Privacy Policy

01Data controller

For the purposes of Law No. 6698, the data controller is Yıldız Kızılcan Güzellik Salonu İşletmeciliği Limited Şirketi, whose details are set out below.

Business nameYıldız Kızılcan Beauty Salon
AddressAdnan Saygun Cad. Venüs Sok. Orkide Apt. No:1/5, Ulus, Beşiktaş, İstanbul
Telephone / WhatsApp+90 530 478 00 91
Emailinfo@yildizkizilcan.com.tr
Opening hoursMonday – Saturday, 09:30 – 19:00
Websitewww.yildizkizilcan.com.tr

02Personal data we process

Identity data: your first name and surname.
Contact data: your telephone number, your e-mail address and the address you provide for the delivery of a gift card.
Customer transaction data: your appointment dates, the treatments and gift cards you purchase, and your requests and comments.
Payment data: the amount, date and outcome of the payment. Your card number and security code are not shared with us.
Treatment-related data: information on your skin condition, allergies or health that you share so that the treatment can be carried out in a manner that is suitable and safe for you. This information constitutes special categories of personal data and is processed only with your explicit consent.
Transaction security data: the IP address, browser and device information generated when you visit our website, and the pages visited.

03Purposes of processing

To make and amend your appointments,
To provide the treatment services and gift cards you purchase, to collect payments and, where necessary, to make refunds,
To plan your treatment in a manner that is suitable and safe for you,
To respond to your questions, requests and complaints,
To issue invoices and fulfil our obligations arising under the legislation,
To ensure the security of our website and to improve it by measuring visit statistics.

04Legal grounds

Your personal data are processed on the basis of the legal grounds set out in Article 5 of the KVKK: where processing is necessary for the conclusion or performance of a contract, for compliance with our legal obligations, and where it is necessary for our legitimate interests, provided that this does not harm your fundamental rights and freedoms. Special categories of personal data, such as your health information, are processed only with your explicit consent, pursuant to Article 6 of the KVKK.

05Payment security

All data exchanged between you and our website is encrypted by means of an SSL certificate. Card payments are processed on the secure payment infrastructure of iyzico, a licensed payment institution. Your card number, expiry date and security code are neither seen nor stored by our salon. Where your bank supports it, your payments are protected by 3D Secure verification.

06Cookies and visit statistics

Our website does not use third-party cookies for advertising or personalisation purposes. We keep visit statistics on our own server: a randomly generated visitor ID is stored in your browser’s local storage. This ID is not linked to your name, your telephone number or any other personal information about you.

In visit records, only your approximate city is derived from your IP address. IP addresses are truncated after 30 days and records are de-identified after 6 months. If the “Do Not Track” or Global Privacy Control setting is enabled in your browser, your visit is counted solely as a page view, without the use of an ID.

Google Maps is used in the map section and Google Fonts for typefaces. When this content loads, Google may process certain technical information under its own privacy terms. You may delete or block local storage and cookies at any time through your browser settings.

07Transfer of personal data

Your personal data may be shared with the following parties solely for the purposes set out above and only to the extent necessary:

With iyzico and the relevant banks, for the collection and refund of payments,
With the service providers we engage for hosting our website and for e-mail and messaging services,
With legally authorised public authorities and institutions and, upon request, with judicial authorities.

The servers of some of our service providers may be located abroad; in such cases, the transfer is carried out in accordance with the conditions set out in Article 9 of the KVKK. Your personal data are not sold and are not shared with third parties for advertising purposes.

08Retention period

We retain your personal data for the period required by the purpose of processing and for the retention periods prescribed by the relevant legislation. When these periods expire, your data are erased, destroyed or anonymised.

09Your rights

Pursuant to Article 11 of the KVKK, by applying to us you may:

learn whether your personal data are being processed,
request information about the processing, if your personal data have been processed,
learn the purpose of the processing and whether your data are being used in accordance with that purpose,
know the third parties, domestically or abroad, to whom your data have been transferred,
request rectification if your data have been processed incompletely or inaccurately,
request the erasure or destruction of your data within the framework of the conditions set out in Article 7 of the KVKK,
request that any rectification, erasure or destruction be notified to the third parties to whom your data have been transferred,
object to any outcome to your detriment arising from the analysis of your data exclusively by automated systems,
claim compensation for any damage you suffer as a result of unlawful processing.

You may withdraw the consent you have given for processing based on explicit consent at any time.

10Applications

To exercise your rights, you may submit your request by e-mail to info@yildizkizilcan.com.tr or in writing to our salon address. We will conclude your application free of charge within 30 days at the latest.

11Changes

We may update this text in line with changes in legislation or in our services. The current version is always published on this page; the date of the last update appears at the top of the page.