Skip to content
EN TR

Privacy Policy

Last updated: 21 August 2026

Leopati Agency cares about the protection of personal data and the secure handling of information belonging to site visitors, artists, brands and project partners. This Privacy Policy explains how personal data is processed in connection with communications, site use and project enquiries made through www.leopati.com and its language versions.

1. Data controller and contact details

For the purposes of this Policy, the data controller is Güneş Polater, the founder and an independent creative professional who operates the Leopati Agency brand and studio. Leopati Agency is not a separate registered company — it is the trading name under which Güneş Polater provides creative production services from Ankara, Türkiye.

Contact details:

2. Personal data we may process

When you contact us by email, WhatsApp or another communication channel published on the site, we may process your name, email address, telephone number, company or brand details, the content of your message and project information that you choose to provide. Depending on the project, this may include creative briefs, budgets, timelines, references, images, videos, audio files, scripts and related materials.

When you visit the site, technical records may include your IP address, browser and device information, approximate location, pages visited, referring page and date/time information. The scope of this processing depends on the cookie and analytics settings in use.

If you contact us through Leopati profiles on social media, freelance platforms or other third-party services, the privacy policy of the relevant platform also applies. Leopati is not responsible for the data processing activities of those platforms.

3. Purposes of processing

We may process personal data to respond to enquiries, understand project requirements, prepare proposals or initial assessments, conduct contract discussions, plan and deliver production services, manage project files, maintain communications and rights-related records, keep the site secure and operational, measure site use and improve the content experience.

We may also use data to comply with legal obligations, establish or protect our rights in disputes, prevent misuse and security incidents, and respond to lawful requests from public authorities.

4. Legal bases

Personal data may be processed under the Turkish Personal Data Protection Law No. 6698 and other applicable legislation on the basis of, where relevant, the necessity of processing for the establishment or performance of a contract, compliance with a legal obligation, the establishment, exercise or protection of a right, the legitimate interests of the data controller, and applicable security requirements.

For non-essential analytics, functional or marketing cookies, we obtain your consent where applicable law requires it. You may withdraw consent at any time through the cookie preference interface or by contacting us. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

5. Cookies and embedded content

The Leopati website may use cookies that are strictly necessary for the site to operate. Where you permit it, the site may also enable technologies for usage measurement and analytics and may load embedded video or similar content. When you first visit the site, the cookie preference interface allows you to accept, reject or later change non-essential categories.

Cookie categories and providers may change over time, so the current explanations in the cookie preference interface should be treated as the most up-to-date source. Disabling non-essential cookies may affect analytics functions or embedded media. You can also delete or block cookies through your browser settings.

Cookies and local storage currently in use

The list below states the cookies and browser storage keys actually used on www.leopati.com, checked directly rather than assumed. Where an exact duration could not be independently confirmed, that is stated rather than estimated.

Embedded media (YouTube). A project’s case-study video is not loaded until you allow the Media & marketing category and then actively choose to play it. Once loaded, the video is served from YouTube’s privacy-enhanced domain (youtube-nocookie.com) inside a separate frame controlled by Google. Any cookies or storage that frame sets are created by Google in its own context, not by leopati.com, and are not directly readable or listed by this site.

Cloudflare performance beacon. Separately from the cookie categories above, this site’s hosting network (Cloudflare) sends a short performance beacon (/cdn-cgi/rum) on page load to measure loading speed and Core Web Vitals. It does not set a browser cookie or use local storage, and it is not part of the Analytics consent category — it is disclosed here as a distinct technical measurement, separate from on-site analytics.

Your control. Analytics and Media & marketing are switched off by default; each can be turned on or off independently, and Necessary cannot be disabled because the site could not function without it. You can review or change your choice at any time using “Manage privacy preferences” in the site footer.

6. Recipients and transfers

Personal data may be shared, only to the extent necessary for the relevant purpose, with hosting, domain, CDN and technical maintenance providers; email and communications providers; site security and analytics providers; embedded media providers; accounting or legal advisers; project partners engaged for a production; and competent public authorities.

If files submitted for a project need to be processed through selected storage, production, editing, AI-assisted generation or similar third-party services, the processing will be limited to what the service requires and applicable privacy, security and contractual safeguards will be considered. If a project-specific data processing or confidentiality arrangement is agreed, that arrangement may take priority over this Policy for the relevant project.

Some service providers may be located outside Türkiye. If an international transfer occurs, the requirements and safeguards applicable to international transfers under the relevant legislation will be considered. You may contact us to ask for current provider or transfer details.

7. Retention

Personal data is retained for as long as necessary for the relevant purpose and, where applicable, for the retention, limitation or dispute periods required by law. Communication records may be kept after a project assessment or contractual relationship ends to the extent required by the processing purpose and legal obligations. Technical logs and cookie periods may vary depending on the relevant system and provider configuration.

8. Security

We apply reasonable technical and organisational security measures to prevent unlawful processing, access, alteration or loss of personal data. No transfer over the internet can be guaranteed to be completely risk-free; please avoid sending sensitive or unnecessary personal information by email, WhatsApp or any other channel.

9. Your rights

Under applicable data protection law, including Article 11 of Turkish Personal Data Protection Law No. 6698 where applicable, you may have the right to learn whether your personal data is processed; request information about the processing; learn the purposes of processing and whether data is used consistently with those purposes; learn the third parties to whom data is transferred in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where the legal conditions are met; request notification of correction, deletion or destruction to third parties; object to an adverse result arising from analysis by automated systems; and seek compensation for damage caused by unlawful processing.

You may send requests, together with information sufficient to verify your identity, to [email protected]. Requests will be assessed in accordance with the applicable procedures and time limits. We may need to verify your identity, clarify the scope of a request or ask for additional information.

10. Children’s data

The site and services are designed for adult users and professional project partners. We do not knowingly aim to collect children’s personal data. If you believe that a child has sent us personal data, please contact us at [email protected].

11. Changes to this Policy

This Policy may be updated when our services, cookies, legal obligations or business processes change. The current version will be published on this page and the last-updated date at the top of the page will be changed.