Privacy Notice
This notice explains how we process the personal data you share when booking on appointment.chill.beauty, as required by Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”). You do not need to give separate consent to book.
1. Data controller
Chill Nail & Beauty
Caferağa Mah. Moda Cad. Muratbey Sok. No:3/B 34710 Kadıköy / İstanbul
Email: info@chill.beauty · Phone: 0505 818 45 57
2. Personal data we process
- Identity: full name
- Contact: phone number, email address (optional)
- Customer transaction: the services and specialist you choose, appointment date and time, your note (optional), language preference, past appointments
- Security: your IP address
- Marketing: only if you opt in; the wording you agreed to, when, and from which IP address
- WhatsApp conversations: only if you message us on WhatsApp; your messages, the photos, voice notes and files you send, your WhatsApp profile name, and whether messages were delivered and read
Please do not write health information (allergies, pregnancy, medical conditions, etc.) in the note. This is special category personal data. If it matters, we can talk about it in person at your appointment.
3. Purposes and legal grounds
| Purpose | Legal ground |
|---|---|
| Creating and confirming your appointment and passing it to the specialist | Establishing and performing a contract (KVKK Art. 5/2-c) |
| Sending booking confirmations, reminders, changes and cancellations over WhatsApp | Establishing and performing a contract (Art. 5/2-c) |
| Reading and replying to the messages you send us on WhatsApp and linking them to your booking | Establishing and performing a contract (Art. 5/2-c), legitimate interest (Art. 5/2-f) |
| Matching you to your existing customer record by phone number or email if you have booked before | Legitimate interest (Art. 5/2-f) |
| Preventing fake or repeated bookings and attacks, keeping systems secure | Legitimate interest (Art. 5/2-f) |
| Meeting legal obligations and requests from authorities | Legal obligation (Art. 5/2-ç) |
| Establishing, exercising or defending legal claims | Establishing a right (Art. 5/2-e) |
| Sending campaigns, offers and news by SMS, WhatsApp and email (only if you opt in) | Explicit consent (Art. 5/1) and consent under Law No. 6563 |
Booking messages (confirmation, reminder, cancellation) are not advertising and are sent whether or not you opt in to marketing. Marketing consent is optional and not a condition of booking. The checkbox on the form reads:
I would like to hear about Chill Nail & Beauty's campaigns, offers and news by SMS, WhatsApp and email. This is optional, not required for booking, and I can withdraw it at any time free of charge.
4. How we collect it
Electronically and partly automatically, when you fill in the booking form or message us on WhatsApp.
5. Who receives it
- Hosting: our booking system runs on Hostinger International Ltd. servers in Germany.
- WhatsApp: our notifications and WhatsApp conversations are sent and received through Zernio using Meta Platforms’ WhatsApp Business service. Their servers are outside Türkiye. A copy of your conversation is also kept in our booking system so that we can reply.
- Abuse prevention: we use Google reCAPTCHA to protect the form from bots; this shares technical data about your browser behaviour with Google LLC. Google’s privacy policy is at policies.google.com/privacy.
- Public authorities: only where required by law and on request.
Because our service providers’ servers are abroad, your personal data is transferred outside Türkiye in line with Article 9 of the KVKK. Your appointment is visible only to staff authorised to manage bookings, and your WhatsApp conversations only to the salon’s managers. We do not sell your data or share it with third parties for advertising.
6. How long we keep it
- Customer record and appointment details: 3 years from your last appointment. After that your name, phone number, email and notes are deleted. The date and service of the appointment remain without being linked to you.
- WhatsApp conversations: 3 years from the last message. They are also deleted when your customer record is deleted.
- Marketing consent records: 3 years after the consent ends, because we must be able to prove it.
- IP address: kept only for a few minutes to prevent abuse. If you opt in to marketing, it is stored with the consent record.
We will also delete your data earlier if you ask (see section 8).
7. Cookies and browser storage
- Session cookie: required to keep the form secure. It is deleted when you close your browser.
- Language preference: your TR | EN choice is stored only in this browser.
We use no analytics, advertising or tracking cookies. The page’s fonts are served from our own server too.
8. Your rights and how to use them
Under Article 11 of the KVKK you have the right to:
- learn whether your personal data is processed and, if so, request information about it
- learn the purpose of processing and whether it is used accordingly
- know the third parties it is transferred to
- ask for incomplete or inaccurate data to be corrected
- ask for it to be deleted or destroyed under the conditions of Article 7 of the KVKK
- ask for corrections and deletions to be notified to the third parties it was transferred to
- object to a result against you arising solely from automated analysis
- claim compensation for damage caused by unlawful processing
Send your request by email to info@chill.beauty or in writing to the address above. Include your name and the phone number you booked with so we can verify you. We will respond free of charge within 30 days at the latest. If the request involves an additional cost, the fee set by the Personal Data Protection Board may apply.
You can withdraw marketing consent at any time, free of charge, using the opt-out in any message or by writing to us.
If your request is refused, the answer is insufficient, or we do not reply in time, you may complain to the Personal Data Protection Board (KVKK Art. 14).
Version: 4 October 2026