Privacy Policy

1. INTRODUCTION AND PRIVACY COMMITMENT

1.1. Our Privacy Vision

At Dog Craft Academy (the “Academy”), privacy is not merely a legal obligation for us; it is the most fundamental building block of the trust-based relationship we build with our clients.

1.2. Safe Space Commitment

In all interactions you carry out through www.dogcraftacademy.com and the DCA Family Management Panel, we undertake to apply the same scientific rigor to protecting the security of your and your family’s data that we apply to protecting your dog’s psychological well-being.

1.3. Principle of Transparency

This policy has been prepared to transparently disclose by which technological infrastructures the information you share while using our digital platforms is protected, how it is structured in training and analysis processes, and how it is processed in order to offer you a more seamless and personalized user experience.

1.4. Our Digital Ethical Values

Your data is managed solely for the purpose of providing you and your companion with the most accurate guidance and improving your experience on the platform, in compliance with the law, the rules of good faith and the high ethical standards of our Academy.

2. DATA SECURITY AND INFRASTRUCTURE STANDARDS

Dog Craft Academy uses modern cybersecurity technologies and industry-standard infrastructures to ensure the confidentiality of its clients’ data.

2.1. End-to-End Encryption (SSL Certificate)

All data traffic you generate through our website (www.dogcraftacademy.com) and the DCA Family Management Panel is protected by a 256-bit SSL (Secure Sockets Layer) certificate. By encrypting the information exchanged between your browser and our servers, this technology makes it impossible for the data to be read or altered by third parties.

2.2. Secure Cloud Storage and Backup

Your case analysis videos, form responses and training documents are stored on Google Workspace servers, one of the most secure cloud infrastructures in the world. Your data is protected by high-level encryption algorithms both in transit and while at rest on the servers.

2.3. Password and Authentication Security

The passwords you use to access the DCA Family Management Panel are not stored in our systems as "plain text", but by means of irreversible mathematical functions (hashing). This prevents your actual password from being obtained even in the event of an attempted unauthorized access.

2.4. Firewalls Against Unauthorized Access

Our infrastructure is equipped with continuously updated firewalls and intrusion detection systems. Our systems have a proactive security architecture that automatically detects and blocks unusual login attempts or suspicious activity.

2.5. Physical Data Security

The server centers hosting your digital data are international facilities protected by 24/7 physical security personnel, biometric access controls, and fire and natural disaster protection systems.

3. DCA FAMILY MANAGEMENT PANEL: USE AND ACCESS PRIVACY

The DCA Family Management Panel is a personalized "Digital Safe Space" designed to enable our clients to continue their training processes securely in a digital environment.

3.1. Personalized Content and Isolation

The content displayed to you when you log in to the panel is assigned entirely according to your profile and your dog’s specific needs. Other clients of the Academy cannot see your profile under any circumstances.

3.2. User Authentication Responsibility

Access to the panel is provided by means of a username and password created on the basis of the email address you have declared to our Academy. The user is personally responsible for not sharing their access credentials with third parties and for ensuring the security of their login information. In case of suspicion, a password change should be requested or the Academy should be notified.

3.3. Session and Transaction Confidentiality (Logging)

For the purposes of optimizing system security and detecting potential unauthorized logins, technical data such as information on the device from which you log in, your IP address and session duration are recorded within the scope of "Transaction Security". This data is used solely for the continuity and security of the system.

3.4. Intellectual Property and Confidentiality of Assigned Content

The training materials, videos and documents provided to you through the panel are exclusively for your own use. Removing this content from the panel, saving it or sharing it with third parties infringes both the Academy’s intellectual property rights and the confidentiality principles of the training process.

3.5. Access by the Assigned Trainer

Your data and progress records may be viewed only by the expert trainer guiding you and by our system administrator, for the purpose of the "Performance of the Service". This access is limited to monitoring your dog’s progress in real time and providing you with the most appropriate intervention protocols.

Training Guides and Personalised Content

The training guides assigned to you in the Panel are the intellectual property of the Academy. To protect this content, the date, time and IP address at which you view a guide are written to the security logs, and the page carries a visible watermark containing your name and e-mail address as well as an invisible user marker. These records are used solely to detect unauthorised sharing of the content and to protect legal rights.

4. PROTECTION OF ANALYSIS VIDEOS AND VISUAL MATERIALS

Dog Craft Academy classifies visual materials (videos, photographs, audio recordings), which are an indispensable part of behavior analysis and rehabilitation processes, as "Highly Confidential" data.

