Privacy Policy
Last updated: February 2026
This Privacy Policy describes how BambuBee collects, uses, stores, and protects your personal data when you interact with our website contact form. It has been prepared in accordance with applicable data protection regulations, including the Turkish Personal Data Protection Law (KVKK No. 6698) and, where applicable, the EU General Data Protection Regulation (GDPR). We are committed to processing your data transparently, lawfully, and fairly.
1. Data Controller
The developer and operator of the BambuBee application acts as the data controller in respect of personal data collected through this website. Contact details are as follows:
2. Personal Data We Collect, Why, and Our Legal Basis
We collect only the minimum personal data necessary to respond to your inquiry through the contact form. The table below sets out each data category alongside its processing purpose and legal basis:
Full Name
Purpose: To personalise our communication and address you correctly
Legal basis: Explicit consent (KVKK Art. 5(1) / GDPR Art. 6(1)(a))
Email Address
Purpose: To respond to your inquiry and follow up if necessary
Legal basis: Explicit consent (KVKK Art. 5(1) / GDPR Art. 6(1)(a))
Message Content
Purpose: To understand, evaluate, and appropriately address your request
Legal basis: Explicit consent (KVKK Art. 5(1) / GDPR Art. 6(1)(a))
No personal data beyond the above is collected. No data is collected directly from children through the application or this website.
3. How We Collect Your Data
Your personal data is collected electronically through the contact form on this website, strictly on a voluntary basis. Submission of the form requires you to read and expressly tick the consent checkbox — this constitutes your freely given, specific, informed, and unambiguous consent.
You may withdraw your consent at any time by contacting us at the address below. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
4. Data Sharing and Third-Party Processors
Your personal data is shared only with the following carefully selected sub-processor and solely for the purpose stated:
Resend Inc. USA
Transactional email delivery infrastructure. Upon form submission, your name, email address, and message content are transmitted to Resend solely to deliver the email notification to us. Resend is SOC 2 Type II certified and processes data under Standard Contractual Clauses (SCCs) for international transfers. resend.com/privacy
We do not sell, rent, trade, or otherwise disclose your personal data to any other third parties — including advertising networks, analytics providers, or public authorities — except where required by law.
5. Data Retention
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected. The following retention periods apply:
Deleted permanently within 30 days of your inquiry being resolved, or immediately upon withdrawal of consent, whichever is earlier.
No personal data is kept beyond the periods set out above unless required by applicable law.
6. Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration:
- →All website communications are encrypted using HTTPS / TLS 1.2+.
- →Access to personal data is restricted to the data controller; third-party access is minimised to what is strictly necessary.
- →Third-party processors are selected on the basis of their industry-recognised security certifications.
- →Personal data is processed only to the extent necessary for the stated purpose (data minimisation).
7. Cookies
This website uses only strictly necessary functional cookies required for the site to operate correctly (e.g. session management). No advertising, tracking, or third-party analytics cookies are placed. These cookies do not require separate consent and expire at the end of your browser session.
8. Children's Privacy
BambuBee is an educational application for children aged 3–6. However, we do not knowingly collect personal data directly from children through this website. The contact form is designed exclusively for parents, guardians, and other adults.
If we become aware that personal data has been submitted by or on behalf of a child under 13 without verifiable parental consent, we will delete it from our systems without delay. If you believe your child's data has been inadvertently collected, please contact us immediately.
9. Your Rights
Subject to applicable law, you have the following rights in respect of your personal data:
- ✓Right of Access: Obtain confirmation of whether your data is being processed and receive a copy (GDPR Art. 15 / KVKK Art. 11(b))
- ✓Right to Rectification: Request correction of inaccurate or completion of incomplete data (GDPR Art. 16 / KVKK Art. 11(d))
- ✓Right to Erasure: Request deletion of your data where it is no longer necessary for the purpose collected ('right to be forgotten') (GDPR Art. 17 / KVKK Art. 7)
- ✓Right to Restriction: Request that processing be restricted in certain circumstances (GDPR Art. 18)
- ✓Right to Data Portability: Receive your data in a structured, commonly-used format (GDPR Art. 20)
- ✓Right to Object: Object to processing based on legitimate interests (GDPR Art. 21)
- ✓Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing (GDPR Art. 7(3) / KVKK Art. 11)
- ✓Right to Lodge a Complaint: File a complaint with your local supervisory authority (e.g. Turkey: KVKK Board — kvkk.gov.tr; EU: your national DPA)
How to Exercise Your Rights
Submit your request to aslimutlu000@gmail.com with the subject line "Privacy Request". We will respond within 30 days. Requests are handled free of charge unless manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
10. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data processing practices. The latest version will always be available at bambubee.com/privacy or via the "Privacy Policy" link in our website footer. Where changes are material, we will notify you by email if we hold your contact details.