VOX CREATIVE AGENCY
Privacy
Updated: 21 October 2026
This page explains personal data use on the Vox Creative Agency website and in Vox Circle. Contact hello@voxcreative.agency for privacy or account requests.
Contact and applications
Data controller: VOX CREATIVE AGENCY DİJİTAL PAZARLAMA VE ORGANİZASYON LİMİTED ŞİRKETİ. Vox Creative Agency is the agency brand. Privacy contact: hello@voxcreative.agency. New Circle applications are accepted online. Applying, verifying an email address and profile review are separate steps.
How information is collected
Information is collected electronically and partly automatically through website forms and account actions, and through emails you send and authorised team entries forming part of a filing system. We do not ask for your social media password. Hosting infrastructure may process your IP address and technical request details when you open the site. Application abuse counters use a one-way hash rather than the direct IP address.
Information we process
We process the name, contact and project details you send us. Circle applications include your name, email, telephone, social media handles, declared follower counts, city/district, content interests, audience categories, languages, portfolio and optional profile image. We also keep account, application, invitation, booking, attendance and support records. Session, time and technical request records may be used for security. Passwords are not stored in plain text. Do not enter national identification numbers, health data or other sensitive information in free-text fields.
Purposes and legal grounds
Data necessary to answer requests, review and manage membership, show suitable opportunities and coordinate applications and participation are processed for entering into or performing a contract under Article 5(2)(c) of Turkish Law No. 6698. Account security and abuse prevention rely on legitimate interests under Article 5(2)(f), subject to your fundamental rights; protecting legal claims on Article 5(2)(e); and applicable legal duties on Article 5(2)(ç). Optional processing not covered by these grounds requires separate, specific and withdrawable explicit consent. Reading this notice does not constitute consent to every use.
Service messages and marketing
Registration, email verification, application outcomes, personal bookings, account security and password reset messages support the relevant service. They are not conditional on marketing consent. Promotional sending is currently disabled. New-opportunity and promotional emails require a separate optional preference and a valid commercial-message consent process. Marketing consent is not a membership requirement. Contact hello@voxcreative.agency or use your profile to change your preference.
Access and sharing
Only authorised Vox team members can access the application pool; other creators cannot view your profile. Where needed to coordinate a selected collaboration, the relevant brand or venue may receive your name, handles, declared follower information and profile image. Limited brand lists exclude your phone, email, private ticket/access codes and internal notes. Necessary hosting, storage and email providers, and competent public authorities, may receive data subject to applicable legal conditions.
Infrastructure and overseas transfers
The site is published and hosted through OpenAI Sites; its page-serving, database and file-storage infrastructure uses Cloudflare. These services may involve personal data processing outside Türkiye. The connected Hello mailbox, through Google Workspace/Gmail API, sends transactional notices for registration, email verification, password reset, application results and attendance. The sender is hello@voxcreative.agency; member messages go to the relevant member’s own email address, while team notifications go to Hello. During connection, the Google account email is obtained to verify the sender. Gmail permission is send-only; the application does not read the inbox. Google processes the recipient address and related message content when a message is sent. The current recipient of connection and template tests is Hello; earlier tests also used the administrator address. New automated sending through the former Resend connection has stopped; earlier operations sent recipient addresses and message content to that provider. Completion of the applicable provider contracts and overseas-transfer safeguards under Article 9 of Law No. 6698 has not yet been verified for the OpenAI Sites/hosting and Google accounts. Membership documents and optional permissions do not replace those provider safeguards. Promotional sending remains disabled.
Retention, changes and deletion
Sessions are valid for at most 7 days; expired sessions are deleted when maintenance runs. Abuse counters are cleaned by maintenance 24 hours after expiry. Account, participation and support records are limited to service purposes and applicable legal retention or legal-claim requirements. You can edit your profile, withdraw an application or request deletion. Repeating a deletion request preserves its original date. Any legally required retention and its reason are explained in the response.
Your rights and requests
You may exercise the rights under Article 11 of Law No. 6698, including information, correction, deletion/destruction, notification to recipients, objection to an adverse automated result and compensation. Write to hello@voxcreative.agency from your previously registered email address, or use your account’s deletion-request tool. Other statutory application methods remain available. A formal request must include your full name, Turkish identity number (nationality and passport/identity number for foreign nationals), service address, request, contact details if available and signature for a written request. Do not enter these details in profile fields or send unnecessary identity copies; ask for a secure verification method when needed. Requests are resolved promptly and within 30 days, free of charge except the additional-cost tariff permitted by law.
After a request
After first applying to the controller, you may complain to the Turkish Personal Data Protection Board if a request is refused, the response is insufficient or no timely response is received. The deadline is 30 days after learning the response and in any event 60 days after the initial request. If there is no response or it arrives after 30 days, the 60-day deadline from the initial request applies.
Documents and permissions
Notice receipt, terms and age declaration are separate from consent. Email, SMS and call permissions are optional, separate and valid for 12 months. Event capture, Vox website and Vox Instagram publication each require separate, event-specific permissions of at most 12 months. Refusal does not affect membership or attendance. Withdraw in Documents and permissions. Marketing and social publication remain blocked until IYS and transfer safeguards are complete. Exact texts, versions, hashes, name, relevant contact, verification and time are archived without raw IP or device fingerprints. Decisions append records. Current mandatory records last for the account; other proof is kept for at most 3 years after permission ends or account closure for legal claims and applicable message recordkeeping, then deleted in maintenance. Any dispute-related extension requires a stated reason. Withdrawal creates team tasks and does not prove automatic removal from external platforms.