4.1. Use for Technical Analysis

All visual materials sent by you or recorded during training sessions are used exclusively for the purposes of interpreting your dog’s body language, identifying triggers and creating rehabilitation protocols specific to you. For our trainer, these videos constitute clinical "case findings".

4.2. Protection of Privacy and Restricted Access

Details relating to your private living space that appear in the videos you share (home layout, family members, etc.) are protected in accordance with our Academy’s privacy principles. Only the expert trainer responsible for the case and the system administrator may access these videos. The videos are stored encrypted and are closed to access by third parties.

4.3. Separation from Social Media and Promotion

Progress videos from the training process (Before/After videos, etc.) may be shared on the Academy’s social media accounts, website or reference catalogs if and only if you give separate digital or written consent (Explicit Consent). No footage may be used for promotional purposes without your consent.

4.4. Digital Analysis Forms and Upload Security

Videos you upload through the application form on our website are transferred over an encrypted connection (HTTPS) directly to a folder dedicated to your application in the Academy’s Google Drive account. Only the Academy’s management and the trainer to whom your application is assigned may access these folders.

4.5. Archiving and Destruction Process

Analysis videos are retained for the periods determined within the framework of our "Lifelong Guidance" vision, so that your dog’s development history can be tracked. Upon request by the client, or when the retention period expires, these videos are irreversibly deleted from our digital systems.

4.6. Anonymization for Educational Purposes

Where recordings of rare behavioral disorders are to be used in the training of other trainer candidates or in academic studies, all details that could reveal the identity of the family and the location (faces, personal belongings, etc.) are blurred or cropped so that the recordings are rendered fully anonymous.

5. COOKIE POLICY AND TRACKING TECHNOLOGIES

Dog Craft Academy (the “Academy”) uses cookies and similar tracking technologies in order to improve the experience of users visiting our website (www.dogcraftacademy.com), ensure site security and analyze site performance.

5.1. What Is a Cookie?

Cookies are small text files that are saved on your device (computer, tablet or phone) when you visit a website. These files help us recognize you on your next visit and offer you a more personalized service.

5.2. Types of Cookies Used

• Strictly Necessary Cookies: These are technically necessary for our website to function properly, for you to log in securely to the DCA Family Management Panel and for you to fill in forms.
• Performance and Analytics Cookies: These collect anonymous data that helps us understand which sections of our site are visited most and improve our content (e.g. Google Analytics).
• Functional Cookies: These remember your choices, such as your language preference, so that you do not have to re-enter the same settings each time you visit the site.

5.3. Google Infrastructure and Third-Party Cookies

Services used on our site, such as Sign in with Google, Google Drive, reCAPTCHA and analytics tools, may cause Google to place its own cookies on your device. These cookies are subject to the privacy policies of the relevant platforms, and some of the data may, out of technical necessity, be processed on secure servers located abroad.

5.4. Purposes of Cookie Use

• To keep users’ sessions on the DCA panel active and secure.
• To analyze application traffic to our social responsibility projects such as "Skoru Eşitle".
• To facilitate users’ navigation within the site and to detect technical errors.

5.5. Cookie Management and Control

You are not obliged to accept cookies. Through your browser settings, you can block cookies entirely, delete those already saved, or choose to receive a warning when a cookie is sent. Please note, however, that if cookies are disabled, some functions of our website (in particular panel login and analysis forms) may not work properly.

6. THIRD-PARTY PLATFORM INTEGRATIONS

Dog Craft Academy uses certain trusted third-party platforms in order to digitize its training processes and communicate quickly with its clients. Data privacy during the use of these platforms is subject to the following principles:

6.1. Google Infrastructure (Drive, Analytics, reCAPTCHA)

Our Academy uses the infrastructure of Google Ireland Limited for storing application videos and case documents, analyzing site usage and protecting forms against abuse.

The information you enter in the forms on our website is hosted on the Academy’s own server, while the videos you upload are hosted on Google’s high-security cloud servers.

This data is stored under corporate accounts controlled by our Academy, and no third party, including Google, is permitted to process this content for commercial purposes.

6.1.1. Sign in with Google and Data Obtained from Google API Services

Sign in with Google: When you use the "Continue with Google" option on the member login page, only your name, email address and Google account ID are obtained from your Google account. This information is used solely to create your member account and to log you in to the system securely. Your Google password is never accessed in any way, and no access is requested to any other data in your Google account (emails, files, contacts, etc.).

