Project enquiry privacy notice.

Information we collect

• Identity and contact details: name, business email, optional telephone number and company.
• Enquiry details: project name, message, selected services, budget, timing and referral source.
• Attribution data: page URL, referrer, UTM source, medium and campaign.
• Consent records: policy version, time of consent and optional marketing choice.
• Security data: a one-way hash derived from the submitting IP address, browser user-agent and submission time. The plain IP address is not stored in the CRM enquiry record.

Why we process it

We use the information to evaluate and respond to an enquiry, communicate about a potential collaboration, prepare proposals, maintain necessary business records and protect the form from abuse. The required project-contact acknowledgement applies only to handling the enquiry. Optional marketing consent is separate and is not required to submit the form.

Sharing and international processing

Information is processed using contracted hosting, database and email providers required to operate the website and CRM. Access is limited to authorised SOART personnel and providers acting on SOART’s instructions. Some providers may process information outside Türkiye; the safeguards required for the relevant transfer will be applied before commercial use.

Operational retention targets

• Unqualified or inactive enquiries: review after 12 months and delete or anonymise when there is no continuing business or legal need.
• Proposal and active project records: retain during the relationship, then review against contractual, accounting and legal obligations.
• Security metadata and consent evidence: minimise during scheduled reviews and retain only while needed to demonstrate the request, protect the service or meet an applicable obligation.
• Optional marketing records: retain until consent is withdrawn or the list is retired, subject to a periodic suppression and accuracy review.

These are operational limits, not permission to retain every record until the maximum period. Records should be removed earlier when they are no longer necessary.

Your choices and rights

You may ask for access to information about you, correction, deletion where applicable, restriction or objection, and may withdraw optional marketing consent at any time. Send requests to hello@soart.studio. The requester will be verified before CRM records are disclosed or changed.

Security and incident handling

SOART uses encrypted transport, server-side validation, access controls, database access policies, audit records, rate limiting and spam protection. No internet service can guarantee absolute security. Suspected incidents are assessed, contained and documented, and affected parties or authorities are notified where required.

Changes

The consent record stores the policy version shown at the top of this page. Material changes receive a new version so the text accepted with an enquiry can be identified.