Privacy and cookies
Last updated: 9 November 2026
This page explains which personal data the vivy.tattoo site processes and why, under the EU General Data Protection Regulation (GDPR) and Turkey's Personal Data Protection Law No. 6698 (KVKK).
Controller
Vivy Tattoo & Piercing, Famagusta, North Cyprus. For any privacy question or request: privacy@vivy.tattoo.
Booking requests
The name, surname, phone, email (optional), preferred date and time, contact preference, Instagram username and idea you write in the form are used only to reply to your request and plan the appointment. Legal basis: steps taken at your request before a contract (GDPR Art. 6(1)(b), KVKK Art. 5/2-c). This data is never sold or used for advertising. It is kept for at most one year after your request is settled, then deleted. If you write on WhatsApp, Instagram or by email, that conversation is also subject to that service's own terms.
The site runs on Cloudflare; Cloudflare Turnstile protects the form against automated submissions. Booking records are kept in our business email and booking system (Lark).
Cookies and measurement
Apart from the essential ones, cookies run only if you allow them. If you don't, the Google, Yandex and Meta scripts are never loaded on the page. You can change your choice at any time with the Cookie settings button at the bottom of the page; when you withdraw consent these cookies are deleted.
| Type | Tool | Purpose | Lifetime |
|---|---|---|---|
| Essential | vivy-onay (browser storage) | Remember your cookie choice | 6 months |
| Essential | Cloudflare Turnstile | Protect the form from spam and bots | Session |
| Measurement | Google Analytics 4 (_ga, _ga_*) | See which pages are read, as anonymous statistics | 13 months |
| Measurement | Yandex Metrica (_ym_*) | Visit statistics and click map; session recording is off | Up to 1 year |
| Advertising | Meta Pixel (_fbp) | Let Instagram and Facebook ads reach people who visited the site | 3 months |
The legal basis is your consent (GDPR Art. 6(1)(a), KVKK Art. 5/1). These tools process data outside your country: Google (USA), Yandex (Russia), Meta (Ireland and USA). Such transfers happen only with your explicit consent (GDPR Art. 49(1)(a), KVKK Art. 9).
Your rights
You have the right to know whether your data is processed, to access it, to have it corrected or erased, to object to processing and to withdraw consent (GDPR Art. 15–21, KVKK Art. 11). Just write to privacy@vivy.tattoo; we reply within 30 days. You can also complain to the data protection authority of your country.