Google Drive (application videos): The videos you upload during the Skoru Eşitle pre-application process are transferred from your browser directly to a folder dedicated to your application in the Google Drive account belonging to Dog Craft Academy. Your Google account is not accessed for this operation. The website’s authorization on the Academy’s Drive account is limited to the "drive.file" scope; that is, the application can access only the application folders and files it has created itself. The videos are viewed solely for the purpose of case analysis by the Academy’s management and the trainer to whom the application is assigned.

Limited Use commitment: Dog Craft Academy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained from Google is not sold, is not used for advertising purposes and is not transferred to third parties for any purposes other than those stated above.

You may revoke the access your Google account has granted to our site at any time via the Google Account → Third-party apps page, and you may request the deletion of your account and data by writing to info@dogcraftacademy.com.

6.2. WhatsApp and Instant Messaging Channels

The WhatsApp platform, used in rapid analysis and remote support processes, features end-to-end encryption.

Videos and messages you share through this channel are encrypted during transmission.

However, under WhatsApp’s own terms of use and privacy policies, how data shared through this platform is processed on Meta (Facebook) infrastructure is the responsibility of the relevant company. Our Academy is responsible only for the security of the data that reaches it.

6.3. Payment Systems and Financial Intermediaries

Where payments for our training services are made through digital channels, your credit card information passes directly through the infrastructure of the relevant bank or licensed payment institution (e.g. Iyzico, Stripe, etc.). The Academy does not hold or store your credit card numbers in its systems under any circumstances.

6.4. Social Media Integrations

When you share content through social media plug-ins on our website, such as Instagram or YouTube, or are redirected to these channels, the privacy policies of the relevant channel apply. Our Academy cannot be held responsible for the data collection activities of social media platforms.

6.5. Limitation of Liability

The Academy exercises the utmost care in selecting the third-party platforms it uses. Nevertheless, in situations that may arise from system vulnerabilities or policy changes occurring within the infrastructure of these platforms, the privacy commitments of the relevant platform provider shall govern.

6.6. Cloudflare (Security and Content Delivery)

Our websites (dogcraftacademy.com and skoruesitle.com) are delivered through the Cloudflare, Inc. network to protect them against attacks and to load pages quickly. When you visit the website, technical connection data such as your IP address, browser information and the requested page address pass through Cloudflare’s servers, which may be located abroad, in order to block malicious traffic. Cloudflare processes this data solely for security and service delivery, as a data processor on behalf of the Academy; your form entries, panel data and uploaded files are not stored by Cloudflare. The uptime monitoring service we use to detect outages only checks a technical status address and does not process personal data.

7. PRIVACY IN TALENT & MEDIA (CASTING) PROCESSES

Dog Craft Academy manages the data of both its clients and their dogs with professional privacy discipline in the "Talent & Casting" processes it carries out for the media sector.

7.1. Portfolio Creation and Scope

The dog’s physical characteristics, training level, suitability for on-set performance and the owner’s contact details, collected through the forms of the "Talent & Media" branch, are processed solely for the purpose of matching with suitable projects. This data is kept in a "Casting Portfolio" separate from standard training consultancy data.

7.2. Data Sharing with Production Companies and Agencies

If your dog is found suitable for a commercial, TV series, film or production project:

• At the first stage, only anonymized profiles containing the dog’s skills and appearance are shared.
• Your contact details and full identity are transferred to the relevant production officials only if the project is confirmed or proceeds to the audition stage, and subject to your consent.

7.3. Visual Recordings During Set and Filming Processes

"Test recordings" made for casting assessments or behind-the-scenes footage are stored in accordance with the project’s non-disclosure agreements (NDA). The necessary technical and legal measures are taken to ensure that this footage is not shared on any channel until the project is released.

7.4. Protection of Trade Secrets

Agency commissions, appearance fees and contract details involved in casting processes are deemed trade secrets of the Academy and the relevant person and are not shared with third parties.

7.5. Right to Leave the Portfolio

You may request to leave the "Talent & Media" portfolio at any time. Upon your request, the casting data and performance records relating to your dog are deleted from our systems or deactivated, unless there is an ongoing project or a project subject to a legal obligation.

8. APPROACH TO THE PRIVACY OF CHILDREN AND FAMILY MEMBERS

Dog Craft Academy regards the safety and privacy of the household as its highest-priority criterion in training and rehabilitation processes. Data collected regarding family structure is evaluated entirely within the scope of operational risk management.

