Privacy Policy
This policy explains what data is processed when you visit the SoUs website and what we do with it. We use your enquiry to evaluate your project, answer your questions and prepare the proposal you asked for.
Who operates this site
This site is operated by Barış Demircan under the name SoUs, from Istanbul, Türkiye. For any question about your personal data, write to info@sous.agency.
Cookies
Visit analysis, advertising measurement and personalised advertising have separate preferences. Optional tools stay blocked until the relevant permission is given. Reject and Accept all have equal prominence; you can save only selected purposes. Your preference is kept for up to 180 days. Change it using Çerez tercihleri at the bottom of any page. Withdrawal stops application measurement, clears accessible first-party measurement cookies and reloads the page when needed. Manage cookies held on providers' own domains separately in your browser settings. Cloudflare Turnstile, which protects our forms, processes browser and connection data under its own privacy notice.
Visitor measurement (analytics)
With advertising measurement permission, Google Ads measures successfully delivered contact enquiries, WhatsApp clicks and telephone link clicks. Page addresses, any ad click identifier, interaction type, a random event identifier and browser/connection information may reach Google. A click does not establish that a conversation or sale occurred. Google Tag Manager manages permitted tags. Hosting and security logs are separate from optional measurement.
With separate visit analysis permission, Google Analytics 4 measures page views, service visits, contact link clicks and successfully delivered enquiries. Form field contents are not sent to Analytics.
With separate visit analysis permission, measurement of a successfully delivered enquiry may be sent to Google Analytics 4 from the server. This uses the browser's actual client and session identifiers, delivery time, a clean page address and a random event identifier. Names, email addresses, phone numbers, messages and their hashes are excluded, and use for advertising matching is denied. A second browser Analytics form event is not sent for the same enquiry.
Yandex Metrica uses its own separate visit and conversion measurement permission to measure clean page addresses and WhatsApp and telephone link clicks; these data may be associated with Yandex Direct advertisements. This tool requires its separate Yandex permission together with advertising measurement and personalised ads permissions; data may be used by Yandex Direct for audiences and remarketing. If form delivery measurement is enabled, the browser’s Metrica ClientID, event time and clean page address may be sent by the server after actual delivery acknowledgement. The form goal is not also sent by the browser. Names, messages and raw or hashed email are excluded from this Yandex event. Session replay, heatmaps and automatic link tracking are disabled. The measurement events we send to Yandex do not include form field content. Earlier Google Analytics or advertising permission does not authorise Yandex. Yandex may use infrastructure outside Türkiye.
If you permit both advertising measurement and personalised advertising, Google, LinkedIn Insight Tag, Microsoft Advertising UET, TikTok Pixel and Meta Pixel may use permitted page visits, service interest, successfully delivered enquiries and contact link clicks for audiences, attribution and remarketing. These tools may process page addresses, referring pages, ad click identifiers, random event identifiers, IP addresses, browser information and timestamps. Your name, message, chat contents and raw email address are excluded from shared measurement events.
Microsoft, TikTok and Meta measurement runs in your browser only when both advertising measurement and personalisation permissions are given. Automatic email and phone matching is disabled in these three providers’ browser tags. Providers may use infrastructure outside Türkiye. Withdrawing consent does not automatically delete data already transmitted.
If you permit both advertising measurement and personalised advertising, conversion information for successfully delivered enquiries may also be sent from the SoUs server to eligible advertising providers. This includes your IP address, browser information, event time, a page address with private information removed, any ad click identifier and a random enquiry event identifier. The same event identifier helps match browser and server reports to a single enquiry.
Cookie preferences include separate, optional email matching permissions for Microsoft Advertising, TikTok, Meta (Facebook and Instagram), Google Ads and LinkedIn. Only for a provider you permit, the email address from a successfully delivered enquiry is hashed with SHA-256 on the SoUs server and may be sent to match the enquiry with ad interactions. Hashing is not anonymisation. Your raw email address, name and message are not sent to advertising providers. You can submit the form with these options turned off.
Server measurement permission is verified using a signed preference record that includes the permitted purposes and expiry. The current revision of your choice is checked before each transmission. Once withdrawal is processed on the server, pending transmissions stop. A request already in progress may have reached the provider; withdrawal does not guarantee deletion of data already received or reversal of that request.
Contact form data
OpenAI / ChatGPT Ads measurement requires its own preference; earlier advertising permission does not authorise this provider or enhanced matching. Advertising measurement and personalised ads permissions are also required. When enabled and permitted, attribution references, a clean page address, event time and a random event ID may be sent. Enquiry events are prepared only after successful form delivery; the same event ID prevents duplicate counting when the browser and server are both used. We do not add your enquiry message to the measurement events we create. Future user-level personalisation is opted out. OpenAI may use infrastructure outside Türkiye. An event already sent cannot be recalled. You can contact us without giving this permission.
