Privacy.

OP Creative Labs is the controller for the personal data described in this policy. This policy applies to opcreativelabs.com, its localized pages and direct correspondence with our team.

Websites and services reached through external links operate under their own privacy notices. We are not responsible for how those third parties process data.

We follow data-minimisation principles and process only the information needed for a defined purpose. Depending on how you use the site, this may include:

• Correspondence data: your name, email address, company, message and any files you choose to send when contacting us by email.
• Technical data: IP address, browser and device information, requested URL, date and time, referrer and security logs generated by hosting or network infrastructure.
• Preference data: the language you select, stored in the NEXT_LOCALE cookie.
• We do not ask you to send special-category or sensitive personal data through this website.

We may use personal data to respond to enquiries, evaluate project opportunities, maintain business correspondence, deliver and secure the website, diagnose errors, remember your language and meet legal obligations or establish and defend legal claims.

Depending on the context and applicable law, processing is based on steps taken at your request before a contract, performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting the business, or consent where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.

When you change the website language, a functional cookie named NEXT_LOCALE stores that choice for up to 12 months. It is not used for advertising, analytics or cross-site profiling.

Vercel Web Analytics produces anonymous, aggregated page-view statistics such as the requested path, referrer, approximate location, browser, operating system and device type. It does not use analytics cookies or create cross-site profiles.

In the current website release, the contact and newsletter forms are interface demonstrations: submitting them does not send entries to a server or add them to a mailing list. We will update this policy before activating data collection through those forms.

Email and external links may open services operated by other providers. Their own terms and privacy notices apply once you leave our website.

We do not sell personal data or share it for third-party advertising. Data may be handled by service providers that support hosting, email, security or professional advice, only to the extent needed to provide those services and under appropriate confidentiality and data-protection commitments.

We may disclose information where required by law or necessary to protect rights and security. If a provider processes data outside your country, we use the transfer mechanism and safeguards required by applicable law.

The language preference cookie expires after no more than 12 months. Technical logs are retained only for periods reasonably required for website operation, troubleshooting and security, subject to the settings of our infrastructure providers.

Business correspondence is kept while an enquiry or relationship remains active and afterwards only as long as required by law or reasonably necessary for records and legal claims. Data is then deleted, destroyed or anonymised.

Depending on where you are and which law applies, including Türkiye's Law No. 6698 (KVKK) and the EU or UK GDPR, you may have the following rights:

• To learn whether your data is processed and to request access or a copy.
• To correct incomplete or inaccurate data.
• To request deletion, destruction, anonymisation or restriction where the legal conditions are met.
• To object to processing and to request portability where applicable.
• To withdraw consent and to complain to the competent data-protection authority, including Türkiye's Personal Data Protection Authority where applicable.

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration. No internet transmission or storage method is completely risk-free.

We may revise this policy when the website, our providers or legal requirements change. The date at the top identifies the current version. Material changes will be communicated through the website where appropriate.