Legal

Privacy Policy

Last updated: 06.10.2026

This Privacy Policy explains how Baron Digital (“Baron Digital”, “we”, “us”) — including its departments expert IT, BaronDEV and Ocean — Media & Marketing — collects, uses and protects personal data when you use this website or our services.

1. Who we are

Baron Digital is the data controller for personal data collected through this website and our forms. You can contact us about privacy at any time at info@digital.barongrp.net.

2. What data we collect

Identity and contact details: name, company, email address, phone number and country.
Request details: subject, title, message, selected service or product, budget, priority, availability and remote-support identifiers such as a Protech ID.
Member account data: name, email, encrypted password and the sign-in provider you choose (Google or Outlook).
Technical data: IP address, browser type, pages visited and security logs.
Service data that we process on your behalf while delivering a service, as described for each service below.

3. How we use your data

To answer your enquiry, prepare quotes and contact you about your request.
To deliver, support and invoice the services and products you order.
To open, manage and close support tickets.
To keep the website secure and to prevent spam, fraud and abuse.
To send news and offers only where you have agreed — every message includes an unsubscribe option.
To meet legal, tax and accounting obligations.

4. Legal bases

We process personal data to take steps at your request before entering into a contract, to perform a contract, to comply with legal obligations, on the basis of our legitimate interest in running and securing our business, and with your consent where it is required (for example marketing emails and analytics cookies).

We comply with applicable data-protection laws, including the Turkish Personal Data Protection Law No. 6698 (KVKK), the EU General Data Protection Regulation (GDPR) where it applies, and the Israeli Protection of Privacy Law.

5. Sharing your data

We never sell personal data. We share it only with trusted providers who help us operate — such as hosting, email, CRM, payment and advertising platforms you ask us to manage — under confidentiality and data-processing terms, or when the law requires it.

6. International transfers

Our team and service providers may be located in different countries. When personal data is transferred abroad, we apply the safeguards required by applicable law.

7. How long we keep data

Enquiries and leads are kept for up to 3 years after the last contact. Customer and invoicing records are kept for as long as tax and commercial law requires. Support tickets are kept for the duration of the service plus 2 years. After that, data is deleted or anonymised.

8. Security

We protect data with access control, encrypted connections, form protection, rate limiting and audit logs. No online system is completely secure, so please never send passwords through our forms.

9. Your rights

You may request access to, correction, deletion or transfer of your personal data, object to or restrict its processing, and withdraw your consent at any time by writing to info@digital.barongrp.net. You also have the right to complain to your local data-protection authority.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows the latest version.

Service-specific privacy notes

When we deliver a service, we may process additional data on your behalf. The notes below explain what each service involves.

Computer & IT Support
Backup & Recovery
Custom Software
Automation
Website Development
Application Development
AI Solutions
Marketing Strategy
Social Media Management
Paid Advertising
Branding
Content & Creative
SEO
Lead Generation
Marketing Automation

expert IT

Computer & IT Support

To diagnose and fix problems we may access computers, user profiles, installed software, your Microsoft 365 tenant (users, mailboxes and settings), server logs, IP addresses and network devices, and we process inventory data such as serial numbers and licence keys. Personal files are not opened, copied or kept unless this is necessary for the task and authorised by you. Access credentials are stored securely and used only for the agreed work; Microsoft processes your data under its own privacy terms.

Backup & Recovery

Backups contain copies of your data. They are encrypted, stored in the agreed location, kept for the agreed retention period and then deleted.

BaronDEV

Custom Software

If the software processes personal data, we act as your data processor during development and support, follow your instructions and use test data wherever possible.

Automation

Automations connect your tools and may move customer data between them. We connect only the accounts you authorise and document every data flow.

Website Development

Website forms and analytics collect visitor data on your behalf. You are responsible for your own website privacy policy and cookie consent, and we can help you prepare them.

Application Development

Web and mobile applications may process user accounts and device data. We design them with data minimisation and secure storage; you remain the controller of your users’ data.

AI Solutions

AI solutions may send prompts and documents to AI providers such as OpenAI, Anthropic, Google or Microsoft. Where the provider allows it, we configure services so your data is not used to train public models, and we never upload data you mark as confidential without approval.

Ocean

Marketing Strategy

Strategy work uses your business data, customer insights and market research. Reports and findings are shared only with your team.

Paid Advertising

Campaigns run on advertising platforms (such as Google, Meta, LinkedIn and TikTok) that process audience data under their own policies. Tracking pixels and conversion tags are used only with a proper consent setup in place.

Branding

Branding projects use interviews and information about your company; customer personal data is not required.

Content & Creative

When content features people, we obtain the necessary consents and model releases for photos and videos.

SEO

SEO work uses website analytics and search-console data, which contain aggregated visitor information.

Lead Generation

Lead generation collects personal data from prospects through forms and campaigns. We set up consent texts and pass leads to you securely; you are the controller of the leads you receive.

Marketing Automation

Email and messaging automations process contact lists. We send only to contacts who have given valid consent, and every message includes an unsubscribe option.