Privacy Policy

1. General Information

Randevu724 is a SaaS (Software as a Service) platform and mobile application that helps businesses manage their appointments. This privacy policy informs businesses and their customers who use our platform about how personal data is collected, processed, and protected.

2. Data We Collect

2.1 Business Data

• Company name, tax number, address information
• Authorised contact name, surname, phone and email address
• Business category and service information
• Staff information (name, surname, phone, email, working hours)

2.2 Customer Data

• Name, surname, phone number, email address
• Appointment history and preferences
• Special notes and requests
• Communication history (SMS, email, call logs)

2.3 Technical Data

• IP address, device information, browser type
• Platform usage statistics
• Error logs and performance data
• Location data (when permission is granted)

3. Purposes of Data Processing

• Appointment Management: Creating, editing and cancelling appointments
• Communications: Sending SMS, email and push notifications
• Analytics and Reporting: Business performance reports
• Customer Experience: Personalisation and recommendation systems
• Security: Fraud prevention and security auditing
• Legal Obligations: Fulfilment of statutory requirements

4. Data Sharing

Your personal data is not shared with third parties except in the following circumstances:

4.1 Service Providers

• SMS service providers (Netgsm, İletimerkezi)
• Email services (Amazon SES, SendGrid)
• Cloud storage services (AWS, Google Cloud)
• Payment processors (for secure payment handling)

4.2 Legal Requirements

Data may be shared with competent authorities in the event of a court order, prosecutor's request or other statutory obligation.

5. Data Security

• Encryption: All data is encrypted using SSL/TLS
• Access Control: Systems to prevent unauthorised access
• Backup: Regular secure backup procedures
• Monitoring: 24/7 security monitoring and anomaly detection
• Staff Training: Regular data security training

6. Your Rights under GDPR

Under the General Data Protection Regulation (GDPR) and applicable data protection law, you have the following rights:

• The right to know whether your personal data is being processed
• The right to request information about the personal data processed about you
• The right to know the purpose of processing and whether data is used in accordance with that purpose
• The right to know the third parties to whom data has been transferred domestically or internationally
• The right to request correction of incomplete or inaccurate data
• The right to request erasure of data under certain conditions
• The right to request notification to parties with whom corrections or deletions have been shared
• The right to object to decisions made solely by automated processing that produce adverse effects
• The right to claim compensation for damages caused by unlawful processing

7. Cookies

Our platform uses cookies to provide a better service:

7.1 Essential Cookies

Cookies required for platform security and core functionality.

7.2 Analytics Cookies

Used for usage statistics and performance analysis.

7.3 Functional Cookies

Used for remembering user preferences and personalisation.

8. Data Retention Periods

• Active Customer Data: For as long as the account remains active
• Appointment History: 5 years from the last appointment
• Communication Logs: 2 years
• Security Logs: 1 year
• Financial Records: 10 years as required by tax legislation

9. Children's Privacy

Our platform does not knowingly collect personal data from individuals under the age of 18. Parental consent is required for users under 18. Should we become aware of such a case, we will take immediate action.

10. Policy Changes

This privacy policy may be updated as necessary. In the event of significant changes, our users will be notified by email, SMS or platform notification.

11. Contact and Applications

12. Entry into Force

This privacy policy entered into force on 17.07.2026. By using our platform, you are deemed to have accepted this policy.