Personal Data Notice (KVKK)
This notice explains what personal data Lila Spa & Masaj Salonu collects from you, why we collect it, how long we keep it and what rights you have over it. It is issued under Turkish Personal Data Protection Law No. 6698, known as KVKK, which is the Turkish framework equivalent in purpose to the European GDPR.
We have written it in plain English rather than in legal formulae, because a notice nobody reads protects nobody. If anything here is unclear, ask us — the contact details are at the end of this page and on every page of this site.
Who the data controller is
The data controller is Lila Spa & Masaj Salonu, at Güneşli Mahallesi, Cumhuriyet Caddesi No:40, Bağcılar, Istanbul 34209, Türkiye. Contact: [email protected] or the telephone number shown throughout this site.
We are a small business. There is no separate data department: the same people who take your booking are the people responsible for the record it creates, and requests about your data are handled directly by us rather than routed through a third party.
What we collect, and why
Booking data: your name, mobile number, the date and time you requested and the treatment you chose. We collect this because we cannot hold an appointment without it. Legal basis: performance of a contract and our legitimate interest in running the salon.
Session notes: your pressure preference, the areas you asked us to work on, and any health information you volunteer in the welcome conversation. Health information is a special category of data under KVKK and we process it only with your explicit consent, given verbally at the time. You can decline to share it; we will then work more conservatively.
Messages: the content of WhatsApp conversations you have with us about bookings. Payment records: the amount and method, as required by Turkish tax law. We do not store card numbers — card payments are handled by the payment terminal and its provider, and we never see or retain the full number.
Who else sees it
Nobody, except in the following limited cases. WhatsApp messages pass through Meta's infrastructure, subject to their own terms. Card payments pass through the payment provider and the bank. Accounting records are shared with our accountant as required by law. Public authorities receive data only where a legal obligation requires it.
We do not sell your data. We do not share it with advertisers or data brokers. We do not build profiles of you for anyone else. Your session notes stay in this salon and are seen only by the therapists working with you.
How long we keep it, and how it is deleted
Booking and session records are kept for two years from your last visit, so that a returning guest does not have to explain everything again. Payment and accounting records are kept for ten years, because Turkish tax legislation requires it and we have no discretion in the matter. WhatsApp conversations are kept for one year.
At the end of those periods records are deleted or anonymised. You may also ask us to delete your data earlier — see the next section. The only records we cannot delete on request are those we are legally obliged to keep, which are the accounting ones.
Your rights, and how to use them
Under Article 11 of KVKK you have the right to learn whether we process your data; to request information about that processing; to learn its purpose and whether it is used consistently with it; to know who it has been transferred to; to have incorrect or incomplete data corrected; to request deletion or destruction; to have corrections and deletions notified to any third party the data was transferred to; to object to a result produced solely by automated analysis; and to claim compensation for damage caused by unlawful processing.
To exercise any of these, write to [email protected] with your name and the number you booked under, or ask at the salon. We reply within thirty days at the latest and usually much sooner. There is no charge. If you are not satisfied with our response you may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu).
The website itself
This website does not use advertising cookies and does not track you across other sites. Visitor statistics are collected in aggregate and without cookies, which means we can see that a page was viewed but not who viewed it. Details are in our privacy policy.
The site has no login, no account and no shopping basket, so there is nothing for us to store about you unless you contact us. If you send a WhatsApp message from a button on this site, that conversation is covered by the booking-data section above.
Frequently asked questions
Do I have to give you health information? No. It is optional and processed only with your explicit consent. If you decline, we work more conservatively.
Do you store my card number? No. Card payments are handled by the payment terminal and its provider; we never see or retain the full number.
How do I ask you to delete my data? Email [email protected] with your name and booking number, or ask at the salon. We respond within thirty days, free of charge.
Do you sell data to anyone? No. We do not sell it, share it with advertisers, or build profiles for third parties.
How long do you keep my records? Booking and session records for two years from your last visit; accounting records for ten years as Turkish tax law requires; WhatsApp conversations for one year.
Who can see my session notes? Only the therapists working with you. They do not leave this salon.
A question about your data?
Write to [email protected] or message us on WhatsApp. We answer directly, in English, and without charge.
Book via WhatsAppLegal and trust: Privacy Policy · Personal Data (KVKK) · About & Trust · Booking & Directions · FAQ · Prices