Skip to main content

KVKK / GDPR Consent

Permission to use customer data — a legal requirement.

Intermediate· 5 min read· Last updated: 2026-05-05· 156 people found this helpful
**KVKK** (Türkiye) and **GDPR** (EU) both require the customer to consent to how their data is used. **1.** Settings → Privacy → Privacy notice. A **standard template** is provided; paste in your own wording if you have it. **2. The booking flow.** Booking online requires a tick: “I have read and accept the privacy notice.” **3. Marketing consent.** A separate opt-in for: - SMS marketing - email marketing - use of profile photos **4. Consent history.** On the customer's record: which consent, when, and where it was given (audit log). **5. Erasure requests.** If a customer asks for their data to be deleted, it goes within 30 days — except where the law requires retention (tax, health records). ⚠️ Marketing to a customer who has not consented is prohibited, with fines running from ₺1,000 into the millions.

Was this article helpful?