Privacy Notice

1. Controller

The controller is Axonbase Bilişim Yazılım ve Danışmanlık Ltd. Şti., trading as Zenith Studio. Contact person: Ahmet Berat Demirhan. E-mail: [email protected]. Postal address: Yeni Bağlıca Mah. Karatuz Cad. No:39/42 Etimesgut / Ankara.

2. Data we process

• Identity and contact: name, email address, phone number, business name.
• Your request: the system you are interested in, your message, the language you used.
• Security: IP address and browser information, to prevent abuse (not stored with your request).

3. Purposes and legal bases

• Replying to your request and preparing an offer — steps prior to a contract (GDPR Art. 6(1)(b); KVKK Art. 5/2-c).
• Keeping the site and form secure and blocking automated abuse — legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5/2-f).
• Complying with legal obligations and defending legal claims (GDPR Art. 6(1)(c), (f)).
• Approving a contract online: we process your e-mail address, IP address, browser information and approval time to conclude the contract and to prove it (GDPR Art. 6(1)(b), (f); KVKK Art. 5/2-c and 5/2-e). These records are kept with the contract for 10 years after the business relationship ends.

4. Recipients

The site and database are hosted by Hetzner Online GmbH in Germany. Traffic passes through Cloudflare, Inc. for security and performance, which may process your IP address. These providers act on our behalf only to run the service. We never sell your data or share it for marketing.

5. Retention

Requests that do not lead to a business relationship are deleted or anonymised after 24 months at the latest. Client records are kept for the periods required by law.

6. Cookies

We only use one strictly necessary cookie (NEXT_LOCALE) to remember your language and a display preference kept in your browser (zenith-theme). No advertising or analytics cookies are used.

7. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to lodge a complaint with a supervisory authority. Write to us at the address below.

8. Contact

Send any request to [email protected]. We reply free of charge within 30 days.

9. Salons using Zenith Studio

For customer data collected on salon booking sites the salon is the controller; Axonbase hosts this data on the salon's behalf as a processor. Account data of salon staff is processed by Axonbase to provide the service.

Panel activity logs are kept for 24 months; support access logs and security events for 2 years.

• Hetzner Online GmbH (Germany): hosting and backups.
• Cloudflare, Inc. (USA): security, traffic management and bot protection. Cloudflare Web Analytics measures site usage; it sets no cookies, builds no personal profiles and keeps only aggregate statistics.
• Resend, Inc. (USA): login code and invitation e-mails, application confirmation e-mails (e-mail address only) and support request notification e-mails (salon name).
• Telegram (abroad): instant alerts to our team, containing the salon name and event type.
• Have I Been Pwned (abroad): checks whether a password appears in known leaks; only the first 5 characters of its hash are sent, never the password.
• Meta Platforms (WhatsApp, Instagram): if you choose to message us there, the conversation is processed on their infrastructure.
• Netgsm (Türkiye): SMS, from the salon's own account and on its instruction.
• Browser push services: panel notifications, delivered encrypted to your device.

With fingerprint or face login, biometric data never leaves your device; only a public key is stored on the server.