Privacy PolicyKVKK & GDPR.

The data controller responsible for the processing of your personal data is:

• Ayfer Demirkıran (sole proprietor), trading as “The Atlas of Skies”
• Address: Caferağa Mah. Moda Cad. No:5, Kadıköy / İstanbul, Türkiye
• Tax No (VKN): 2880391417
• Contact: hello@theatlasofskies.com · +90 530 203 70 92

We process the following categories of personal data:

• Identity & contact data: name, surname, e-mail address, phone number (when provided).
• Astrology data: date, time, and place of birth, and any additional context you provide for the reading.
• Feng Shui data: address of the property, photographs, floor plans, and information about the people living or working in the space.
• Booking & transaction data: booked service, date and time of session, order ID, invoice details.
• Payment data: we receive only confirmation of payment by bank transfer. We do not collect, process, or store any card details.
• Technical data: IP address, browser, device type, language, and basic analytics about your visit.
• Communication data: e-mails, messages, and session notes.

We process the categories above for the following purposes, based on the indicated legal grounds (Art. 5 KVKK / Art. 6 GDPR):

• To deliver the Services you request — performance of a contract.
• To process payments — performance of a contract; legal obligation (tax/accounting).
• To send transactional e-mails (booking confirmations, reminders, reports) — performance of a contract.
• To comply with legal obligations (invoicing, tax, consumer law) — legal obligation.
• To protect the security of the website and prevent fraud — legitimate interest.
• To send optional marketing e-mails — only with your explicit consent, which you can withdraw at any time.

Astrology and Feng Shui sessions may surface sensitive personal context (e.g. health, family, beliefs). Such information is processed solely to deliver the requested Service, on the basis of your explicit consent, and is treated with strict confidentiality.

We share personal data only with the processors strictly needed to deliver the Services:

• Supabase — secure database and authentication.
• Resend / e-mail provider — transactional e-mails.
• Zoom (or equivalent) — video-conferencing for live sessions.
• Tax authorities, accountants, and competent public bodies where required by Turkish law.

Some of these providers may be located outside Türkiye / the EEA. In such cases we rely on appropriate safeguards (Standard Contractual Clauses or equivalent mechanisms) and your explicit consent where required by KVKK.

Where personal data is transferred outside of Türkiye or the European Economic Area, we ensure that adequate safeguards are in place, including the European Commission’s Standard Contractual Clauses, and we limit transfers to what is strictly necessary to provide the Services.

We retain personal data only for as long as necessary:

• Booking and astrology/Feng Shui input data: up to 5 years after the last session, unless a longer period is required to defend a legal claim.
• Invoices and accounting records: 10 years, as required by Turkish tax legislation.
• Marketing data (if you opted in): until you withdraw consent or after 24 months of inactivity.
• Technical logs: typically up to 12 months.

Under KVKK and GDPR you have the following rights, which you may exercise at any time by contacting hello@theatlasofskies.com:

• The right to be informed about processing of your data.
• The right to access your personal data.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure / to be forgotten, subject to legal retention obligations.
• The right to restrict processing.
• The right to data portability (GDPR).
• The right to object to processing based on legitimate interests or for direct marketing.
• The right to withdraw consent at any time, without affecting the lawfulness of prior processing.
• The right to lodge a complaint with a supervisory authority — in Türkiye the KVKK (kvkk.gov.tr), or your local EU data protection authority.

We respond to verified requests within thirty (30) days, in accordance with KVKK and GDPR.

The website uses only the cookies strictly necessary for it to function, plus — where applicable — privacy-friendly analytics to understand aggregate traffic. Non-essential cookies are set only with your consent, and you can withdraw consent at any time through your browser settings.

We apply technical and organisational measures to protect personal data against unauthorised access, loss, or alteration, including encryption in transit (HTTPS), restricted database access, and least-privilege authentication.

We may update this Privacy Policy from time to time. The version in force is the one displayed on this page; the date at the top reflects the latest revision. For substantive changes affecting active customers, we will notify you by e-mail.

For any privacy-related question or to exercise your rights, please write to hello@theatlasofskies.com. See also our Terms & Conditions and Cancellation & Refund Policy.