Privacy & Cookie Policy

1. Data Controller

Istanbay (the organisation behind the Tales & Co. brands) is the data controller for all personal data collected through this site. Istanbul · San Francisco.

2. Data We Collect

Enquiry form: When you submit a booking request we collect your name, email, and (if provided) phone, topic, and message.

Analytics: We use Google Analytics 4 to understand how the site is used. Analytics data is aggregated and does not identify you as an individual.

We do not collect payment data, account credentials, or any special-category personal data.

3. Purpose & Legal Basis

Enquiry form data: Processed on the basis of legitimate interest — solely to respond to your message. We do not add you to a mailing list or use it for marketing.

Analytics cookies: Processed on the basis of your consent, given through the cookie preference shown on your first visit. You can withdraw or change consent anytime via the “Cookie preferences” link in the footer.

4. Third Parties

Analytics data is processed by Google LLC (policies.google.com/privacy). The site is hosted on Vercel; form notifications are delivered via Resend. These providers process your data only to deliver the service; we do not sell your data or share it for marketing.

5. Retention

Enquiry form data is retained for 12 months from last contact, then deleted.

Analytics data is retained per Google Analytics default settings (14 months), then automatically deleted.

6. Your Rights (KVKK Art. 11 / GDPR)

— Access the personal data we hold about you,

— Request correction of inaccurate data,

— Request deletion of your data,

— Withdraw consent at any time,

— Lodge a complaint with the relevant supervisory authority (KVKK / competent authority).

Cookies

We use the following cookies when analytics consent is given:

No cookies are set if you decline analytics. No advertising or tracking cookies are used on this site.

Contact

To exercise any of these rights, or for any questions, contact us at hello@istanbay.com.