Privacy policy

Data controller

The controller for this website and the personal data described here is Sema & Talip Beauty & Spa Center. The address and phone number are at the bottom of the page. You can send any request under the Turkish Personal Data Protection Law (KVKK, Law No. 6698) or the EU General Data Protection Regulation (GDPR) to that address in writing or by phone.

What we collect and how

The site is a static showcase; it has no fields where you enter information. Personal data reaches us in three ways:

• When you contact us: if you write on WhatsApp or call, your name, phone number and message arrive on the salon phone. They are used only to arrange your appointment and reply to you.
• Technical logs: the hosting server and the Cloudflare infrastructure in front of it briefly record the IP address, date and time, browser type and page requested, for security purposes.
• Measurement tools: only if you accept in the cookie bar do Google Analytics and Google Ads cookies become active. They count which pages are read and whether visitors who came from an ad went on to contact us. If you do not accept, no measurement cookie is set. Details are in the cookie policy.

Purposes and legal basis

• Arranging appointments and answering your questions: performance of a contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)).
• Keeping the site secure and working: legitimate interest (KVKK art. 5/2-f; GDPR art. 6(1)(f)).
• Visit and advertising measurement: your consent (KVKK art. 5/1; GDPR art. 6(1)(a)). You can withdraw it at any time.

Third parties

Your data is never sold or shared for marketing. The following providers process data under their own privacy policies:

• WhatsApp (Meta Platforms): when you message us on WhatsApp, the conversation passes through their infrastructure.
• Google (Analytics, Ads, Tag Manager, Maps): measurement cookies only with your consent; the directions link takes you to Google Maps.
• Instagram (Meta): the link takes you to our account; no Instagram widget is embedded on the site.
• Cloudflare and the hosting server: technical logs and attack protection.

International transfers

Google’s and Meta’s servers are located outside Türkiye. By accepting measurement cookies you also consent to that transfer. Using WhatsApp or Instagram is your choice; you can reach us by phone without using either.

Retention

• Appointment messages: as long as needed after the appointment; deleted on request.
• Technical server logs: kept briefly for security and deleted on a regular schedule.
• Google Analytics data: 14 months; cookie lifetimes are listed in the cookie policy.

Client photos

Before-and-after photos on the site are published only with the explicit permission of the client shown. To withdraw permission, simply write to us; the photo is removed promptly.

Your rights

Under KVKK article 11 and GDPR articles 15 to 22 you may ask us to:

• Confirm whether we process your data, and if so, provide information about it.
• Explain the purpose of processing and whether the data is used accordingly.
• Correct incomplete or inaccurate data.
• Delete or destroy your data.
• Notify third parties who received your data of any correction or deletion.
• Compensate you for damage caused by unlawful processing. EU residents may also lodge a complaint with their local supervisory authority.

How to make a request

Send your request, with enough information to verify your identity, in writing to the address above, or make it in person at the salon. Requests are answered free of charge within 30 days.

Changes

This text is updated whenever a new feature is added to the site or the law changes. The current date is shown at the top of the page.