This translation is provided for convenience. In case of any discrepancy, the Turkish version shall prevail.
Bernays Dress ("Bernays Dress", "we", "the company") attaches great importance to the privacy of its customers and app users. This Privacy Policy explains how your personal data is collected, used, stored and protected in connection with our website (www.bernayssdress.com), our mobile app and all digital services we provide.
By using our services, you are deemed to have accepted this policy.
1. Data We Collect
1.1 Data You Provide Directly
- Identity information: First name, last name
- Contact information: Phone number, email address
- Appointment information: Appointment date and time, preferred service and staff member
- Account information: Username, password (stored encrypted)
- Notes: Notes added to an appointment or customer profile
1.2 Automatically Collected Data
- Device information: Device model, operating system, app version
- Usage data: In-app interactions, session durations
- IP address: For security and access logs
1.3 Data Obtained from Third Parties
We do not collect personal data from third parties. All data is obtained directly from you.
2. How We Use Your Data
The personal data we collect is used for the following purposes:
- Creating and managing appointments and sending reminder notifications
- Creating customer accounts and verifying identity
- Improving service quality and offering a personalised experience
- Appointment confirmation and reminder messages via SMS and notifications
- Fulfilling legal obligations
- Keeping the app secure and preventing misuse
3. Data Sharing
Your personal data is not shared with third parties except in the following cases:
- SMS service: Only your phone number is shared with the SMS service provider for appointment reminder and confirmation messages
- Legal requirement: With the competent authorities when required by a court order or legal regulation
- Hosting service: Your data is hosted on secure servers
Under no circumstances is your personal data sold or rented to third parties for advertising, marketing or profiling purposes.
4. Data Retention and Security
4.1 Retention Period
Your personal data is kept for as long as the service relationship continues and within the scope of legal retention obligations. If you delete your account, your data is permanently deleted at the end of the legal retention period.
4.2 Security Measures
- Passwords are stored using cryptographic hash functions (bcrypt)
- All communication is protected with SSL/TLS encryption
- API access is secured with token-based authentication
- Session durations are limited and sessions end automatically after a certain period
- Unauthorised access attempts are logged and monitored
5. Cookies
Our website uses technical cookies for session management. These cookies are required for the service to work. No third-party analytics or advertising cookies are used.
6. Your Rights (under KVKK)
Under the Turkish Personal Data Protection Law No. 6698 (KVKK), you have the right to:
- Learn whether your personal data is being processed
- Request information about it if it has been processed
- Learn the purpose of the processing and whether the data is used in line with that purpose
- Know the third parties to whom your data has been transferred in Türkiye or abroad
- Request the correction of incomplete or inaccurately processed data
- Request the deletion or destruction of your data
- Object to any result against you arising from the analysis of the processed data exclusively by automated systems
- Claim compensation for damages arising from unlawful processing
7. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that a child has provided us with personal data, that data will be deleted immediately.
8. App Permissions
Our mobile app may request the following device permissions:
- Notifications: For appointment reminders and status updates
- Internet access: To communicate with our server
Sensitive permissions such as camera, location, contacts or storage are not requested.
9. Third-Party Services
Our app may use the following third-party services:
- Firebase Cloud Messaging: Sending push notifications (the Google Privacy Policy applies)
These services have their own privacy policies, and we recommend that you review the policies of the respective providers.
10. Changes to This Policy
This privacy policy may be updated when necessary. If significant changes are made, you will be informed through an in-app notification or via the website. You can always review the current policy on this page.
11. Account Deletion
If you wish to delete your account and all associated data, you can use the following methods:
- The "Profil > Hesabı Sil" (Profile > Delete Account) option in the mobile app
- A request by email: contact us using the details below
Once your deletion request is received, your data is permanently deleted within 30 days.
12. Contact
For any questions or requests about our privacy policy, you can contact us:
