Legal
Privacy Policy
What information we collect when you visit our site, why we collect it, and how we protect it.
Last updated:
This text is a draft. The final version will be published once approved by the brand's legal counsel.
01
Scope
This policy applies to the Aşk İstanbul website and to the contact channels offered through it: the request form and the live support window.
Some links may take you to other companies’ pages (for example WhatsApp, hotel or clinic sites). We are not responsible for the data practices on those pages; the relevant company’s own privacy policy applies there.
As a brand based in Turkey we comply with Law No. 6698 (KVKK). For visitors from the European Economic Area and the United Kingdom we also observe the principles and rights set out in the GDPR.
02
Information we collect
We collect two kinds of information:
- What you provide: the name, phone / WhatsApp number, service selection and message you enter in the request form, and the conversations you send through the live support window.
- What is collected automatically: the pages you visit, the referring link, the site language you selected, an approximate country-level location derived from your IP address, and your browser and device type.
No payment is taken on this site: we neither request nor collect card or bank details. We also do not ask you to upload documents such as a passport, ID or medical report through the form; if the service process requires such a document, it is requested separately through a secure channel.
03
How we use the information
- To answer your request and prepare a suitable proposal.
- To carry out booking, appointment and organisation steps.
- To stay in touch with you throughout the service.
- To produce aggregated, non-identifying statistics that help us improve the site and find faults.
- To meet our legal obligations.
We never sell or rent your personal data and never share it with third parties for advertising purposes.
05
International transfers
The site infrastructure and data hosting services may run on servers outside Turkey. In that case the transfer is made within the framework of KVKK Art. 9 and the GDPR international transfer rules, with appropriate safeguards in place.
The list of providers used and the legal ground for the transfer will be stated explicitly in this section once the technical infrastructure is finalised.
06
Security
- The site and all form submissions run over an encrypted connection (HTTPS).
- Only authorised brand staff can access request and chat records.
- No visitor can read another visitor’s conversation; your chat history is stored on your own device.
No system is 100% secure. In the event of a data breach we inform the affected individuals and the Personal Data Protection Board within the period required by law.
07
Children’s privacy
Our services are intended for adults and we do not knowingly collect personal data from anyone under 18. If we realise we have received a child’s data by mistake, we delete it without delay. On family trips, children’s details are processed only when they are needed for a booking and at the request of a parent or guardian.
08
Your rights
Your rights under KVKK Art. 11 are set out in detail in the Data Protection Notice: you may access your data, request its correction or erasure, and object to its processing.
If you are connecting from the European Economic Area or the United Kingdom, under the GDPR you have rights of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw your consent at any time where processing is based on consent.
You can send your requests through the contact channels on this site; the official e-mail address reserved for applications will be published here once confirmed by the company.
09
Changes to this policy
We update this policy as our services or the law change. The current version is always published on this page and the “last updated” date at the top is refreshed. For a significant change we also publish a notice on the site.