Privacy Policy

1. Who We Are

Nova Spa Massage is the trading name used for our spa services in Beyoğlu, Istanbul. The data controller responsible for the processing described in this policy is:

• Legal name: [Full legal name of the operating company or individual]
• Address: Asmalı Mescit Mah., Meşrutiyet Cad. No:85, 34400 Beyoğlu, Istanbul, Türkiye.
• Telephone: +90 530 324 31 87.
• Website: novaturkishmassage.com

This general policy is supplemented by specific privacy notices provided where personal information is collected, as applicable.

2. Information Collected

The information involved depends on how you interact with us:

• Contact details: your name, telephone number and any email address you choose to provide.
• Appointment information: your selected service, requested date and time, and messages about arranging or changing your visit.
• Correspondence: enquiries and replies exchanged with our team.
• Technical information: website requests may generate records such as IP addresses, browser information and access times through hosting and security services.

Information may be collected directly through your messages, telephone conversations and appointment enquiries, or automatically through website infrastructure.

3. Purposes and Legal Grounds

Contact details, appointment preferences and correspondence are used to answer enquiries, check availability, arrange requested services and communicate about bookings. Where applicable, this processing is necessary for establishing or performing a service contract.

Technical records may be processed to maintain website operation and investigate misuse, based on legitimate interests where these do not override your fundamental rights. Information may also be retained or disclosed where necessary to meet a legal obligation or establish, exercise or protect a legal right.

Where a particular activity requires explicit consent, that consent must be requested separately. Reading this policy or browsing the website does not constitute consent to marketing or to unrelated processing.

[Confirm the legal ground applicable to each actual processing activity under Law No. 6698 and add any activity-specific notices before publication.]

4. WhatsApp Reservations

Our WhatsApp booking links open an external service. Massage selections and, where entered, requested appointment dates and times may be included in a pre-filled WhatsApp message.

Opening the link does not by itself send the message to our team. You can review it before pressing Send. Once sent, the information is used to respond to your enquiry and arrange your requested appointment.

WhatsApp handles information under its own privacy terms. You can choose to contact us by telephone instead. A reservation request is confirmed only after our team checks availability and replies.

5. Sharing and International Transfers

Access to enquiries and booking information should be limited to the personnel who need it to respond and arrange services. Website hosting, technical support and communication providers may process information within the scope of their services. Information may also be disclosed to competent authorities where legally required.

External services such as WhatsApp and Google may process information outside Türkiye. Opening a third-party link is subject to that provider’s practices and does not, by itself, establish a lawful basis for any international transfer made by the business.

[Identify the actual recipient groups and providers, the information shared and its purpose. Specify relevant processing locations and the applicable international transfer mechanism, where required.]

6. Cookies and Website Services

Cookies and similar technologies can support website functionality, remember preferences or measure usage. Their presence depends on the services and plugins enabled on the website.

Pages using externally hosted Google Fonts send requests to Google to load the fonts. External map links open Google Maps; an embedded map, if enabled, can also send information to its provider when it loads.

[Insert the verified cookie and external-service inventory: provider, purpose, information collected, duration and whether consent is required. Include analytics or advertising tools only if actually used, and explain how visitors can change their choices.]

Browser settings allow you to manage or delete cookies. Restricting some cookies may affect particular website features.

7. Retention and Security

Retention periods must reflect the purpose for which information is collected, applicable legal requirements and any justified need to resolve disputes. Information should be deleted, destroyed or anonymised when the grounds for retaining it no longer apply.

[Specify retention periods or clear criteria for enquiries, appointment records, technical logs and backups, including records held in messaging services.]

Appropriate technical and organisational safeguards are required to protect personal information against unauthorised access, loss and misuse. No internet transmission or storage system can offer absolute security.

8. Your Rights

Subject to the conditions of Turkish Personal Data Protection Law No. 6698, you may apply to the data controller to:

• Learn whether your personal data is processed and request information about that processing.
• Learn its purpose and whether your data is used consistently with that purpose.
• Learn which third parties receive your data in Türkiye or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction when the applicable legal conditions are met.
• Request notification of relevant corrections or deletions to recipients of the data.
• Object to an adverse result arising exclusively from automated analysis of your data.
• Seek compensation for damage caused by unlawful processing.

9. Contact and Privacy Requests

For general privacy questions, contact our team using the details below. Formal personal data requests should be addressed to the legal data controller through the applicable written or otherwise legally recognised application method.

We may need proportionate information to verify your identity before responding to a request. Please do not send identity documents through general messaging channels unless an appropriate process has been explained to you.

10. Updates to This Policy

This policy may be updated to reflect changes to our services, website or information handling. The date at the top identifies the latest version. Where a change requires additional information or a separate consent, updating this page alone does not replace that requirement.