Server conversion events sent by SoUs to OpenAI may include your connection IP address and browser information. Your name, email address, phone number, message or their hashes are not added to these server events. Server measurement requires separate OpenAI measurement and the two shared permissions; it does not require or replace browser enhanced matching permission.
The OpenAI Pixel loads only when separate OpenAI measurement, advertising measurement, personalised ads and OpenAI enhanced matching permissions are all given. Enhanced matching permits supported first/last names, email addresses and phone numbers that the Pixel can detect in this site’s forms to be converted into SHA-256 hashes in your browser and sent to OpenAI for matching with ads. Hashing does not anonymise this information; hashes can be used for matching. We do not add your enquiry message to the matching events we create. This explanation is not a guarantee about every DOM read or auxiliary request by the third-party SDK. Both OpenAI choices are initially off; refusing does not prevent form submission and you can withdraw your preference. When the Pixel is permitted, __oppref may last up to 30 days and __obref up to 365 days; withdrawal clears accessible cookies on this site.
When you submit the contact form, your name, email address and message reach us. We use them to evaluate your project, reply to you and prepare the proposal you requested. Submitting the form does not add you to a marketing list, and we do not email you for any other purpose without your consent.
We record your name, email address and message in SoUs's own customer and proposal tracking system to respond to your enquiry and follow up on your proposal. This record is independent of advertising measurement preferences and does not add you to a marketing list. The system is hosted on Railway, which may use infrastructure outside Türkiye. Form content in the transfer queue is removed after successful acknowledgement; without acknowledgement it is held for no more than 72 hours. The enquiry record in the CRM is retained only for as long as needed to handle your request.
If you accept advertising measurement, personalised ads and Google enhanced matching in cookie preferences and also select the separate, optional form measurement checkbox for Google Ads only, the email address from a successfully delivered enquiry is hashed with SHA-256 and sent to Google Ads for matching with ad interactions. Hashing is not anonymisation. Your name and message are not sent to Google Ads. You can submit the form without this permission. Google may use infrastructure outside Türkiye. This form permission does not permit matching by other providers or server-side email matching. When server matching preferences are enabled, they are selected separately in cookie preferences.
Sharing with third parties
The site and its forms run on Cloudflare. A verification token and your connection IP address are sent to Turnstile for form security. Your name, email address and message are delivered to the SoUs mailbox through Resend. These providers take part in the technical transmission and processing of the data and may use infrastructure outside Türkiye. Your enquiries are never sold or used to build advertising lists.
The interview thumbnails on the home page are images hosted on this site; no connection to YouTube is made unless you click one. When you press play, the cookieless youtube-nocookie.com player loads, and that request sends your IP address, browser information, the address of the page you came from and the identifier of the video you are watching to Google. Playback is covered by Google's own privacy policy from that point on.
Cloudflare Turnstile privacy notice · Resend privacy policy · Google privacy policy · LinkedIn privacy policy · Microsoft privacy statement · TikTok for Business privacy policy · TikTok Business Products Data Terms · Meta privacy policy · OpenAI privacy policy · OpenAI Pixel and enhanced matching explanation
Automated support
SoUs Support first answers from the published service information. When the AI answer is enabled, a question that the prepared answers cannot cover — together with at most the last six question-and-answer pairs — is sent to Google Gemini to generate a reply. Answers generated by AI are marked in the panel with a "Yapay zekâ yanıtı" label; unlabelled answers come from our published information. Do not share personal, health, payment, password or account details in the panel.
The site application does not write chat text to a permanent archive; the conversation held in browser memory is cleared when you close the panel or leave the page. Short-lived signed session data and identifiers derived from the connection address may be used to prevent abuse. Hosting and Google's own data processing are separate from this local clearing; the Gemini API data processing terms apply.
Retention and deletion
Enquiry data is kept only as long as needed to evaluate and answer the request. Closed requests are reviewed regularly and deleted once no ongoing matter or legal reason to retain them remains. Records subject to separate obligations, such as contracts and invoices, are assessed under their own purposes and applicable retention periods. Send deletion requests to info@sous.agency.
Your rights
You can always ask us for information about your personal data and request correction or deletion. For the detailed disclosure covering the contact form under Turkish data protection law, see the KVKK disclosure notice (Turkish).
Changes
This policy may be updated when needed; the current version is always published on this page.
Last updated: 1 October 2026
This is a translation provided for convenience. The Turkish version prevails in case of any discrepancy. See also our terms of service.