Privacy Policy

Last updated: April 2026 · Elegant Amenities

1. Introduction and scope

This Privacy Policy describes how Elegant Amenities (“we”, “us”, “our”) collects, uses, stores, and protects personal information when you use our website at elegantamenities.com or elegantamenities.com.tr, related digital services, and when you communicate with us about hotel amenities, distribution, quotations, and commercial relationships. We are committed to protecting your privacy and to processing personal data in accordance with applicable data protection laws, including where relevant the EU General Data Protection Regulation (GDPR), the UK GDPR, and Turkish Law No. 6699 on the Protection of Personal Data (KVKK), depending on your location and the nature of our relationship with you.

This policy applies to visitors to our website, prospective and current business customers (including hotels, procurement teams, and hospitality brands), suppliers, and individuals who contact us by email, telephone, or through forms. It does not apply to third-party websites that may link from our site; those services have their own privacy notices, which you should read carefully.

By using our website or providing information to us, you acknowledge that you have read this Privacy Policy. If you do not agree with it, you should not use our services or submit personal data to us. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

2. Data controller and contact

The data controller responsible for personal data processed in connection with Elegant Amenities’ activities is Elegant Amenities, with operations based in Ataşehir, Istanbul, Türkiye. For privacy-related requests, including exercising your rights, you may contact us at cct@elegantamenities.com or by telephone at +90 850 532 02 91. We may ask you to verify your identity before fulfilling certain requests to protect your information and others’ rights.

If we appoint a data protection officer or EU/UK representative where required by law, we will publish updated contact details on this page. For cross-border transfers, we implement appropriate safeguards such as standard contractual clauses or other mechanisms recognised by regulators, as described below.

3. Categories of personal data we collect

Depending on how you interact with us, we may process the following categories of personal data:

  • Identity and contact data: name, job title, company name, business address, email address, telephone number, and similar identifiers you provide when requesting information, quotations, or support.
  • Communication data: content of emails, messages, call logs, and meeting notes relating to our commercial relationship or your enquiries.
  • Technical and usage data: IP address, browser type and version, device type, operating system, referring URLs, pages viewed, time and date of access, and interactions with our website (e.g. scroll depth, clicks), collected through cookies and similar technologies where permitted.
  • Marketing preferences: your choices regarding newsletters, event invitations, or industry updates, and records of consent or objection.
  • Transaction and account data: order references, delivery details, invoicing contacts, and payment-related information processed by us or our payment service providers in accordance with their terms.

We do not intentionally collect special categories of personal data (such as health data) through our website. If you voluntarily include such information in a message, we will only process it where necessary to respond to your request or as otherwise permitted by law.

4. How we use your personal data and legal bases

We use personal data for the following purposes, relying on appropriate legal bases under applicable law:

  • Providing our services and responding to enquiries (performance of a contract or pre-contractual steps, or legitimate interests in operating a B2B distribution business): processing quotations, managing orders, coordinating logistics, and customer support.
  • Website operation and security (legitimate interests, and where required consent for non-essential cookies): ensuring functionality, analysing aggregate usage to improve content and structure, detecting fraud or abuse, and protecting our systems.
  • Marketing and relationship management (consent where required, or legitimate interests for existing business contacts in line with e-privacy rules): sending relevant product updates, invitations, or industry news, where you have opted in or where soft opt-in or similar rules apply.
  • Compliance and legal claims (legal obligation or legitimate interests): record-keeping for tax, customs, and trade compliance, responding to lawful requests from authorities, and establishing or defending legal claims.

Where we rely on legitimate interests, we balance our interests against your rights and freedoms and you may object to certain processing as described in Section 9. We do not use your personal data for automated decision-making that produces legal or similarly significant effects solely by automated means.

5. Cookies and similar technologies

Our website may use cookies, local storage, pixels, and analytics tools to remember preferences, measure traffic, and understand how visitors use our pages. Essential cookies are necessary for the site to function. For analytics or marketing cookies, where required we will obtain your consent before setting non-essential cookies and provide options to manage preferences through a cookie banner or browser settings.

You can control cookies through your browser settings (blocking or deleting cookies may affect site functionality). We may use third-party services (e.g. hosting, analytics, or content delivery) that set their own cookies subject to their policies.

6. Sharing and disclosure

We may share personal data with:

  • Service providers who assist us with hosting, IT security, email delivery, analytics, customer relationship management, and logistics, under contracts that require appropriate confidentiality and data protection measures.
  • Professional advisers such as lawyers, accountants, and insurers, where necessary for legal or business purposes.
  • Partners and suppliers involved in fulfilling orders (e.g. manufacturers, freight forwarders), limited to what is necessary for delivery and compliance.
  • Authorities when required by law, court order, or to protect our rights, safety, or property.

We do not sell your personal data in the conventional sense of selling lists to unknown third parties. If we ever engage in activities that constitute “sale” or “sharing” under US state laws, we will provide required notices and opt-out mechanisms.

7. International transfers

Elegant Amenities operates from Türkiye and works with clients and suppliers internationally. Your data may be transferred to countries outside your country of residence, including to countries that may not be deemed to provide an adequate level of protection. In such cases we implement appropriate safeguards, such as standard contractual clauses approved by the European Commission or equivalent mechanisms, and additional technical and organisational measures where appropriate.

8. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typical retention periods include: active customer and prospect data for the duration of the relationship plus a reasonable period thereafter; communications and contracts for the statutory limitation periods applicable in Türkiye and other relevant jurisdictions; and website logs for a shorter period unless security investigations require longer retention. When data is no longer needed, we securely delete or anonymise it.

9. Your rights

Depending on your location and applicable law, you may have the right to:

  • Request access to the personal data we hold about you.
  • Request rectification of inaccurate or incomplete data.
  • Request erasure (“right to be forgotten”) in certain circumstances.
  • Request restriction of processing or object to processing based on legitimate interests.
  • Request data portability where processing is based on consent or contract and carried out by automated means.
  • Withdraw consent at any time, without affecting prior lawful processing.
  • Lodge a complaint with a supervisory authority in your country.

To exercise these rights, contact us using the details in Section 2. We will respond within the timeframe required by law (often within one month for GDPR requests, subject to extensions for complex cases). You may also have specific rights under KVKK; we will honour applicable Turkish law for relevant data subjects.

10. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include access controls, secure hosting environments, encryption where appropriate, staff training, and incident response procedures. No method of transmission over the Internet is completely secure; we encourage you to use secure channels when sending sensitive information.

11. Children’s privacy

Our website and services are directed at businesses and professionals in the hospitality sector. We do not knowingly collect personal data from children under 16. If you believe we have collected such data inadvertently, please contact us and we will take steps to delete it promptly.

12. Third-party links

Our website may contain links to partner sites, brand owners, or industry resources. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing personal data.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or our services. The “Last updated” date at the top will be revised when material changes are made. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy where permitted by law.

14. Contact

For any questions about this Privacy Policy or our handling of personal data, please contact us at cct@elegantamenities.com or write to us at our business address in Ataşehir, Istanbul, Türkiye.