Effective Date: 14 Oct 2025 • Last Updated: 14 Oct 2025

1) Controller & Contact

Blight Studios / Berkan Çolak
Tax No: 2600812838 – Bornova Tax Office
Address: Ergene Mah., 538 Sok., No:48, Apt:103, Bornova / İzmir / Türkiye
Email: info@blightstudios.com
Website: www.blightstudios.com

This Policy covers personal data processed through www.blightstudios.com for sales, fulfillment, support, warranty, and marketing.

2) Scope & Legal Basis

Prepared in line with Turkish law (KVKK 6698, Consumer Law 6502, Distance Contracts Regulation) and good international practice. For EEA/UK visitors, see the GDPR Addendum below.

We process data on the legal bases of:

• Contract performance (creating/fulfilling your order, after-sales).
• Legal obligation (tax, accounting, customs/ETGB, consumer protection).
• Legitimate interests (fraud prevention, security, service improvement, record-keeping).
• Consent (marketing communications and optional cookies).

3) Data We Process

• Identity & contact: name, address, email, phone.
• Order & billing: cart, order/fiscal numbers, delivery details, invoices, ETGB contents.
• Payments: amount, currency, timestamp, masked card/payment info (full card data is handled by PCI-DSS compliant providers).
• Logistics & customs: tracking numbers; importer IDs/SSN/EIN or similar where required by destination law.
• Customer service: messages, requests, warranty/service records, photos/documents you share.
• Technical & cookies: IP, device/browser, logs, cookie IDs, analytics.
• Marketing preferences: newsletter opt-ins/opt-outs.

4) Purposes of Processing

• Set up and perform your contract (order, production, delivery, warranty, returns).
• Comply with legal/financial obligations (accounting, tax, ETGB/customs records).
• Protect our services (security, fraud prevention, dispute resolution).
• Improve user experience and service quality (analytics, troubleshooting).
• Send marketing only with your consent (you can withdraw any time).

5) Sharing Your Data

We may share limited data, only as necessary, with:

• Carriers/Logistics: UPS, DHL, FedEx, PTT, Shipentegra (and their agents).
• Payment processors/Banks: for collections and refunds.
• IT/Hosting/Email/Analytics: server, backup, security and communication vendors.
• Accounting & Legal advisors: for compliance and disputes.
• Public authorities: when legally required.

6) International Transfers

Because hosting, email, analytics, newsletters and logistics may operate abroad, your data can be transferred internationally. Transfers follow KVKK art. 9 and, where applicable, adequacy decisions, Standard Contractual Clauses, or your explicit consent, plus supplementary safeguards. Customs data may be transmitted to foreign authorities/agents where import law requires it.

7) Retention

• Tax/accounting & contract records: 10 years (VUK/TTK).
• Warranty/service: 2 years legally; parts-support records up to 10 years by policy.
• Customer service messages: 3 years.
• Marketing consent logs: until withdrawn or 3 years.
• Technical logs: 2 years.

After these periods, data are deleted, destroyed or anonymized securely.

8) Your Rights (KVKK art. 11)

You may request: information, access, correction, deletion/destruction, notification of recipients, objection to results of automated processing, and compensation of damages.
How to exercise: email info@blightstudios.com (we may verify identity). If unsatisfied, you may complain to the Turkish DPA (KVKK Authority).

9) Cookies

• Strictly necessary cookies (session, cart, security) – do not require consent.
• Analytics/Performance, Functional, and Advertising cookies – require your consent.

Manage browser settings and use our on-site Cookie Preferences panel to give/withdraw consent at any time. Refusing cookies may limit some features.

10) Security

We apply administrative and technical measures (TLS encryption, access controls, logging, backups, vendor security terms). In case of a breach, we notify as required by law.

11) Children

Our site is not directed to persons under 18. We do not knowingly process children’s data.

12) Automated Decisions

We do not use automated decision-making producing legal or similarly significant effects. Optional marketing segmentation is consent-based and can be refused.

13) Third-Party Links

We are not responsible for the privacy practices of third-party websites linked from ours.

14) Changes

We may update this Policy. The effective date appears at the top. Material changes will be announced on the site.

15) Contact

For any privacy question or request: info@blightstudios.com

GDPR Addendum (for EEA/UK Visitors)

Controller: Blight Studios / Berkan Çolak (info@blightstudios.com).
Purposes & Legal Bases: contract (Art.6(1)(b)), legal obligation (Art.6(1)(c)), legitimate interests (Art.6(1)(f))—security, fraud prevention, service improvement, record-keeping—, and consent for marketing/optional cookies (Art.6(1)(a)).
International Transfers: based on adequacy decisions, SCCs, or consent, with appropriate safeguards.
Retention: as listed above.
Rights: access, rectification, erasure, restriction, portability, objection (including to direct marketing), and complaint to your supervisory authority. Contact info@blightstudios.com to exercise rights.
Automated Decisions: none with legal or similarly significant effects.