Last updated: 30 September 2026
Data controller
İlyada Exclusive Spa acts as the data controller for personal data obtained through booking and communication processes under Türkiye's Personal Data Protection Law No. 6698 (KVKK). Privacy requests can be sent to info@ilyadaexclusivespa.com.
Information we process
Identity and contact data includes your name, phone number and email address. Booking data includes the selected service, date, time, party size, payment option, booking code and hotel or pickup location.
We may retain the payment result and transaction reference. İlyada does not store your card number, CVV or expiry date; those details are processed directly by iyzico. We also process messages and preferences you provide through the contact form.
Purposes and legal bases
We use data to create and perform your booking, verify payment, arrange transport, communicate with you, provide customer support, prevent fraud, keep accounting records and comply with law. Processing relies on contract performance, legal obligations, legitimate interests and, where required, consent.
How information is collected
Information is obtained through website booking and contact forms, the payment flow, and conversations by phone, email or WhatsApp, using automated means or non-automated means that form part of a filing system.
Retention and security
Data is retained only for the period required by the processing purpose and legal obligations, then deleted, destroyed or anonymised. We apply appropriate technical and organisational safeguards, including access restrictions, secure connections and routine system controls.
Your privacy rights
Under Article 11 of the KVKK, you may ask whether your data is processed, request information, learn the purpose and recipients, request correction, request deletion or destruction where conditions are met, object to results produced solely by automated analysis and seek compensation for unlawful processing. Additional rights under other applicable laws remain unaffected.
Policy updates
We may update this policy when our services or legal requirements change. The current version will be published on this page with its revision date.
Contact
Contact us for requests, notices or questions about this document.