Last updated: 23 September 2026
This Privacy Policy explains how BCFI FZE LLC ("BECATO", "we", "us") collects and uses personal data when you visit becatobusiness.com, contact us, book a call or send us files for an analysis. It also serves as our information notice under the Turkish Personal Data Protection Law No. 6698 (KVKK), the EU and UK General Data Protection Regulation (GDPR / UK GDPR) and UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
1. Data controller
BCFI FZE LLC, Amber Gem Tower, 26th Floor, Sheikh Khalifa St., Ajman, United Arab Emirates. Email: info@becatobusiness.com
BECATO is a brand of BCFI FZE LLC.
2. Data we collect
- Contact form: name, email, brand or website, marketplace, topic, message, your consent choice and the site language you used.
- Analysis request forms: name, email, brand, ASINs, marketplace, the details the form asks for (such as product cost, target price or target ACOS), any notes and your consent choice.
- Files you upload or share by link: marketplace and advertising reports (for example Seller Central, Brand Analytics and Amazon Ads exports), product photos, videos and page captures. These are mostly business data; if a file contains personal data, we treat it under this policy.
- Call bookings: name, email, the time you choose and any answers you give, collected through our Calendly booking page.
- Emails you send us: your email address and anything you include in your message.
- Technical data: IP address, browser type and access time, recorded in server logs by our hosting provider for security and operation.
We do not use analytics, advertising or tracking cookies. We do not ask for your passwords or access to your seller or advertising accounts.
3. Purposes and legal bases
- To answer your inquiry, prepare a proposal and hold the calls you book: steps taken at your request before entering into a contract, and our legitimate interest.
- To carry out the analyses and services you request, including reviewing the files you upload and preparing your report: performance of a contract.
- To keep the site secure and working: our legitimate interest.
- To keep accounting and tax records once you become a client: legal obligation.
- To transfer your data abroad where required: your explicit consent, given through the checkbox on our forms.
Under KVKK, your data is processed on the grounds set out in Article 5(2)(c) (establishment and performance of a contract), 5(2)(ç) (legal obligation) and 5(2)(f) (legitimate interest), and transferred abroad under Article 9. We do not sell your personal data and do not use it for automated decision-making or profiling.
4. Your business data and confidentiality
The reports and files you send us stay yours. We use them only to prepare your analysis and deliver the services you asked for. We never sell them, never share them with other clients and never use them to help a competitor.
We may use trusted software, including AI-powered analysis tools and market data tools, to process your files and produce your report. They are used only for your work.
We may show examples of our work on this site, such as report screenshots or sales and advertising charts, only after removing or blurring brand names, products, account names and identifying numbers. If you prefer that none of your data is used this way, email us and we will exclude it.
5. Service providers and international transfers
We use the following providers, which may process your data outside your country, including in the United States:
- Netlify, Inc.: website hosting, server logs, form submissions and uploaded files.
- Google LLC: email, Google Drive links you share with us, and Google Fonts. When the site loads, your browser connects to Google Fonts servers to load typefaces, which shares your IP address with Google.
- Calendly LLC: call scheduling and the video meeting links in your booking confirmation.
- Analysis software providers, including AI-powered tools, used to process the files you send for your report.
For transfers outside the EU/UK, Turkey or the UAE we rely on the safeguards offered by these providers, such as standard contractual clauses, and, where KVKK requires it, on your explicit consent.
6. How long we keep data
Inquiries that do not lead to a business relationship are deleted within 24 months. Files you upload for an analysis are deleted within 12 months of delivering your report, unless we keep working together. Client records are kept for the duration of the engagement and afterwards for as long as accounting and tax laws require. Server logs are kept by our hosting provider for a limited period.
7. Cookies and local storage
This site does not set cookies. We store your language choice (EN/TR) in your browser’s local storage so the site opens in your language next time. This is strictly necessary for a feature you use and you can clear it at any time in your browser settings. Our Calendly booking page opens on Calendly’s own domain and is governed by Calendly’s privacy and cookie policy.
8. Your rights
Depending on where you live, you have the right to:
- learn whether we process your data and request a copy of it;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data, including the files you uploaded, or restrict its processing;
- object to processing based on our legitimate interest;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing carried out before;
- learn the third parties in Turkey or abroad to which your data is transferred, object to results arising solely from automated processing, and claim compensation for damage caused by unlawful processing (KVKK Article 11).
To exercise any of these rights, email info@becatobusiness.com. We respond within 30 days.
9. Complaints
If you are not satisfied with our response, you can complain to your local data protection authority, such as the Turkish Personal Data Protection Authority (KVKK), a supervisory authority in the EU, the UK Information Commissioner’s Office (ICO) or the UAE Data Office.
10. Security
We use reasonable technical and organisational measures, including encrypted connections (HTTPS) and limited access to uploaded files, to protect your data. No transmission over the internet is completely secure.
11. Children
Our services are intended for businesses. We do not knowingly collect personal data from anyone under 18.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.