Privacy and cookies

Data controller

Under Turkish Personal Data Protection Law No. 6698 (“the Law”), the data controller is Zhen Sushi – Güldemet Öksüz (sole proprietorship), Gürsu Mahallesi 320. Sokak No: 27/A, Konyaaltı / Antalya, Türkiye. Email: [email protected].

This notice covers the zhensushi.com website, the menu and ordering pages, and orders placed with the QR codes on our tables or on the restaurant's tablet.

What we process and why

• Delivery and pick-up orders: the items you order, your name, phone number, delivery address, your location if you choose to share it, payment method and note. Used to prepare and deliver your order and to contact you if needed.
• Table orders and requests: orders placed with the QR code on your table or on the restaurant's tablet do not ask for your name, phone or address; we record the items, the table, your note if any and the page language. Waiter or bill requests are recorded with the table, the type of request and your short note if any.
• Security log: when you place an order, your IP address and browser information, to prevent fake orders and to look into problems.
• Table reservations: the party size, date, time and, if you enter it, your name are turned into a WhatsApp message in your browser only; the website does not store them. When you send the message, it reaches us via WhatsApp together with your phone number and is used to answer your request.
• Visitor statistics (only with your consent): Google Analytics, to understand how the site is used; details under “Cookies and data stored on your device” below.

How we collect data and legal grounds

Data is collected electronically through the order and request forms on the site and through your browser. Order and contact data are processed under Article 5(2)(c) of the Law (establishing or performing a contract), security logs under Article 5(2)(f) (legitimate interest), and visitor statistics under Article 5(1) (explicit consent).

Who receives your data

• Your orders reach the restaurant's order panel and the email address [email protected].
• The WhatsApp message you send to confirm a delivery or pick-up order reaches us via WhatsApp (Meta).
• The site runs on the servers of our hosting provider Odeaweb; requests pass through our network and security provider Cloudflare. For technical reasons these providers may keep access logs containing IP addresses and browser information.
• If you consent, visitor statistics are sent to Google (Google Analytics).
• Authorised public authorities, if they lawfully request it.

Because Cloudflare and Google also operate servers outside Türkiye, this data may be transferred abroad; data is transferred to Google Analytics only with your explicit consent. We do not share your data with anyone else and we never sell it.

How long we keep data

• Orders, table bills and the security entries in the order log: 30 days, then deleted automatically.
• Waiter and bill requests: 24 hours.
• A one-way hash of your IP address, used to limit fake orders: 24 hours.
• Order messages in the restaurant's mailbox and WhatsApp: as long as needed to handle the order and any complaints.
• Google Analytics data (if you consented): at most 14 months at Google.

Cookies and data stored on your device

The site does not set cookies without your consent. For convenience, the following is kept in your browser's local storage and is not sent to us:

• your theme choice (light or dark)
• your cart
• your name, phone and address, so you don't have to type them again next time
• your last 10 orders
• the table you opened with a QR code (valid for 3 hours)
• your menu view setting
• your cookie choice

You can delete these by clearing your browser's data for this site; the “Clear history” button in the order window also removes past orders.

Google Analytics (optional). If you consent, Google Analytics sets cookies named _ga and starting with _ga_; it measures which pages are opened, device and browser type and approximate location (country, city) without linking them to your name. It is not used for advertising or personalisation. If you do not consent, Google Analytics is not loaded at all. You can change your choice or withdraw consent at any time with the “Cookie settings” link at the bottom of every page.

The management panel, used only by restaurant staff, uses one session cookie.

Your rights

Under Article 11 of the Law you have the right to:

• learn whether your personal data is processed;
• request information if it has been processed;
• learn the purpose of processing and whether the data is used accordingly;
• know the third parties in Türkiye or abroad to whom it is transferred;
• request correction if it is incomplete or inaccurate;
• request erasure or destruction under the conditions of Article 7 of the Law;
• request that corrections, erasure or destruction be notified to the third parties it was transferred to;
• object to a result against you arising solely from automated analysis;
• claim compensation if you suffer damage from unlawful processing.

How to apply

Send your request by email to [email protected] or in writing to the address above. Your name, how to reach you and your request are enough; we may ask for additional information to verify your identity. We answer within 30 days at the latest, as a rule free of charge. If you are not satisfied with our answer, you may complain to the Turkish Personal Data Protection Board (KVKK).

External links

When you follow the links to Google Maps (directions), WhatsApp, Yemeksepeti or Trendyol Go, those services' own privacy rules apply.

Changes

This notice is updated when the site's practices change; the current version is always on this page. Last updated: 17 October 2026.