Privacy Policy

1. Who We Are

Hexa Suites & Apartments ("Hexa", "we", "us") operates two properties in Şişli, Istanbul — Hexa Suites Bomonti and Hexa Apartments Şişli. We are the data controller for personal information collected through this website (hexasuites.com.tr). Contact: info@hexasuites.com.tr

2. What Data We Collect

We collect the following categories of data:

• Analytics data (with your consent): pages visited, session duration, device type, approximate location (city-level), referral source. Collected via Google Analytics 4 and Microsoft Clarity.

• Contact data: name, e-mail address, phone number if you contact us via the reservation form or WhatsApp.

• Technical data: IP address (anonymised), browser type, language preference. Collected automatically when you visit the site.

We do not collect payment card data. Payments are processed directly by the property or a third-party payment provider.

3. Cookies

We use the following types of cookies:

• Strictly necessary cookies: session management, security. These cannot be disabled.

• Analytics cookies (optional, requires consent): Google Analytics (_ga, _gid, _ga_*) — expire in 13 months. Microsoft Clarity (_clck, _clsk, CLID) — expire in 1 year.

You can withdraw your consent at any time by clearing your browser cookies. Your preference is stored locally in your browser (localStorage key: hexa_cookie_consent).

4. Google Analytics 4

We use Google Analytics 4 to understand how visitors use our site. Data is anonymised (IP anonymisation is enabled) and processed by Google LLC on our behalf. We have enabled Consent Mode v2 — no analytics data is sent until you accept cookies.

To opt out globally: install the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout).

Google's privacy policy: policies.google.com/privacy

5. Microsoft Clarity

We use Microsoft Clarity to record anonymised user sessions (heatmaps, click maps) to improve the website. Clarity is only activated after you accept cookies. Recorded sessions do not capture passwords or payment details.

Microsoft's privacy policy: privacy.microsoft.com

6. How We Use Your Data

We use your data to:

• Understand website performance and improve the guest experience (analytics)

• Respond to reservation enquiries and booking requests (contact data)

• Comply with legal obligations

We do not sell, rent or share your personal data with third parties for marketing purposes.

7. Data Retention

• Analytics data: retained for 14 months in Google Analytics, then automatically deleted.

• Contact enquiries: retained for 2 years, then deleted unless a booking relationship exists.

• Cookie preferences: stored in your browser until you clear them.

8. Your Rights

Under the GDPR (EU) and KVKK (Turkey) you have the right to:

• Access the personal data we hold about you

• Request correction or deletion of your data

• Withdraw consent at any time (this does not affect past processing)

• Lodge a complaint with a supervisory authority (Turkey: KVKK — kvkk.gov.tr)

To exercise any right, contact us at info@hexasuites.com.tr. We will respond within 30 days.

9. Changes to This Policy

We may update this policy periodically. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance.

Questions?