8.1. Children’s Data Security

Our services are not directed at individuals under the age of 18. However, the presence of children or babies in the dog’s living environment directly affects the training methodology to be applied (within the framework of the LIMA protocol) and the safety measures. Therefore:

• Data relating to children (age range, level of interaction, etc.) is processed only if declared by their parents or legal representatives.
• This information is not used for any purpose other than designing the dog’s safe interaction with children.

8.2. Household Risk Analysis and Privacy

Questions in our forms such as "number of people living in the home" or "presence of a vulnerable individual in the home" are intended to anticipate the risk of sudden reactions (biting, knocking over, reactivity, etc.) that may arise during the rehabilitation process. This data constitutes the most critical element in determining the urgency of a case in the "Professional Triage" process and is protected by our Academy with the status of "Highly Sensitive Data".

8.3. Visual Privacy of Family Members

Images of family members that inadvertently appear in training videos or analysis recordings:

• Are disregarded after analysis unless they are necessary for progress tracking.
• In videos to be used for promotional or social media purposes, the faces of family members (especially children) may be blurred or cropped in accordance with our Academy’s child protection policy, even where a declaration of consent has been given.

8.4. Informing Third Parties

It is the responsibility of our client, in their capacity as "Data Subject", to inform all family members involved in the training process that their data is processed by our Academy. During home visits, the Academy shows the utmost respect for the household’s private spaces.

8.5. Preparation Processes for Babies and New Members

Information shared regarding a baby or individuals who will be joining the family is used solely to create "Pre-Adoption Consulting" or a "Baby Preparation Protocol", and may be deleted from our systems as a priority upon request once this sensitive period has passed.

9. DATA BREACH NOTIFICATION PROCEDURES

Although Dog Craft Academy (the “Academy”) protects its digital infrastructure with state-of-the-art security systems, it has a "Breach Response Plan" in place to prepare for potential risks in the world of cybersecurity.

9.1. Definition of a Data Breach

Cases in which personal data held by the Academy is unlawfully obtained, deleted or altered by others, or made accessible to unauthorized persons, are deemed a "Data Breach".

9.2. Detection and Response

As soon as any suspicious activity or evidence of a breach is detected in our systems:

• The Academy’s technical team intervenes immediately and cuts off the source of the breach.
• Data security barriers are updated and points of intrusion are closed.
• A comprehensive technical investigation is launched into the extent of the breach, the data affected and its possible consequences.

9.3. Notification Obligation and Time Limits

If the breach is determined to be at a level that may put the rights and freedoms of data subjects (clients) at risk:

• Notification to the KVK Board: An official notification is made to the Personal Data Protection Board (KVK Kurulu) within 72 hours at the latest from the detection of the situation.
• Notification to the Data Subject: Our clients affected by the breach are informed without delay via the email addresses registered with our Academy or through an announcement to be published on our website.

9.4. Content of the Notification

The breach notification to be sent to you will include the following information:

• When and how the breach occurred,
• Which categories of personal data (name and surname, videos, contact details, etc.) were affected,
• The possible consequences of the breach and the individual measures our clients can take,
• The technical measures taken by the Academy to remedy the breach and prevent its recurrence.

9.5. User Responsibility

Users of the DCA Family Management Panel must notify the Academy without delay via info@dogcraftacademy.com as soon as they become aware that their password has been stolen or that their account has been accessed without authorization. In breaches arising from user negligence (password sharing, etc.), the notification obligation begins with the user’s declaration.

10. POLICY UPDATES AND CONTACT INFORMATION

Dog Craft Academy (the “Academy”) reserves the right to update this policy at any time in order to adapt to technological developments, new service areas or changes in legislation.

10.1. Updates and Publication

Any changes made to this policy take effect as of the moment they are published on our website (www.dogcraftacademy.com). The "Last Updated Date" at the bottom of the policy is provided so that you can keep track of how current the text is. In the event of significant changes, users of the DCA Family Management Panel may additionally be informed by email or by an in-panel notification.

10.2. Acceptance and Validity

Your continued use of our website, completion of digital analysis forms or logging in to the DCA Family Management Panel means that you accept the terms set out in this policy and any updates that may be made to it. If you do not accept a change made to the terms, you must stop using our digital services.

10.3. Contact Us

For any questions, comments and suggestions regarding our privacy practices, data security standards or the provisions of this policy, you can contact us through the following channels:

• Data Controller: Dog Craft Academy
• Official Email: info@dogcraftacademy.com
• Website: www.dogcraftacademy.com

10.4. Effective Date

This policy was published as part of the Academy’s digital transformation process and is applied simultaneously across all of our digital assets.

Last Updated: October 5, 2026