Privacy.
Effective 2026-05-25 · Version 1.0
This page explains what data is collected when you visit yusufbaykalbozkurt.com, who processes it, on what legal basis, how long it is kept, and how to exercise your rights. Written in plain English. If anything here is unclear, email info@yusufbaykalbozkurt.com and I will explain it personally.
1. Who is responsible (data controller)
Yusuf Baykal Bozkurt, operating through Beonbrand Inc., Toronto, Ontario, Canada. For any privacy question or request, contact: info@yusufbaykalbozkurt.com.
2. What data is collected and why
2.1 The site itself
The site is a static HTML page hosted on Netlify. Loading the page does not require an account, does not set first-party cookies, and does not log identifying information beyond what your browser sends in standard HTTP request headers (IP address, user agent, referrer). Netlify retains these access logs briefly for security and abuse prevention; see Netlify's privacy notice for their retention policy.
2.2 Contact form
If you submit the contact form, your name, email address, and message are sent via Netlify Forms to info@yusufbaykalbozkurt.com. That address is forwarded by Cloudflare Email Routing into a Microsoft 365 mailbox I personally check. Netlify stores the submission so I can read it; I retain emails for as long as they are useful for our correspondence, then delete them on request. Akismet is used for spam detection only.
2.3 Embedded LinkedIn feed
The "Live from LinkedIn" section embeds a widget from Elfsight which fetches public posts from my LinkedIn profile. When this section renders, Elfsight and LinkedIn may set their own cookies and collect usage data per their respective privacy policies. I have no access to that data.
2.4 Embedded YouTube videos
The "On camera" section embeds videos via YouTube's no-cookie domain (youtube-nocookie.com). No YouTube cookies are set until you click play. Once you start playback, Google's privacy policy applies.
2.5 Analytics
No analytics provider is currently running on this site. No Google Analytics, no Plausible, no Facebook Pixel, no marketing pixels. If that changes in the future, this notice will be updated and the new effective date will appear at the top.
3. Cookies
Cookies on this site are limited to those set by third parties when their embedded content loads. The first-party site itself does not set cookies.
| Source | Purpose | When set |
|---|---|---|
| Elfsight | Widget operation, LinkedIn feed rendering | On page load (LinkedIn section) |
| Embedded feed analytics, content delivery | On page load (via Elfsight) | |
| YouTube | Playback analytics, recommendations | Only after you click play |
| Google Fonts | Font file delivery from gstatic.com | On page load (no cookies set, no identifying data sent) |
You can block these in your browser's privacy settings or with an extension (e.g. uBlock Origin, Brave Shields). The site will still function; the embedded LinkedIn feed and video thumbnails may not load.
4. Legal basis for processing
Where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies:
- Contact form submissions are processed on the basis of your consent (you chose to fill the form) and my legitimate interest in replying to enquiries about my work.
- Server-side access logs (held by Netlify) are processed on the basis of legitimate interest in operating a secure site.
- Third-party embeds (Elfsight, LinkedIn, YouTube) operate under their own legal bases as described in their privacy policies.
5. International data transfers
Netlify, Elfsight, LinkedIn, YouTube/Google and Microsoft are headquartered in the United States and process data globally. If you are in the EEA, UK, or Switzerland, your data may be transferred to and processed in countries that do not have an adequacy decision; the providers above use Standard Contractual Clauses and other safeguards as described in their respective notices.
6. How long data is kept
- Contact form messages: retained in my personal mailbox for as long as useful for replying; deleted on request.
- Netlify Forms submissions: retained per Netlify's policy; I can delete submissions from the Netlify dashboard on request.
- Netlify server logs: short-term retention per Netlify's policy.
- Third-party tracking cookies: retention is controlled by each third party.
7. Security
The site is served exclusively over HTTPS with HSTS preload. A Content Security Policy restricts which origins may load scripts, frames, images, and fonts. Form submissions are validated server-side by Netlify and protected with a honeypot field plus Akismet spam filtering. No payment data, health data, or government identifiers are collected.
8. Your rights
Depending on where you live, you have the right to:
- Access the personal data I hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict certain processing
- Receive a copy of your data in a portable format
- Withdraw consent for any future processing
- Lodge a complaint with your local data protection authority
To exercise any of these, email info@yusufbaykalbozkurt.com. I will respond within 30 days. No fee unless your request is manifestly unfounded or excessive.
Supervisory authorities:
- Canada: Office of the Privacy Commissioner of Canada
- EU/EEA: your national data protection authority (list at edpb.europa.eu)
- UK: Information Commissioner's Office
- California: California Attorney General
9. Children
This site is not directed at children under 13 (or under 16 in the EU/UK depending on member state). I do not knowingly collect data from children. If you believe a child has submitted their data, email info@yusufbaykalbozkurt.com and I will delete it.
10. Third parties used
- Netlify (hosting + forms) — Privacy policy
- Cloudflare Email Routing (forwards info@yusufbaykalbozkurt.com to my mailbox) — Privacy policy
- Microsoft 365 (the mailbox forwarded mail lands in) — Privacy statement
- Elfsight (LinkedIn feed widget) — Privacy policy
- LinkedIn (source of embedded posts) — Privacy policy
- YouTube / Google (video embeds) — Privacy policy
- Google Fonts (Montserrat from gstatic.com) — Privacy FAQ
- Akismet (form spam filter via Netlify) — Privacy policy
11. Changes to this notice
If anything changes (a new analytics tool, a new embedded widget, a change of hosting provider) this page is updated and the effective date at the top is bumped. For material changes, a notice is posted on the home page for at least 30 days.
12. Contact
Privacy questions or requests: info@yusufbaykalbozkurt.com. I read every message.