Privacy policy — Bagceciler Ltd

1. Who we are

Bagceciler Ltd ("we", "us", "our") is the data controller for personal data collected through bagceciler.space and in the course of providing our services. We are a company registered in England and Wales, company number 17412333, with a registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Questions about this policy can be sent to info@bagceciler.space.

2. What we collect

Contact details you give us: name, business name, email address, phone number and anything you write in an enquiry.
Client records: billing details, correspondence and project documentation for businesses we work with.
Technical data: IP address, browser type, device type, pages visited and referring source, collected through analytics.

We do not knowingly collect special category data, and we do not collect data from children.

3. Why we use it, and our legal basis

To reply to enquiries and prepare proposals — legitimate interests, or steps taken at your request before entering a contract.
To deliver and administer our services — performance of a contract.
To issue invoices and keep accounting records — legal obligation.
To measure and improve our website — consent, where analytics or marketing cookies are used.

4. Cookies and analytics

Our website uses cookies that are necessary for it to function, and may use analytics cookies to understand how visitors use the site. Non-essential cookies are only set where you have agreed to them. You can block or delete cookies in your browser settings, though some parts of the site may then not work as intended.

5. Sharing your data

We do not sell personal data. We share it only with service providers who help us operate — hosting and email providers, analytics and advertising platforms, accounting software and payment providers — and only to the extent they need it. Where a client engages us to manage their advertising or social accounts, we act on that client's instructions in relation to data held inside those platforms.

6. International transfers

Some of our providers are based outside the United Kingdom. Where personal data is transferred abroad, we rely on adequacy decisions or on standard contractual clauses and equivalent safeguards to protect it.

7. How long we keep it

Enquiries that do not become clients are deleted within twelve months. Client records are kept for the duration of the engagement and for six years afterwards, in line with UK accounting and tax requirements. Analytics data is retained for up to twenty-six months.

8. Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where our use relies on consent. To exercise any of these rights, email us at the address above. We will respond within one month.

9. Complaints

If you believe we have handled your data improperly, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

10. Security

We use access controls, encrypted connections and reputable providers to protect personal data. No system is completely secure, but we take reasonable technical and organisational measures appropriate to the data we hold.

11. Changes to this policy

We may update this policy from time to time. The version published on this page, with the date shown above, is the one that applies.