Grace VIP Aesthetics & Beauty Center

Legal

Personal Data Protection Notice (KVKK)

This translation is provided for information only. In the event of any discrepancy or dispute, the Turkish version shall prevail.

This text is a template and requires legal review before publication. Fields in square brackets must be completed with the business details.

Last updated: 24.09.2026

In accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”), [TODO: Company name] (Grace VIP Aesthetics & Beauty Center, the “Center”), acting as data controller, processes your personal data within the scope described below.

1. Data controller

  • Company name: [TODO: Company name]
  • Address: Yukarı Bahçelievler Mah. 70. Sk. No: 15 İç Kapı No: 6, Çankaya / Ankara 06490, Ankara
  • Tax office / number: [TODO: Tax office and tax number]
  • Email: [TODO: KVKK application email]
  • Phone: +90 533 022 50 95

2. Personal data processed

Depending on the nature of your relationship with our Center, the following data may be processed:

  • Appointments: full name, phone number, email (optional), selected service and specialist, appointment date and time, notes, appointment code, IP address and browser information.
  • Orders (online shop): full name, phone, email, delivery address, order contents and preferred payment method (card details are not stored on our site).
  • Contact form, site chat window and WhatsApp messages: full name, phone, email, message content and correspondence history.
  • Pre-treatment assessment: only information such as sensitivities/allergies that is necessary for the treatment to be performed safely; information qualifying as special category health data is processed only with your explicit consent and only to the extent necessary.
  • Technical data: strictly necessary cookies and browser storage (cart, member session, language preference, Google sign-in steps) and server access logs. For the list of cookies, see our Privacy and Cookie Policy.

3. Purposes of processing

  • Receiving, confirming and reminding you of appointment requests, and handling cancellations/changes
  • Creating, preparing and delivering orders, and tracking payments
  • Responding to contact requests and managing customer relations
  • Planning treatments in a way that is suitable and safe for you
  • Fulfilling legal obligations (invoicing, accounting, consumer legislation)
  • Ensuring the security of the site and preventing misuse

4. Legal grounds

Your personal data is processed under Article 5/2 of the KVKK on the legal grounds that processing is necessary for the establishment or performance of a contract (c), for the data controller to fulfill its legal obligations (ç), for the establishment and protection of a right (e), and for our legitimate interests (f); in cases falling outside this scope and for special category data, it is processed on the basis of your explicit consent.

4.1. Adding your appointment to your device calendar (explicit consent)

By ticking the KVKK consent box on the appointment form, your consent under this section is also obtained, and a calendar entry (.ics file and Google Calendar link) is created for your appointment. Only you start the process of adding it to a calendar, using the “Add to calendar” button on the appointment confirmation screen; the entry is added to your own device.

  • Information included in the entry: service name, appointment date and time, center address, appointment code and (if you chose one) the specialist's name. Your name, phone number and email address are not added to the calendar entry.
  • How it works: our website cannot write to the calendar on your device by itself. The entry opens in your device's calendar app (Calendar on iPhone/iPad, Google Calendar on Android, Outlook or Calendar on a computer), and you confirm the addition. If you use the Google Calendar option, the information is sent to Google by you.
  • Record: the date and time your consent was given is stored together with your appointment record. The calendar link is shown only to the person who created the appointment and is protected by an unguessable signature.
  • Withdrawal: you may withdraw your consent at any time through the application channels below; in that case your calendar link is disabled. You can delete an entry already added to your device from your calendar app. Not giving consent does not prevent you from booking an appointment.

5. Transfer of data

Your personal data may be transferred to the following parties, strictly limited to the relevant purpose:

  • Cargo and delivery companies (for order delivery)
  • Banks and payment institutions (for tracking bank transfers/EFT)
  • Server/hosting and software service providers (for storing data)
  • WhatsApp (Meta Platforms) — the content of your messages if you write to us on WhatsApp; in addition, transaction notifications (appointment request/confirmation/reminder, order status and the member sign-in verification code) are sent to your phone number via WhatsApp
  • Cloudflare — access to our site is provided through a content delivery network (CDN) and security service; in this context your IP address and request information are processed. If Cloudflare Turnstile verification is enabled on forms, browser and device signals are sent to Cloudflare for verification
  • Google — only if you use the “Sign in with Google” option (your Google account identifier and email address during sign-in)
  • Artificial intelligence service providers (DeepSeek, Google Gemini, Groq) — only when this feature is enabled in the admin panel; the content of the messages you write in the site chat window and to our WhatsApp line is sent to these providers to generate automatic replies
  • Authorized public institutions and organizations (where legally required)

Some of these service providers may have servers located abroad. [TODO: the legal basis for transfers abroad under KVKK Article 9 must be determined with legal counsel and stated here.]

6. Method of collection

Your data is collected electronically or physically through the appointment, order and contact forms and the chat window on our website, our WhatsApp line, phone calls and in-person transactions at our Center.

7. Retention period

Appointment and contact records are kept for [TODO: retention period, e.g. 2 years] after the relationship ends; order and invoice records are kept for the period required by the relevant legislation (10 years for commercial books and documents). At the end of the period, the data is deleted, destroyed or anonymized.

8. Your rights (KVKK Article 11)

  • To learn whether your personal data is processed and, if so, to request information about it
  • To learn the purpose of processing and whether it is used in line with that purpose
  • To know the third parties to whom it is transferred in Turkey or abroad
  • To request correction if it has been processed incompletely or inaccurately
  • To request its deletion or destruction under the conditions of KVKK Article 7
  • To request that correction, deletion and destruction be notified to the third parties to whom it was transferred
  • To object to a result against you arising from analysis exclusively by automated systems
  • To claim compensation for damages if you suffer loss due to unlawful processing

9. Applications

You may send requests regarding your rights, together with documents proving your identity, by email to [TODO: KVKK application email] or in writing to Yukarı Bahçelievler Mah. 70. Sk. No: 15 İç Kapı No: 6, Çankaya / Ankara 06490, Ankara. Applications are concluded free of charge within 30 days at the latest.

See also: Privacy and Cookie Policy. Last updated: 24.09.2026.