Privacy Policy

1. Data Controller

The data controller for this website is the sole proprietor operating under the trade name Massage in Alanya, located in Alanya, Antalya Province, Republic of Turkey. For any privacy-related inquiries you may contact us via the WhatsApp link on our homepage or by visiting our premises in person.

2. Governing Law

This policy is governed by the Turkish Personal Data Protection Law No. 6698 (Kisisel Verilerin Korunmasi Kanunu — KVKK), its implementing regulations, and the decisions of the Turkish Personal Data Protection Authority (Kisisel Verileri Koruma Kurumu — KVKK Board). Where applicable, we also observe the guidelines issued by the Antalya Provincial Health Directorate concerning wellness and massage service providers.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data — full name
• Contact data — phone number, WhatsApp, Telegram, Instagram handle, or other messaging identifiers you provide
• Appointment data — date, time, duration, and session notes related to your bookings
• Health-related data — information you voluntarily share about pain areas, medical conditions, allergies, past injuries, pregnancy status, or other health-relevant details that help us deliver safe and effective massage therapy. Under KVKK, health data is classified as special category personal data (Article 6) and is processed only with your explicit consent
• Session notes — observations recorded by the therapist during or after your session regarding techniques applied, areas treated, pressure preferences, and recommended follow-up
• Audio recordings — with your explicit prior consent, audio may be recorded during consultation or therapy sessions for quality assurance, accurate record-keeping, or training purposes (see Section 7 below)
• Technical data — when you visit this website, we may process your IP address, browser type, and pages viewed through standard server logs

4. Legal Basis for Processing

We process your personal data on the following legal grounds under KVKK:

• Explicit consent (KVKK Art. 5/1, Art. 6/2) — for health-related data, audio recordings, and any processing that falls outside the other bases listed below
• Performance of a contract (Art. 5/2-c) — processing necessary to schedule, deliver, and follow up on the massage services you have booked
• Legitimate interest (Art. 5/2-f) — website analytics and service improvement, provided this does not override your fundamental rights
• Legal obligation (Art. 5/2-ç) — where Turkish tax, commercial, or health regulations require us to retain certain records

5. Purpose of Processing

Your personal data is used for the following purposes:

• Scheduling, confirming, and managing your appointments
• Tailoring massage sessions to your physical condition and preferences (e.g., avoiding contraindicated areas, adjusting pressure)
• Maintaining continuity of care across multiple visits through session notes
• Communicating with you about appointment reminders, follow-up recommendations, or service updates
• Quality assurance and therapist training (where audio recording consent has been given)
• Complying with legal and regulatory obligations applicable to wellness service providers in Turkey
• Improving our website and services through anonymized analytics

6. Health Data & Massage-Specific Considerations

Because massage therapy involves physical contact and may address musculoskeletal or other health concerns, we may need to collect information that qualifies as special category data under KVKK Article 6. This includes but is not limited to:

• Current pain or discomfort areas
• Chronic conditions (e.g., herniated discs, fibromyalgia)
• Recent surgeries or injuries
• Pregnancy or postpartum status
• Allergies to oils, creams, or other topical products
• Blood pressure or circulatory conditions
• Skin conditions in the treatment area

We will ask for your explicit written or verbal consent before collecting any health data. You may withdraw consent at any time, though this may limit our ability to safely provide certain treatments. Health data is stored securely and is accessible only to the treating therapist and authorized administrative staff.

7. Audio Recording

In certain circumstances we may wish to make audio recordings during consultations or therapy sessions. This may serve the following purposes:

• Accurate capture of your verbal health disclosures and preferences when written notes are impractical during hands-on treatment
• Quality assurance and internal review of service delivery
• Training and professional development for the therapist
• Dispute resolution — providing an objective record if a disagreement arises about the services provided

Audio recording will never begin without your explicit prior consent. Before any recording starts, you will be clearly informed and asked to confirm your agreement verbally or in writing. You have the right to:

• Decline recording entirely without any effect on the quality or availability of our services
• Request that recording be stopped at any point during a session
• Request deletion of any recordings that include your voice
• Request access to or a copy of recordings in which you appear

Audio recordings are stored on encrypted, access-controlled systems and are retained for no longer than 12 months unless a longer period is required by law or by an ongoing dispute. They are not shared with third parties except as required by Turkish judicial or regulatory authorities.

8. Data Sharing & Transfers

We do not sell your personal data. We may share data with:

• Service providers — hosting and database providers (e.g., Supabase/AWS infrastructure) that process data on our behalf under appropriate data processing agreements
• Legal authorities — Turkish courts, law enforcement, the KVKK Board, or health regulators when required by law

Where personal data is transferred outside of Turkey (e.g., to cloud servers located in the EU or US), we ensure adequate safeguards are in place as required by KVKK Article 9, including standard contractual clauses or processing in countries recognized by the KVKK Board as having adequate data protection.

9. Data Retention

• Appointment and session data — retained for 3 years from your last visit, or longer if required by Turkish commercial or tax regulations
• Health data — retained for the same period as appointment data, unless you request earlier deletion
• Audio recordings — retained for a maximum of 12 months, then securely deleted
• Contact data — retained as long as you are an active client and for 1 year thereafter, unless you request earlier deletion
• Server logs — automatically purged after 90 days

10. Your Rights Under KVKK

Under Article 11 of Law No. 6698, you have the right to:

• Learn whether your personal data is being processed
• Request information about the processing if it is
• Learn the purpose of processing and whether it is used in accordance with that purpose
• Know the third parties to whom your data has been transferred, domestically or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data under the conditions set out in Article 7
• Object to any result that arises exclusively from automated processing and is to your detriment
• Claim compensation for damages arising from unlawful processing

To exercise any of these rights, contact us via WhatsApp or in person. We will respond within 30 days as required by KVKK. If you are unsatisfied with our response, you may lodge a complaint with the Turkish Personal Data Protection Authority (Kisisel Verileri Koruma Kurumu).

11. Cookies & Website Analytics

This website may use essential cookies for authentication and session management. We do not use third-party advertising trackers. Any analytics data collected is anonymized and used solely for improving the website experience.

12. Minors

We welcome clients of all ages, including children and adolescents. For clients under 18, a parent or legal guardian must provide explicit consent for the collection and processing of personal data (including any health data) and must be present during consultations and treatment sessions. The guardian is the point of contact for exercising any data subject rights on the minor's behalf.

13. Changes to This Policy

We may update this privacy policy from time to time. The revised version will be posted on this page with an updated date. For material changes — particularly those affecting health data or audio recording practices — we will make reasonable efforts to notify you directly.

14. Contact

For questions, requests, or complaints regarding this privacy policy or your personal data, please reach out through the WhatsApp contact link on our homepage, or visit us in person at our location in Alanya, Antalya, Turkey.