Personal Data Protection — Privacy Notice
Last updated: July 2026
Data controller
Supramoon, Istanbul.
What we collect
Through the forms on our site: your name (or brand name), email address and the message/brief you share; on the discovery form, also the service area you are interested in. We receive your data only when you submit a form; we do no automated profiling.
Why we process it
To respond to your request, schedule a call and prepare a tailored approach (Turkish DP Law art. 5/2-c). For talent-pool applications, to evaluate your application. The anonymous flow measurement on the discovery form contains no personal data.
Who it is shared with
Form data is processed through our email infrastructure provider Google (Gmail); servers may be located abroad, which is why we ask for your explicit consent on the forms. Your data is also stored in our client management panel, accessible only to our team. It is never shared with third parties for marketing.
How long we keep it
Until your request is concluded; if no working relationship is formed, we delete it within 2 years at the latest.
Your rights (art. 11)
To access, correct, delete or object to the processing of your data, write to hello@supramoon.com; we respond within 30 days at the latest.
For cookies, see the Cookie & Privacy Policy