Privacy notice (KVKK)

Last updated: 26 September 2026

Service provider: EPHRA Spa
Address: Bahçeşehir 2. Kısım, Barış Sok. No:16, Başakşehir, İstanbul
Contact: —

As data controller, we process your personal data as described below in accordance with Turkish Personal Data Protection Law No. 6698 ("KVKK").

Personal data we process

Identity and contact: full name, mobile phone, email (optional)
Booking and transaction: chosen service, date and time, number of people, notes, payment status and amount
Transaction security: verification code records, IP address, cookie data (analytics cookies only with your consent)

Your card details are not processed or stored on our site; payment is taken on the secure page of the bank or payment institution.

Purposes and legal grounds

Creating, confirming and reminding you of your booking and providing the service (performance of a contract — KVKK art. 5/2-c)
Payment, invoicing and accounting obligations (legal obligation — art. 5/2-ç)
Responding to your requests and customer service (legitimate interest — art. 5/2-f)
Site statistics and advertising measurement (your explicit consent — art. 5/1; given through your cookie choice and withdrawable at any time)

Commercial electronic messages

If you give separate, optional consent during booking, our offers, discounts and announcements may be sent by SMS, WhatsApp and email under Law No. 6563. The date and source of your consent are recorded. Not consenting does not affect your booking. You can withdraw consent free of charge at any time via the opt-out link in each message, the Message Management System (İYS) or by contacting us.

Transfers

Your data may be shared, only for the purposes above, with SMS/WhatsApp notification providers, the payment institution and bank, accounting/e-invoice providers, hosting providers and legally authorised public authorities.

Retention

Booking and payment records are kept for the periods required by law (up to 10 years under tax law); contact form records are kept for 1 year after your request is resolved, then deleted or anonymised.

Your rights

Under KVKK art. 11 you may ask whether your data is processed, request information, request correction or deletion, learn the third parties it was shared with, object, and claim compensation for damage. You can send your request in writing using the contact details above; it will be answered within 30 days at the latest.