask for additional information.

9A. Visitors in the EEA, the United Kingdom and Switzerland (GDPR)

If you are in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation (or its UK equivalent) also applies to the way Leopati handles your personal data. The data controller is Güneş Polater (Leopati Agency); contact: agency@leopati.com.

Legal bases (Article 6 GDPR). We rely on:

Analytics before you choose. Until you make a choice, the Google tag runs in a restricted mode: analytics storage is denied, no analytics cookies are set, and only limited signals such as the page address and browser information are sent to Google, without cookies. Full analytics starts only if you accept.

Retention. Contact-form messages, questions, review invitations and other enquiry records are kept for 12 months from the date of the latest activity and are then deleted. Google Analytics keeps event-level and user-level data for 14 months, which is the longest period its standard setting allows; reports built from it are aggregated. Accounting records are kept for the period required by law.

Where your data is processed. Leopati is established in Türkiye and this website is hosted in Türkiye. Personal data you send us is therefore received and stored in Türkiye. Türkiye is outside the EEA, and personal data you send us directly is received by Leopati there. Service providers such as Cloudflare and Google may process data in other countries; they do so under the safeguards they offer, such as the EU-US Data Privacy Framework where the provider is certified, or standard contractual clauses.

Your rights. You may ask for access to your data, correction, erasure, restriction, portability, and you may object to processing and withdraw consent. Write to agency@leopati.com; we reply within one month. You also have the right to complain to your local data protection supervisory authority; in Türkiye this is the Personal Data Protection Board (KVK Kurulu).

10. Children’s data

The site and services are designed for adult users and professional project partners. We do not knowingly aim to collect children’s personal data. If you believe that a child has sent us personal data, please contact us at agency@leopati.com.

11. Changes to this Policy

This Policy may be updated when our services, cookies, legal obligations or business processes change. The current version will be published on this page and the last-updated date at the top of the page will be changed.