Privacy Policy

21labz is a digital studio based in Antalya, Turkey, and part of our parent brand Artes de Ilusion. 21labz is the data controller for the personal data described in this policy.

Address: Pınarbaşı, Atatürk Blv. 07100 Konyaaltı/Antalya, Turkey. Email: hello@21labz.com.

We only collect the data you give us and the minimum technical data needed to run the site.

• Contact form. Name, company, email address, project details and budget range. We use them to answer your inquiry and prepare a proposal. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to business inquiries.
• Booking a call. Name, email address, time zone, chosen time and any notes you add. We use them to schedule and hold the call. Bookings are processed by Cal.com, which also sends the confirmation and calendar invitation.
• Job applications. Name, contact details, address, availability, desired pay, website or LinkedIn profile, and your CV. We use them only to evaluate your application. Legal basis: steps taken at your request before entering into an employment or service contract.
• Spam protection. When you submit a form, we store a one-way hash of the email address together with a counter, so the same address cannot send more than a few messages an hour. The address itself is not kept in that record, and the records cannot be listed. Legal basis: our legitimate interest in protecting the site from abuse.
• Technical data. Our hosting provider processes your IP address, browser information and request times in server logs to deliver the site and keep it secure.

We do not use analytics, advertising or tracking cookies, and we do not build visitor profiles. Fonts are served from our own domain, so loading a page does not send your data to font providers.

Some case study pages include videos from YouTube (in privacy-enhanced mode) or Vimeo. When you view such a page, these providers may receive your IP address and set their own cookies. The admin area of the site uses a strictly necessary session cookie for our team only.

We do not sell or rent your personal data, and we do not share it for marketing purposes. We use the following service providers, who process data on our behalf:

• Google (Firebase Hosting, Cloud Firestore, Cloud Storage, Authentication). Hosting the site and storing form submissions, applications and CVs.
• Cal.com: scheduling calls.
• Our email provider: corresponding with you.
• YouTube and Vimeo. Only when you view a page with an embedded video.

Some of these providers store or process data outside Turkey and the European Economic Area, including in the United States. Where this happens, we rely on the safeguards required by the GDPR and the KVKK, such as standard contractual clauses or an adequacy framework.

• Contact and booking details. Up to two years after our last communication. If we start working together, for the duration of the contract and the retention periods required by law.
• Job applications and CVs. Up to one year after the recruitment process ends, unless you ask us to delete them sooner.
• Spam protection records and server logs. Only as long as needed for their purpose.

Depending on the law that applies to you, you have the right to know whether we process your data and access it, to have it corrected or deleted, to restrict or object to processing, to receive it in a portable format, to withdraw consent, and to learn who it has been shared with. Article 11 of the KVKK and Articles 15–22 of the GDPR describe these rights in detail.

Send your request to hello@21labz.com. We reply within 30 days. You also have the right to complain to the Turkish Personal Data Protection Authority (KVKK) or to the data protection authority in your EU country.

The site is served over HTTPS. Form submissions, applications and CVs are stored with access limited to authorised members of our team. A file removed from the site is deleted from storage. The public cannot list the storage folder.

Our services are aimed at businesses and adult job applicants. We do not knowingly collect data from children under 16.

We update this policy when our services or the law change. The date at the top shows the latest version.