Privacy Policy

Last updated: April 2026

2kol1nefes ("we", "our", "us") respects your privacy. This policy explains what we collect, why, and your rights under GDPR (EU) and KVKK (Turkey).

1. Who we are

2kol1nefes is a private swimming academy based in Bodrum, Turkey. Contact: info@2kol1nefes.com or WhatsApp +90 535 825 9431.

2. What we collect

• Waitlist/Contact forms: name, email, phone, preferred date, package choice, notes.
• Newsletter: email address only.
• Usage data: pages visited, referrer, device type (via Google Analytics, anonymized IP).
• Marketing pixels: Meta Pixel and Google Ads tags for attribution (only if you accept marketing cookies).

3. Why we collect it

• To contact you about lessons you requested
• To send booking confirmations and reminders
• To improve our website and marketing
• To comply with legal obligations

4. Legal basis

We process your data based on your consent (form submission, newsletter subscription) and legitimate interest (responding to inquiries).

5. Who has access

• 2kol1nefes staff (limited to what's needed)
• Processors: Supabase (database), Resend (email), Vercel (hosting), Google Analytics, Meta, Airtable (backup).
• We never sell your data. Ever.

6. How long we keep it

• Waitlist data: 2 years from your last interaction.
• Newsletter: until you unsubscribe.
• Analytics: 14 months (Google default).

7. Your rights (GDPR & KVKK)

You have the right to:

• Access your data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data
• Object to processing
• Withdraw consent at any time

To exercise any of these, email info@2kol1nefes.com. We respond within 30 days.

8. Children's data

We work with children but only collect parent information. We never collect data directly from minors.

9. Cookies

We use essential cookies (required for the site to work) and, with your consent, analytics and marketing cookies. You can change your preferences any time via the cookie banner.

10. Security

Data is encrypted in transit (HTTPS) and at rest (Supabase AES-256). Passwords are hashed. We never send sensitive information over unencrypted channels.

11. Updates

We may update this policy. Material changes will be announced on the homepage and via email to newsletter subscribers.

12. Complaints

If you believe we've mishandled your data, contact us first. You also have the right to file a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local EU data protection authority.