Privacy Policy

StudyLeo LLC ("StudyLeo", "we", "us", or "our") operates the website www.studyleo.com and related services that help prospective students discover universities, academic programs, scholarships, and visa support services in Turkey. We are committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and what rights you have under the Turkish Personal Data Protection Law (Kişisel Verilerin Korunması Kanunu — KVKK Law No. 6698) and, where applicable, the EU General Data Protection Regulation (GDPR). By using our platform, you acknowledge that you have read and understood this policy. If you do not agree, please discontinue use of the platform.

The data controller responsible for your personal information is: Company Name: StudyLeo LLC Website: www.studyleo.com Phone: +90 501 012 77 88 Contact for Privacy: Use the contact form at www.studyleo.com/contact All data processing activities are conducted in accordance with KVKK, and where required, we maintain a VERBİS (Data Controllers' Registry) record as required by Turkish law.

We collect the following categories of personal data: Identity & Contact Data • Full name • Email address • Phone number • Nationality and country of residence • Age / date of birth Application Data • Academic background and qualifications • Chosen universities and programs of interest • Uploaded documents (transcripts, certificates, passport copies) • Application status and communications Usage Data • IP address • Browser type and version • Pages visited, time spent, and clicks • Referral source (e.g., search engine, social media) • Device identifiers and operating system Communication Data • Messages submitted through our contact form • Consultation request details • WhatsApp or phone call logs when you contact us directly We do not collect sensitive personal data (such as health data, biometric data, or criminal records) unless strictly required for a specific visa or academic process, in which case we will seek your explicit consent separately.

We use your personal data for the following purposes: Service Delivery To match you with suitable universities and programs, process your application inquiries, and connect you with partner institutions in Turkey. Communication To respond to your inquiries, send you application status updates, and provide visa or admission guidance. You may opt out of non-essential communications at any time. Platform Improvement To analyze usage patterns, fix bugs, and improve the user experience. This includes aggregated and anonymized analytics. Legal Compliance To comply with Turkish law, including KVKK obligations, and to respond to lawful requests from public authorities. Marketing (with consent) To send newsletters, scholarship alerts, and promotional content — only where you have given explicit consent. You can withdraw consent at any time via the unsubscribe link in any email. We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

Under KVKK and GDPR, we process your data on the following legal grounds: • Contract Performance: Processing necessary to provide the services you requested. • Legitimate Interests: Analytics and platform improvement, where our interests do not override your rights. • Legal Obligation: Compliance with Turkish laws and regulations. • Consent: Marketing emails and the processing of any sensitive data, where you have explicitly opted in. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

We share your data only in the following circumstances: Partner Universities When you submit an application or inquiry for a specific institution, we share the necessary information with that university to process your application. Universities are independent data controllers for their own processes. Service Providers We use trusted third-party providers for hosting, email delivery, analytics, and CRM services. These providers process data solely on our instructions and are bound by data processing agreements. Legal Requirements We may disclose data if required by law, court order, or government authority, or to protect the rights and safety of StudyLeo, our users, or the public. Business Transfers In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy commitments. We do not transfer your personal data to third countries outside Turkey unless adequate safeguards are in place (e.g., Standard Contractual Clauses for transfers to EU/EEA countries).

We retain your personal data for as long as necessary to provide our services and fulfil the purposes described in this policy: • Account and application data: Retained for the duration of your account plus 3 years after your last activity. • Communication records: Up to 2 years from the date of the last communication. • Analytics data: Stored in anonymized or aggregated form indefinitely. • Legal and compliance records: As required by applicable Turkish law (typically 10 years for commercial records). When data is no longer needed, we securely delete or anonymize it.

Under KVKK (Article 11) and GDPR, you have the following rights: • Right to Know: Learn whether we process your data and, if so, what data and for what purpose. • Right to Access: Request a copy of your personal data we hold. • Right to Rectification: Ask us to correct inaccurate or incomplete data. • Right to Erasure: Request deletion of your data where there is no legal obligation for us to retain it. • Right to Restriction: Ask us to limit processing in certain circumstances. • Right to Object: Object to processing based on legitimate interests or for direct marketing. • Right to Data Portability: Receive your data in a structured, commonly used format. • Right to Complain: Lodge a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu — KVKK Board) at www.kvkk.gov.tr. To exercise any of these rights, contact us via www.studyleo.com/contact. We will respond within 30 days. Identity verification may be required.

We use cookies and similar technologies to operate our platform and improve your experience. Essential Cookies: Required for the website to function (e.g., session management, language preference). These cannot be disabled. Analytics Cookies: Help us understand how visitors use the site (e.g., Google Analytics). These are only placed with your consent via our cookie banner. Marketing Cookies: Used to deliver relevant advertisements and track campaign performance. Only placed with your explicit consent. You can manage cookie preferences at any time via the cookie settings in your browser or through our consent banner. Disabling non-essential cookies will not affect core functionality.

Our platform is intended for users who are at least 18 years old. We do not knowingly collect personal data from children under 18 without verifiable parental consent. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at www.studyleo.com/contact and we will delete the information promptly.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include: • HTTPS encryption for all data transmission • Access controls limiting data to authorized personnel only • Regular security assessments and audits • Secure document handling and storage procedures No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you via a notice on our website and/or by email (if you have an account). The date of the latest revision appears at the top of this page. We encourage you to review this policy periodically.

For any privacy-related questions, requests, or concerns, please contact us: StudyLeo LLC www.studyleo.com/contact Phone: +90 501 012 77 88 For formal KVKK data subject requests, you may also submit a written application by post to our registered address in Turkey or via the contact form, clearly marked as a KVKK data request.