Privacy Notice
Last updated: 28 August 2026
1. Who we are
This notice explains how the operator of spavictory.com, trading as Victory Spa Istanbul (“we”, “us” or “our”), handles personal data.
Address: Mimar Kemalettin Mah., Mithat Paşa Cd. No:1, 34130 Fatih, Istanbul, Türkiye
Email: victoryspaistanbul@gmail.com
Telephone / WhatsApp: +90 537 350 14 57
2. Information we collect
Booking requests
When you submit the booking-request form, we collect the information you provide, including your full name, WhatsApp or telephone number, preferred date and time, number of guests, selected package, notes and your acknowledgement of this notice. A booking request does not itself confirm a reservation; we use these details to check availability and contact you.
When present, the form also records campaign and referral information such as GCLID, GBRAID, WBRAID and UTM parameters so that we can understand how the request reached us.
Direct communications
If you contact us by WhatsApp, telephone or email, we process your contact details and the content of your communication so that we can answer you and manage your request.
AI concierge
If you use the website’s AI concierge, we process the message you enter and the technical information needed to return a response. The installed concierge uses the OpenAI Responses API. Please do not enter sensitive or unnecessary personal information in the concierge.
Website and measurement data
The website and its service providers may automatically process technical and usage information, such as IP address, browser and device information, referring page, pages viewed, interactions, online identifiers and consent choices. Non-essential analytics and advertising storage is controlled by the consent choice presented on the website where consent is required.
3. Why we use personal data
- To answer enquiries and take steps requested by you in connection with a possible booking.
- To check availability, provide customer support and manage communications.
- To operate, protect and troubleshoot the website.
- To measure website use and advertising effectiveness, subject to your consent where required.
- To comply with legal obligations and establish or defend legal claims where necessary.
Depending on the activity and applicable law, processing is based on your request before entering into a service arrangement, our legitimate interests in operating and protecting the service, compliance with legal obligations, or your consent. You can withdraw cookie consent at any time without affecting processing that occurred before withdrawal.
4. Cookies, Google Analytics and Google Ads
We use Google Analytics 4 (G-F0VEPPF1H5) to understand website visits and interactions, Google Tag Manager (GTM-PXCX97JF) to manage measurement tags, and Google Ads (AW-17295563828) to measure advertising performance and actions such as booking requests and contact interactions.
Where consent is required, analytics and advertising technologies operate according to the choices you make in the consent banner. Refusing non-essential cookies does not prevent you from viewing the website or submitting a booking request. You can review or change your choices using the site’s Manage consent control. See our Cookie Policy.
Google explains its processing in How Google uses information from sites or apps that use its services and the Google Privacy Policy.
5. Service providers and external services
We disclose data only as needed to providers that help us operate the website and respond to requests, including hosting, email and technical-service providers, and the measurement providers described above.
If you contact us through WhatsApp, WhatsApp/Meta processes your information under its own privacy terms. The website also contains links to third-party services, including Google Maps, Google reviews, GetYourGuide, Facebook and Instagram. When you follow an external link, the destination service processes information under its own privacy notice.
The AI concierge may send the message you enter to OpenAI to generate a response; see the OpenAI Privacy Policy.
Some providers may process information in countries other than the country where you are located. Their privacy notices describe their processing locations and applicable transfer safeguards.
6. How long we keep information
We do not apply one fixed retention period to every type of data. We keep information only for as long as reasonably necessary for the purpose for which it was collected, taking account of the status of the booking or enquiry, our relationship with you, security and dispute-resolution needs, and applicable legal obligations. When information is no longer required, it is deleted or anonymised where appropriate.
7. Your choices and rights
Depending on your location and applicable law, including Türkiye’s Law No. 6698 and, where relevant, the GDPR, you may have the right to request access to, correction or deletion of your personal data; restriction of or objection to processing; data portability; and withdrawal of consent. You may also have the right to complain to the competent data-protection authority.
To make a privacy request, contact victoryspaistanbul@gmail.com. We may need to verify that the request relates to you before acting on it.
8. Security and children
We use reasonable technical and organisational measures intended to protect personal data. No website or transmission method can be guaranteed to be completely secure. This website and booking form are not intended for children under 18 to submit on their own; a parent or legal guardian should contact us for an enquiry involving a minor.
9. Changes to this notice
We may update this notice when our services, providers or legal obligations change. The date at the top shows when it was last updated.
