Privacy Policy

1. Information We Collect

When you create an account or make a booking through Suella, we collect personal information including your name, email address, phone number, and payment details. We also collect usage data such as pages visited, search queries, and booking history to improve our services.

2. How We Use Your Information

We use your information to:

• Process bookings and payments
• Send booking confirmations and reminders
• Provide customer support
• Personalize your experience and recommendations
• Send promotional offers (with your consent)
• Improve our platform and services
• Comply with legal obligations

3. Information Sharing

We share your information with spa and wellness providers only as necessary to fulfill your bookings. We also share data with payment processors (iyzico) to complete transactions. We do not sell your personal information to third parties.

4. Data Security

We implement industry-standard security measures including encryption (TLS/SSL), secure password hashing (bcrypt), and token-based authentication (JWT) to protect your personal data. Payment information is processed securely through our payment provider and is never stored on our servers.

5. Cookies

We use essential cookies for authentication and session management, and preference cookies to remember your language choice. We do not use third-party tracking cookies.

6. Your Rights

Under KVKK (Turkish Personal Data Protection Law) and GDPR, you have the right to access, correct, delete, or export your personal data. You may also withdraw consent for marketing communications at any time. To exercise these rights, contact us at [email protected].

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Booking records are retained for 5 years for legal and accounting purposes. You may request account deletion at any time.

8. Contact Us

For questions about this privacy policy, contact us at [email protected].