Legal

Privacy Policy

Last updated · July 19, 2026

This site takes visitor and client privacy as seriously as the quiet of a photo set. What is stored, and why, written plainly.

Cookies and analytics

The site uses cookies through Google Tag Manager (GTM). Google Analytics 4 runs for analytics, and Google Ads for ad measurement and remarketing. We group cookies into three categories: necessary (required for the site to work, always on), analytics and marketing. On first visit, Google Consent Mode v2 keeps all optional cookies off by default; no analytics or advertising cookie runs until you give consent. From the banner you can Accept, Reject or Manage preferences, and you can change your choice any time from the Cookie preferences link in the footer.

Images and content storage

Request and contact data are kept first-party on our own server; access is limited to the authorised admin account and transfers are encrypted via TLS. Delivery galleries are shared privately with the client after the shoot.

Marketing consent

If you want new series, seasonal openings or a quiet note from us, you tick the newsletter box. Consent is opt-in, never pre-ticked, and withdrawn with one click via the unsubscribe link at the foot of every email.

Children's data

Our services are not directed at people under 18 and we do not knowingly collect their data. If you believe a child has submitted information, please contact us and we will remove the record.

Cross-border transfers

Request and contact data are kept on our own server. No third-party analytics or marketing transfer takes place other than Google (EU/US; Google Analytics 4 and Google Ads). Transfer to Google happens only when you consent to analytics or marketing cookies. Any US-side transfer takes place under Standard Contractual Clauses and the current Data Privacy Framework.

Security and compliance

We apply encrypted transport (TLS), password-protected admin sign-in and attempt throttling (brute-force protection). The policy is aligned with GDPR and KVKK principles. In the event of a suspected breach we notify affected parties and authorities without undue delay.

Request verification

We use Cloudflare Turnstile to protect the quote form against automated abuse. Connection, browser and device information may be processed by Cloudflare during this check. Your request is forwarded to our team after you press “Confirm” on the page linked in your email. The link is valid for 48 hours; unconfirmed requests are deleted seven days after creation.

Questions: info@mervekansu.com.tr