Scope and controller
This policy covers the BCL Web Design site, quote builder, accounts, client portal, support and project operations. Contact BCL Web Design / Berat Can Leylek at info@bclwebdesign.com.
BCL Legal
Privacy policy
How personal data shared with BCL is processed, protected and managed.
Data categories
We collect only data needed to provide and secure the service.
- Identity and contact details
- Briefs, messages, approvals and uploaded project files
- Account, role, session, device and audit security records
- Quote, order, invoice and payment-provider references; BCL never stores card data
- Cookie, analytics and policy-version choices
Purposes and legal grounds
Data supports enquiries, pre-contract steps, service delivery, account security, project records, legal obligations and the defence of rights. Optional analytics or marketing only runs after a separate, informed and revocable choice.
Collection and recipients
Data comes from forms, accounts, portal activity, written communications, uploads and security logs. It is shared only as necessary with contracted hosting, database, email, private storage, security, queue, monitoring, consented analytics and payment providers.
International transfers
Active providers include Vercel (hosting), Neon (database), Resend (email), Cloudflare R2 (private files), Upstash (rate limits and queues), Shopier (payments), Sentry (error monitoring) and, only with consent, PostHog (analytics). Transfer conditions and safeguards are assessed under applicable Turkish data-protection rules and, where relevant, GDPR.
Retention and security
Data is retained only for service and legal needs, then deleted, destroyed or anonymised. Role-based access, encrypted transport, expiring file links, quarantine, audit logs and rate limits are applied. Malware scanning, backups and incident monitoring operate only where the corresponding service is configured.
Your rights
You may request access, information, correction, deletion where applicable, transfer-recipient notification, objection to solely automated outcomes and other statutory remedies. Send a verifiable request to info@bclwebdesign.com.