Legal Privacy & Cookie Policy
Last updated: October 22, 2026
This notice has been prepared under Law No. 6698 on the Protection of Personal Data (KVKK) to inform you about the personal data processed through the eaxstudio.com website.
Data controller
Your personal data is processed by EAX Studio in its capacity as data controller. For any requests regarding this notice, you can write to info@eaxstudio.com.
This English version is provided for convenience; in case of any discrepancy, the Turkish version prevails.
What data do we process?
- Contact form: full name, email address, company name (if provided), budget range and the content of your message.
- Booking form: full name, email address, phone number, meeting type, the date and time you select, the service you are interested in and your note (if provided).
- Source information: the page through which you first entered the site, the domain of the site that referred you (e.g. google.com) and campaign tags. This information is stored in your browser, does not contain anything that identifies you, and is sent to us together with a form only when you submit that form. When you click our WhatsApp or phone link, only this source information and the page you clicked on are counted, so we can see which pages are useful; your name, phone number, IP address and the content of your conversation are not recorded.
- Analytics data: only if you give cookie consent, page view and interaction data via Google Analytics (details below).
- EAX Studio statistics: only if you give cookie consent, our own statistics system measures the pages you view and how long you stay, where on the page you click and the text of the link or button you click, whether you submit a form (only which form, never what you typed), whether you click a WhatsApp, phone or App Store link, your device type, browser, language and screen size, and where you came from. Only an approximate city and country is derived from your IP address; your IP address is not stored. These records are never linked to your name, email or phone number.
- Ad measurement data: only if you give cookie consent, via the Meta Pixel: the pages you view, whether you submit a form and whether you click an App Store link. The name, email address, phone number or other details you type into our forms are not sent to Meta. For our Google ads, again only if you give consent, Google Ads measures whether you clicked an ad and then submitted a form; the details you type into our forms are not sent to Google Ads.
- Chat assistant (Zipp): if you use the chat assistant at the bottom right, the messages you write, any name, phone number or email you choose to share in the chat, your chat rating, your IP address and the time of the chat. Using the assistant is entirely optional; please do not share special categories of personal data, such as health information, in the chat.
Purposes of processing and legal bases
- To respond to your request, to create and confirm your booking, and to communicate with you — because it is necessary for the establishment of a contract (KVKK Art. 5/2-c).
- To improve our website and services by measuring which pages and channels generate inquiries — legitimate interest (KVKK Art. 5/2-f).
- To analyze site usage through analytics cookies and EAX Studio statistics, understand which pages and sections are useful, and improve the site — your explicit consent (KVKK Art. 5/1). You can withdraw your consent at any time.
- To measure whether our Google ads bring inquiries; to measure the effectiveness of our Meta (Facebook, Instagram) ads and to show ads on those platforms to people who have visited our site — your explicit consent (KVKK Art. 5/1, and Art. 9 for the transfer abroad). You can withdraw your consent at any time.
- To answer your questions and handle your request through the chat assistant — necessary for the establishment of a contract (KVKK Art. 5/2-c); transferring your messages to an AI service provider (OpenAI, USA) to generate replies — your explicit consent (KVKK Art. 9).
Service providers your data is transferred to
Your data is not sold. In order to provide the service and (if you give consent) to measure our ads, it is shared only with the following providers, and only to the extent necessary:
- Vercel — website hosting
- Neon — the database where form and booking records are stored
- Resend — sending confirmation and notification emails
- Google — a Google Calendar invitation and Google Meet link when a video call is selected; email infrastructure (Google Workspace); Google Analytics and Google Ads (ad measurement) if you give consent
- Meta Platforms Ireland Ltd. — the Meta Pixel, if you give consent (ad measurement and retargeting)
- Cloudflare — if you give consent, collection of EAX Studio statistics and deriving an approximate city from your IP address (the IP address is not stored)
- Supabase — if you give consent, the database where EAX Studio statistics are stored (European Union)
- Zippex (YESEY Kurumsal Hizmetler ve Ticaret Ltd. Şti., Istanbul) — the Zipp AI chat assistant on the site; chat messages are sent to OpenAI (USA) to generate replies
These providers' servers may be located outside Türkiye; such transfers are carried out in accordance with the provisions of KVKK on the transfer of personal data abroad.
Retention period
Form and booking records are retained until your request is concluded and for the duration of any business relationship we have, as well as for the periods required by applicable legislation; at the end of that period, they are deleted or anonymized. For EAX Studio statistics, click positions are kept for 90 days and other records for up to 400 days, after which they are deleted automatically.
Cookies and browser storage
- Preference record: a record is kept in your browser to remember your cookie preference.
- Source information: the first-visit information described above is kept in your browser for up to 90 days. So that a WhatsApp or phone click is not counted twice in the same visit, a small marker is kept until you close the tab.
- Analytics cookies (Google Analytics — _ga, _ga_*): loaded only if you give consent. Ad personalization is turned off.
- EAX Studio statistics (eax_vid, eax_sid): created only if you give consent.
eax_vidis a random visitor code specific to your browser and is kept until you withdraw consent.eax_sidlinks the pages of a single visit; it renews after 30 minutes of inactivity and is deleted when you close the tab. Neither code contains anything that identifies you personally. - Ad measurement cookies (Google Ads — _gcl_*): loaded only if you give consent. Used to measure which Google ad led to a form submission; not used to show you personalized ads (remarketing).
- Advertising cookies (Meta Pixel — _fbp, _fbc): loaded only if you give consent. Used to measure which ads bring visits or inquiries to the site and to show ads on Facebook and Instagram to people who have visited it.
- Chat assistant (Zipp): the chat window opens from Zippex's domain (panel.zippex.dev) and may use its own browser storage to work. When loading the assistant, our site passes the address of the page you are viewing (e.g. /en/services) to the window.
You can change your preference at any time using the "Cookie preferences" link at the bottom of the page. When you withdraw your consent, analytics and advertising cookies and EAX Studio statistics records are deleted and measurement stops. You can also delete cookies and site data through your browser settings.
Your rights under KVKK
Under Article 11 of KVKK, you have the right to:
- learn whether your personal data is being processed,
- request information about the processing if it has been processed,
- learn the purpose of the processing and whether the data is being used in accordance with that purpose,
- know the third parties, in Türkiye or abroad, to whom your data has been transferred,
- request correction if the data has been processed incompletely or inaccurately,
- request deletion or destruction of the data within the framework of the conditions set out in the law,
- request that the correction and deletion operations be notified to the third parties to whom the data has been transferred,
- object to an outcome to your detriment arising from the analysis of the data exclusively through automated systems,
- claim compensation for damages if you suffer damage due to unlawful processing.
You can send your requests to info@eaxstudio.com; they will be answered within 30 days at the latest.


