HalıSaha+

Privacy Policy

Son güncelleme: 2026-09-19

This Privacy Policy explains how we collect, process and share information when you use the HalıSaha+ platform. It complements the KVKK Disclosure Notice.

1. Information we collect

  • You provide: name, email, phone, date of birth, location, position, preferred foot, profile picture.
  • Auto-collected: IP, browser info, page interactions, cookies (with your consent).
  • Payment data: processed by iyzico; we only store a summary (amount, status, last-4 digits).
  • Communication records: the content of messages you send to our support line via WhatsApp, SMS or email, any photos and documents attached to them, your WhatsApp profile name, and the delivery status of notifications we send you (sent, delivered, read).

2. How we use information

  • Deliver the service: reservation, roster, chat, payment.
  • Secure your account: session integrity, fraud prevention.
  • Communicate: send transactional notifications such as reservation confirmation, cancellation and payment reminders via in-app notification, WhatsApp, SMS and email; answer your support requests; opt-in marketing.
  • Meet legal obligations (tax, invoice, law-enforcement requests).
  • Improve the platform: analytics, debugging.

3. Cookies

See the Cookie Policy. Marketing and analytics cookies are only active with your consent.

4. Sharing

  • With iyzico Ödeme Hizmetleri A.Ş. for payment.
  • With our hosting provider for the technical infrastructure.
  • To deliver notifications: with Meta, the operator of WhatsApp, for WhatsApp messages, and with our SMS operator NetGSM for text messages. They only receive the phone number and message content needed to deliver the message and may not use it for their own advertising.
  • With authorities when legally required.
  • We do not sell your data to third-party ad networks.

5. Security

All communication is encrypted over HTTPS. Passwords are stored irreversibly (bcrypt/argon2). Card data is protected via iyzico 3D Secure and never touches HalıSaha+ servers. WhatsApp conversations with our support line are delivered through Meta's infrastructure and are also stored in our system as your support history; only authorised support staff can access those records.

6. Children

HalıSaha+ is not intended for users under 13. If we learn that a user under 13 has provided data, the account and data are deleted immediately.

7. Service providers and server locations

Our servers are in Türkiye and your data is kept here as a rule. Some providers we work with are located abroad: WhatsApp LLC, which delivers WhatsApp notifications, and — with your consent — Google Analytics for measurement. To send a WhatsApp notification, your phone number and the message content are shared with WhatsApp LLC; the sharing is limited to delivering that message. Such sharing qualifies as an international transfer under Turkish law. The WhatsApp transfer relies on the standard contract approved by the Personal Data Protection Board, and that contract was notified to the Authority on 19 September 2026; see section 6 of our KVKK notice for details. If you prefer to receive notifications by SMS instead of WhatsApp, you can select this in the app's privacy settings; your number is then not shared.

8. Communication channels and notification preferences

Notifications such as reservation confirmation, cancellation and payment reminders are part of the service; they are sent as in-app notifications and also via WhatsApp or SMS. If a WhatsApp message cannot be delivered, the same information is sent as SMS so you do not miss it. Promotional messages are separate and are sent only if you opt in.

You can change your preferences at any time: choose which topics you receive in the app's notification settings, and switch notifications from WhatsApp to SMS in the privacy settings. Venue operators likewise manage, from their own panel, which channels they receive and whether automatic messages are sent to their customers. Your support conversations are deleted together with your other data if you delete your account.

9. Changes to this policy

We may update this policy. For material changes we notify you via email or in-app. Continued use means you accept the updated policy.