- Home
- Privacy Policy
Privacy Policy
This policy explains how we handle your information when you use sunflowapp.com and when you contact us. For the legal details on personal data and your rights, see the KVKK Privacy Notice.
Scope#
This policy applies to the website. Guest data in the Sunflow guest portal used by hotels is processed under the agreement with the hotel.
Information we collect#
- What you send through the form: hotel name, contact person, e-mail, phone (optional), number of rooms (optional), the package you are interested in and your message.
- Technical information: your IP address when you submit the form (for abuse prevention and the security check); when you visit the website, the IP address, date and time and request details recorded automatically in the hosting provider's server logs.
- Your preferences: language, theme and cookie choice, stored on your device.
No analytics, advertising or social media tracking tools are used on the website.
How we use information#
- To respond to your request and schedule a demo call.
- To protect the website and the form against bots and abuse.
- To remember your preferences.
Form data is not stored on the website or in a database; it is only sent to us by e-mail, which also records the state of the contact consent box and the time it was sent. It is used only to respond to your request, is not processed for any other purpose and is not added to marketing lists.
Sharing#
Your information is shared only with the service providers below, for the stated purpose. Their servers may be located outside Türkiye:
- Vercel Inc.: hosting the website; IP addresses in server logs.
- Google LLC (Gmail SMTP): delivering form submissions to Sunflow by e-mail.
- Microsoft Corporation (Outlook): storing delivered form submissions in Sunflow's mailbox.
- Cloudflare, Inc. (Turnstile): bot protection and the security check on the demo form.
Transfers abroad are carried out in line with the conditions set out in Article 9 of the KVKK; details are in the KVKK Privacy Notice. Your information is not sold and is not shared with any other third party.
Security#
- The website is served over HTTPS.
- The form is validated on the server and protected by bot protection (Cloudflare Turnstile), a hidden trap field and a limit on requests from the same IP.
- Form errors are shown to you as a general message; technical details stay only in server logs.
Guest portal#
In the Sunflow guest portal:
- Guest data is never shared with any third party.
- To verify a guest, confirming the stay is enough (room number and date of birth).
- PMS integration requests no personal data from the guest; it only verifies the stay.
- Notifications are sent only with the guest's permission.
- Access is role-based; everyone sees only the screens they are authorised for.
- Data is kept separately for each hotel and connections are encrypted with HTTPS.
- With modules in development (requests and complaints, spa and doctor appointments), photos attached to complaint reports and appointment details will also be processed in future; this notice will be updated before those modules go live.
Retention#
- What you send through the form reaches us only by e-mail. These e-mails are kept until your request is concluded and afterwards for at most 2 years for legal obligations and possible disputes , and are then deleted.
- The IP information used to prevent abuse is kept only briefly in server memory.
- Your language, theme and cookie preferences stay on your device; you can delete them from your browser at any time.
Your rights#
You can exercise your rights under the KVKK, such as requesting information about, correction or deletion of your personal data. The details of your rights and how to apply are in the KVKK Privacy Notice.
Third-party links#
The website links to third-party sites such as WhatsApp and LinkedIn. When you follow one of these links, that site's own privacy policy applies; Sunflow is not responsible for its practices.
Age limit#
The website is intended for businesses and hotel staff. We do not knowingly collect personal data from anyone under 18.
Changes#
We may update this policy in line with changes in legislation or in our services. The current version is always published on this page.
Contact#
Questions: sunflowtech@outlook.com