Last updated: 25 July 2026
This policy explains how personal data is processed through ilhankaymak.com, KAiMAK Hair Studio's customer communications, and the first-party support application connected to the business's Instagram professional accounts.
Your personal data is processed by İlhan Kaymak / KAiMAK Hair Studio under Turkish Personal Data Protection Law No. 6698 ("KVKK"). Privacy and data requests: [email protected].
Data is processed to answer service requests, prepare human-reviewed reply drafts, manage appointment enquiries, prevent duplicate processing, secure and troubleshoot the service, and comply with legal obligations. Processing relies on fulfilling your request, legitimate interests, legal obligations and consent where required.
Where necessary, data may be processed by Meta Platforms (Instagram/Facebook infrastructure), hosting/VPS and network-security providers, OpenAI (reply drafting), Anthropic/Claude (reply drafting and classification), and Telegram (human-approval notifications to the owner). These providers may use infrastructure in other countries. Transfers are limited to the stated purposes and handled with data minimisation and appropriate safeguards. Private message data is not sold or used for unrelated advertising targeting.
AI may classify a request or prepare a reply draft. Instagram customer replies are not sent automatically; an authorised person reviews them. Complaints, payments or refunds, legal matters, health or allergy concerns, and unclear or sensitive requests are escalated for manual handling.
Data is retained only as long as needed to resolve the request, maintain service continuity and security, and meet legal obligations. It is then deleted, anonymised or access-restricted. Records subject to a legal retention duty may be retained for that period; backup copies expire through the normal backup lifecycle.
Access is restricted, credentials are kept server-side, and operational records are monitored for security and auditing. No internet transmission can be guaranteed absolutely secure, but reasonable technical and organisational measures are applied.
Under KVKK Article 11, you may ask whether and how your data is processed, request correction or deletion, learn the recipients, object to automated analysis and request compensation where applicable.
Send an e-mail to [email protected] with the subject "Data Deletion Request", your Instagram username and a clear description of the request. We may request reasonable verification to protect account ownership. Valid requests are assessed within 30 days; data without a legal retention requirement is deleted or anonymised in active systems and relevant processors. For step-by-step instructions, see the Data Deletion page.
Instagram, Facebook, WhatsApp and Telegram are also governed by their providers' own terms and privacy policies. This policy may be updated when our processes or applicable law change; the current version and date are published here.