As Çukurambar Suit ("we", "us" or "company"), we value the privacy of our customers. This Privacy Policy explains our practices regarding the collection, use, and protection of personal data in the context of services we provide via Instagram.
Important Note: This policy applies to data we collect via the Meta (Facebook/Instagram) Platform API and is fully compliant with the Meta Platform Terms.
2. Data We Collect
2.1. Data Collected via Instagram
When you use our Instagram DM (Direct Message) service, we collect the following information:
- Instagram User ID (IGSID): The unique identifier assigned to you by Instagram
- Username: Your Instagram handle (@username)
- Profile Information: Your name, profile photo (if any)
- Message Content: The full content of the direct messages you send us
- Media Files: Photos, videos, or other media you send us
- Communication Date and Time: The timestamp of your messages
- Interaction History: Your messaging history with us
2.2. Automatically Collected Technical Data
- Message metadata (message ID, timestamp)
- Platform information (Instagram App, Web, etc.)
- Session information (session data)
2.3. Data We Do Not Collect
Data we do not collect without explicit consent:
- Your Instagram password or login credentials
- Credit card or payment information (except Meta Pay)
- Data from third-party applications
- Your location data (unless explicitly permitted)
3. Purposes of Data Use
We use the personal data we collect only for the following purposes:
3.1. Primary Purposes
- Customer Service: Answering your questions via Instagram DM, creating appointments, and providing support
- Appointment Management: Booking beauty services and sending reminders
- Communication: Informing you about campaigns, updates, and services upon your request
3.2. Secondary Purposes
- Improving service quality
- Measuring customer satisfaction
- Fulfilling legal obligations
- Preventing fraud and abuse
Meta Platform Compliance: We process your data only as described in this privacy policy and in full compliance with the Meta Platform Terms. We never use your data beyond these purposes.
4. Data Sharing
4.1. Sharing with Third Parties
We do not share your personal data with third parties except in the following situations:
- Meta/Instagram: Automatic data sharing with Meta occurs due to the use of the Instagram Messaging API
- Legal Obligations: In case of court orders, legal processes, or official requests
- Your Explicit Consent: With your explicit approval
4.2. Data Sale
We never sell, rent, or disclose your data to third parties for commercial purposes.
4.3. International Data Transfers
Your data may be processed on servers outside Türkiye due to Meta's global infrastructure. These transfers are:
- Within the scope of KVKK (Turkish Personal Data Protection Law)
- Compliant with GDPR (EU General Data Protection Regulation)
- Secured by Meta's data protection protocols
5. Data Retention Period
- Active Conversations: 24 hours from the last message
- Conversation History: For the duration of the legal retention period
- Deletion Request: Deleted within 30 days upon your request
- Inactive Accounts: Automatically deleted if no interaction for 2 years
6. Data Security
- 🔐 SSL/TLS encryption
- 🛡️ Access control
- 📊 Data anonymization
- 🔒 Secure servers
- 📝 Security audits
- ⚠️ Data breach notification within 72 hours
7. Your Rights (under KVKK)
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to object
- Right to data portability
- Right to lodge a complaint
7.1. How Can You Exercise Your Rights?
Yanıt Süresi: 30 gün içinde
8. Cookies and Tracking Technologies
- Meta Pixel
- Session Cookies
- Analytics (anonymous)
9. Children's Privacy
Our services are not intended for individuals under the age of 18.
10. Meta Platform Compliance
This privacy policy is fully compliant with the Meta Platform Terms.
- We process Meta API data only as stated here.
- We do not create profiles without user consent.
- Data breaches are reported to Meta within 24 hours.
11. Policy Updates
This policy may be updated from time to time. The last update date is indicated above.
12. Legal Basis
- KVKK (Law No. 6698)
- GDPR (EU 2016/679)
- Meta Platform Terms
- Turkish Commercial Code
- Turkish Code of Obligations