Last updated: July 2026
We're a small marketing team in Istanbul, and we'd rather explain this in plain language than hide behind twelve pages of legal boilerplate. Here's what we collect when you use avesta-agency.com or work with us, why we collect it, and what we do with it.
Who we are
Avesta Agency is a digital marketing agency based at Merkez mah, Abide-i Hürriyet Cd No:126 D:3, 34381 Şişli/İstanbul, Türkiye. If you have a question about anything on this page, email us at [email protected] or call +90 (554) 670-9090.
What we collect
Two kinds of information, really.
Things you give us. When you fill in the contact form, ask for a proposal, or send us an email, you're handing over your name, email address, phone number and whatever you write in the message. If we end up working together, we'll also hold the business details we need to run the engagement — company name, billing information, and the account access you grant us for your ad platforms or analytics.
Things your browser tells us. Like almost every website, ours records basic technical data: IP address, browser and device type, the pages you visited, and where you came from. This is aggregate traffic data. We use it to see which pages are useful and which ones aren't.
Why we use it
To reply to you. To send the proposal or quote you asked for. To deliver the work you hired us to do, invoice you for it, and keep the records our accountants and Turkish tax law require. And, on the analytics side, to make the site less annoying to use.
If you've opted in, we may also send you occasional emails about what we're working on. Every one of those has an unsubscribe link, and we won't hold it against you if you use it.
What we don't do
We don't sell your data. We don't rent it, trade it, or hand your contact details to a third party so they can pitch you something. That's not a policy we're proud of having — it's just the baseline.
Who else sees it
A few service providers, because running an agency without them isn't realistic: our hosting provider, our email provider, and analytics and advertising platforms such as Google. They only get what they need to do their job, and they're bound by their own agreements with us.
Beyond that, we'd only disclose your information if a Turkish court or a competent authority legally required us to.
Google user data and our client dashboard
Our client dashboard, Avesta Agency (app.avesta-agency.com), reads Google Ads data through the Google Ads API. This section explains exactly what happens to that data.
Whose Google account is involved. Ours, not yours. The application is authorised once by Avesta Agency's own Google account — the one that owns our Google Ads manager (MCC) account — using the single scope https://www.googleapis.com/auth/adwords. Clients sign in to the dashboard with the mobile number on their account and never connect a Google account of their own.
What we access. Google Ads performance data for the advertiser accounts managed under our manager account: campaigns, ad groups, keywords, impressions, clicks, conversions and cost. No Gmail, Drive, Analytics, contacts or other Google service.
What we do with it. Two things. We show each client the performance of their own advertising account, and — for clients on prepaid billing — we pause that client's campaigns and ad groups when their prepaid balance is used up, so their account can't overspend. Beyond pausing, the application makes no changes to campaigns.
Limited Use. Avesta Agency's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely: we do not sell Google user data, we do not transfer it to third parties, we do not use it to train generalised AI or ML models, and we do not allow humans to read it except to operate the service for the client it belongs to, to resolve a support issue, for security purposes, or where required by law.
Separation between clients. Each client sees only their own advertising account in the dashboard. Data is not pooled or shown across clients.
Where it lives, and for how long. Synced Ads data is stored in our own database on our hosting infrastructure, and refreshed daily. When an engagement ends, or when a client asks, we delete that client's data.
Ending access. When our management of your Google Ads account ends, your account is removed from our manager account and the dashboard stops receiving your data. To request deletion of what we already hold, email [email protected].
Cookies
Our site uses cookies — small files stored by your browser. Some are necessary for the site to function. Others come from analytics and advertising tools and help us understand traffic and measure campaigns. You can block or delete cookies in your browser settings at any time; some parts of the site may behave oddly if you do.
How long we keep things
Enquiries that don't turn into projects are cleared out after about two years. Client records stay as long as the relationship lasts, plus the retention period our legal and accounting obligations impose on us. After that, they're deleted.
Keeping it safe
The site runs over HTTPS, access to client accounts is limited to the people working on them, and we use password managers and two-factor authentication internally. No one can honestly promise perfect security on the internet, and we won't either — but we take it seriously, and if a breach ever affected your data we'd tell you.
Your rights
Under Türkiye's KVKK (Law No. 6698) — and the GDPR, if you're in the EU — you can ask us what personal data we hold on you, ask us to correct it, ask us to delete it, or tell us to stop using it for marketing. Write to [email protected] and we'll respond within 30 days.
Children
This site and our services are meant for businesses. We don't knowingly collect information from anyone under 18.
Changes to this policy
If we change how we handle data, we'll update this page and change the date at the top. Worth a glance now and then.
Get in touch
Questions, complaints, or a request to see your data — [email protected]. A real person reads it.