In case of any discrepancy, the Turkish version prevails.
Version: 1.3 · Last updated: 18 October 2026
This notice is provided under article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the related Communiqué on the obligation to inform, for visitors of this website and people who fill in the flower subscription registration form.
1. Data controller
Your personal data is processed by Seval Soner (lee’la Floral Studio) (“lee’la” or “we”) as data controller.
- Address: Çağlayan Mahallesi, Bülent Ecevit Bulvarı, 2046. Sokak, Celal Şahin Sitesi No: 8/A, Muratpaşa, Antalya, Türkiye
- Email: info@leelafloralstudio.com
- Tax number: 8040256058
2. Personal data we process, and how we collect it
This website is a marketing site; no sales, accounts or payments. The personal data we process is limited to:
| Category | Data |
|---|---|
| Identity and contact | Your email address and phone number; for business sign-ups, your business name |
| Location (neighbourhood level) | The province, district and neighbourhood you tell us |
| Preferences | Whether the sign-up is personal or for a business; for personal sign-ups, whether it is for yourself or to send a gift; your preferred arrangement size and delivery frequency; your preferred language |
| Marketing preference | Your consent to subscription emails and any withdrawal (date, version of the text you agreed to) |
| Transaction security | Your IP address and browser information during form submission |
| Communication records | Our correspondence with you by email, phone or WhatsApp, and call notes |
| Advertising measurement (only with your consent) | Addresses of the pages you visit, the sign-up event, Meta cookie identifiers (_fbp, _fbc), IP address and browser information; your email only in irreversibly hashed form |
| Source information | How you arrived at our site (campaign parameters, referring site, first page opened) |
| Cookie preference | Your choice in the cookie banner (with an anonymous visitor number) |
Collection method: Your personal data is collected by fully automated means, electronically through your browser (form fields, cookies and browser local storage, server logs) when you fill in and submit the subscription registration form and while you browse the site. Unless you submit the form, your email and neighbourhood are not stored.
3. Purposes and legal bases
| Purpose | Data | Legal basis (KVKK art. 5) |
|---|---|---|
| Contacting you by email, phone or WhatsApp about subscription options, pricing and your delivery day (Flower Day) | Email, phone, business name for business sign-ups, province/district/neighbourhood, arrangement size and delivery frequency preference, language, communication records | Your explicit consent (art. 5/1), given via the checkbox in the form; without it no entry is stored |
| Planning which areas to serve based on demand | Province/district/neighbourhood, sign-up type (personal / business; self / gift) | Legitimate interest of the controller (art. 5/2-f) |
| Measuring which channels generate interest | Source information | Legitimate interest of the controller (art. 5/2-f) |
| Proving your consent and honouring withdrawal | Consent records, cookie preference | Compliance with a legal obligation (art. 5/2-ç) |
| Preventing automated and fraudulent submissions | IP address, browser information | Legitimate interest of the controller (art. 5/2-f) |
| Measuring the effect of our Instagram and Facebook ads (Meta Pixel and Conversions API) | Advertising measurement data (see the table above); your neighbourhood and business name are not sent | Your explicit consent (art. 5/1), only if you accept advertising measurement in the cookie banner |
Your data is not used for any other purpose; no profiling, credit assessment or automated decision-making takes place.
4. Transfers
Your data is shared only with the recipient groups below, for the stated purpose and to the extent the service requires. These providers’ servers are located abroad.
- Transfers to our infrastructure and email providers (Cloudflare, Resend) are made under KVKK art. 9 on the basis of the appropriate safeguard provided by the standard contract set out in the Regulation on the Procedures and Principles for the Transfer of Personal Data Abroad.
- Transfers to Meta (advertising measurement) and WhatsApp (messaging) rely on your explicit consent under KVKK art. 9/6-a, because a standard contract cannot be concluded for these services: for advertising measurement you give it by choosing “Accept” or “Advertising measurement” in the cookie banner, for WhatsApp via the checkbox in the sign-up form. Possible risks you should know before consenting: the countries where these companies process data (especially the USA) may not offer protection equivalent to Türkiye’s; public authorities there may access the data; exercising your rights there may be harder. Without your consent no data goes to Meta, and we contact you by email or phone instead of WhatsApp.
| Recipient group | Recipient | Purpose | Country |
|---|---|---|---|
| Hosting and infrastructure provider | Cloudflare, Inc. | Publishing the site, subscription registration database, security check | Database in Western Europe; company based in the USA |
| Email delivery provider | Resend (Plus Five Five, Inc.) | Confirmation email after sign-up | USA |
| Advertising platform | Meta Platforms Ireland Ltd. | Only if you consented to advertising measurement: advertising measurement data; email only hashed | EU/USA |
| Messaging service | WhatsApp Ireland Ltd. | If we contact you on WhatsApp: your phone number and our correspondence | EU/USA |
| Competent authorities | Courts, administrative bodies | Only where legally required | Türkiye |
Your data is never sold, rented or used for other companies’ marketing.
5. Retention
- Your subscription registration: until communication about your subscription is complete, or until you stop receiving emails; afterwards only for as long as the law requires or the purpose needs.
- Consent and cookie-preference records: for proof purposes, for the period required by law after consent ends.
- Advertising measurement data: subject to Meta’s retention; we do not keep it in raw form.
When the period ends, data is deleted, destroyed or anonymised.
6. Your rights (KVKK art. 11)
By contacting us you may:
- learn whether your personal data is processed,
- request information if it is,
- learn the purpose of processing and whether it is used accordingly,
- know the third parties to whom it is transferred, in Türkiye or abroad,
- request correction if it is incomplete or inaccurate,
- request deletion or destruction under the conditions in KVKK art. 7,
- request that corrections, deletions and destructions be notified to third parties,
- object to a result against you arising from analysis exclusively by automated systems,
- claim compensation for damage caused by unlawful processing.
7. How to submit a request
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, send your request with your name, surname, an explanation of your request and your contact details:
- in writing to Çağlayan Mahallesi, Bülent Ecevit Bulvarı, 2046. Sokak, Celal Şahin Sitesi No: 8/A, Muratpaşa, Antalya, Türkiye, in person or via notary,
- with a secure electronic or mobile signature, or from the email address you previously gave us, to info@leelafloralstudio.com.
We respond free of charge as soon as possible and within 30 days at the latest; if the process involves an additional cost, the fee set by the Board may be charged.
8. Withdrawing consent
- WhatsApp contact: just tell us on WhatsApp to stop; we will reach you only by email or phone.
- Notification emails: use the “leave the list” link at the bottom of every email we send, or any of the channels in section 7.
- Advertising measurement cookies: via the Cookie settings link at the bottom of the page, at any time.
Withdrawal does not affect the lawfulness of processing carried out before it.
9. Cookies
The cookies and similar technologies used on this site are described separately in the Cookie Policy.
10. Changes
If the purposes or recipients change, this notice is updated before the new processing begins; the current version is always published on this page with its version number and date.