Privacy Policy

01Who We Are

This website, www.aksarayspaturkishbath.com, is operated by Cemberlitas Spa Turkish Bath, a Turkish bath and massage spa located in Cemberlitas, Fatih, Istanbul, Türkiye.

For the purposes of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, the EU General Data Protection Regulation (“GDPR”), Cemberlitas Spa Turkish Bath is the data controller responsible for your personal data.

02Information We Collect

We only collect the information we need to answer your questions, arrange your visit and improve our website.

Information you give us

• Contact details: your name and phone number when you message or call us.
• Booking details: the treatment you choose, your preferred date and time, the number of guests and any notes you add.
• Health information you choose to share: for example pregnancy, allergies, injuries or a medical condition, so our therapists can keep your treatment safe and comfortable.

Information collected automatically

• Usage data: pages visited, buttons clicked, time on site and the page that referred you to us.
• Device data: browser type, device type, operating system, language and an approximate location based on your IP address.

03How We Use Your Information

• To answer your messages and confirm, change or cancel your appointment.
• To prepare your treatment and take your health information into account.
• To understand how visitors use our website and improve its content and performance.
• To measure which pages and buttons lead to bookings.
• To meet our legal, accounting and tax obligations.
• To protect our website, guests and business against misuse or fraud.

We do not sell your personal data and we do not use it for automated decisions that significantly affect you.

04Legal Basis for Processing

We process your personal data under Article 5 of KVKK and, where applicable, Article 6 of the GDPR, on the following grounds:

• Performance of a contract: to arrange and provide the treatment you request.
• Legal obligation: to keep records required by Turkish law.
• Legitimate interests: to run, secure and improve our website and services.
• Your explicit consent: for analytics cookies and for any health information you share with us. You can withdraw your consent at any time.

05WhatsApp & Bookings

The booking and contact forms on this website do not send or store your data on our server. When you press the send button, the form prepares a message and opens WhatsApp on your device. Nothing is sent until you choose to send that message yourself.

Once you send it, your message is delivered through WhatsApp, a service of WhatsApp LLC / Meta Platforms. Your use of WhatsApp is also governed by the WhatsApp Privacy Policy. We use these conversations only to answer your questions and manage your booking.

06Cookies & Analytics

Cookies are small text files stored on your device. We use them to keep the website working and, with your consent, to understand how it is used.

You can accept or reject non-essential cookies in our cookie banner and change your mind at any time. You can also block or delete cookies in your browser settings. To opt out of Google Analytics on all websites, you can use the Google Analytics Opt-out Browser Add-on.

07Sharing Your Information

We share personal data only when needed, and only with:

• Service providers that help us run the website and communicate with you, such as our hosting provider, Google and WhatsApp.
• Public authorities when the law requires it, such as courts, tax offices or law enforcement.
• Professional advisers such as accountants or lawyers, under a duty of confidentiality.

08International Transfers

Some of our service providers, including Google and WhatsApp / Meta, may process data on servers outside Türkiye, including in the European Union and the United States. These transfers are made in line with Article 9 of KVKK and, where applicable, the GDPR, using appropriate safeguards or your explicit consent where required.

09Data Retention

We keep personal data only as long as necessary for the purpose it was collected for, or as long as the law requires.

• Booking messages: kept for as long as needed to manage your visit and any follow-up questions.
• Accounting and tax records: kept for the periods required by Turkish law.
• Analytics data: kept for up to 14 months, after which it is deleted or anonymised.

When data is no longer needed, we delete, destroy or anonymise it.

10Your Rights

Under Article 11 of KVKK and, where applicable, the GDPR, you have the right to:

• Learn whether we process your personal data and request information about it.
• Learn the purpose of processing and whether it is used accordingly.
• Know the third parties, in Türkiye or abroad, to whom your data is transferred.
• Ask us to correct incomplete or inaccurate data.
• Ask us to delete or destroy your data.
• Object to processing and to results that arise solely from automated analysis.
• Withdraw your consent at any time.
• Claim compensation if you suffer damage from unlawful processing.
• For EU visitors: request a copy of your data in a portable format and lodge a complaint with your local data protection authority.

To use these rights, contact us using the details below. We will respond as soon as possible and within 30 days at the latest. If you are not satisfied with our response, you may apply to the Turkish Personal Data Protection Authority (kvkk.gov.tr).

11Data Security

We use reasonable technical and organisational measures to protect your personal data, including an encrypted (HTTPS) connection, limited staff access and secure, up-to-date systems. No method of online transmission is completely secure, but we work hard to protect your information.

12Children's Privacy

Our website and booking services are intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has shared personal data with us, please contact us and we will delete it.

13Changes to This Policy

We may update this policy from time to time to reflect changes in our services or the law. The latest version will always be published on this page with its “Last updated” date.

14Contact Us

If you have any questions about this policy or your personal data, please get in touch.