Reservation Privacy Notice
Last updated: 6 October 2026
Victory Spa Istanbul, at Mimar Kemalettin Mah., Mithat Paşa Cd. No:1, 34130 Fatih, Istanbul, Türkiye, operates this reservation service. For privacy questions, contact victoryspaistanbul@gmail.com or +90 537 350 14 57.
What we use
When you make a reservation, we record your name, email address, phone number, selected treatment, date, start time, number of guests, amount due at the spa and booking reference. We use these details to confirm and manage your visit and send the confirmation email. Our staff may also enter bookings received by phone, WhatsApp or travel platforms into the same calendar. The service uses a necessary session cookie and a limited, pseudonymous rate-limit record to prevent abuse.
Your chosen display language is saved in this browser so it can be used on your next visit.
Email verification and booking protection
We send a one-time email code before confirming a booking. The code expires after 10 minutes. We store a protected code hash linked to your browser session and booking request, rather than the readable code. Limited pseudonymous IP, email and phone records help prevent automated or repeated bookings and are removed after approximately two days. These checks use our existing hosting, database and email providers.
Who processes it
Our hosting, database and email providers process the information needed to run reservations and deliver messages. Your confirmation is sent to your email and the spa. Map and WhatsApp links use those providers' own notices. Optional Google measurement is controlled separately through Privacy settings.
Optional analytics and advertising measurement
Analytics and advertising measurement are separate, optional choices. Declining does not affect booking. Google tags are not loaded before permission. With analytics permission, Google Analytics may measure visits and confirmed reservation leads, including the reservation amount and EUR currency. With advertising permission, Google Ads may measure confirmed reservation leads and ad click identifiers. A confirmed reservation is not an online payment. We do not send your name, email, phone, verification code or reservation access token to these tags; Google may process technical browser and network information. Personalised advertising is not enabled by this reservation service.
Your reservation-site choices are stored for up to 180 days, separately from the main website. After permission, a non-identifying reservation measurement ID may be kept locally for up to 30 days to avoid duplicates; allowed campaign identifiers are kept in the current browser session for up to 30 minutes. Change or withdraw permission using Privacy settings in the footer. Withdrawal blocks further measurement requests on this page. Added permissions apply on the next page. Your required reservation privacy acknowledgement and email verification are not advertising permission.
How long we keep it
We keep booking information for as long as needed to provide the visit, handle changes or disputes and meet applicable record-keeping duties. When it is no longer needed, we delete or anonymise it. Security rate-limit records are removed after a short period.
Your choices
You can ask us to access, correct or delete your booking details, subject to applicable requirements. Contact victoryspaistanbul@gmail.com and include your booking reference if available. We may verify your request before changing a booking or disclosing personal details.
Security and updates
We restrict staff access to the reservation calendar and use encrypted connections. We may update this notice when the booking service changes; the date above shows the latest revision.