Privacy Policy

Last updated: 7 July 2026

About this policy

Antalya Hostess (we, us, our) operates antalyahostess.com and is the data controller for the personal data collected through this website and our recruitment process.

This policy explains what we collect, why, the legal basis, who we share it with, how long we keep it, and the rights you have over your data. It applies to prospective clients who contact us and to individuals who apply to join our hostess roster.

We may update this policy from time to time; the last updated date above reflects the most recent revision.

Information we collect

We collect only what we need to respond to enquiries, prepare quotations, confirm assignments, and process applications.

Enquiry and booking form

Name, email, phone, company or organisation, and event details such as dates, venue, headcount, languages, and the service required.

Hostess application form

Name, contact details, age confirmation, languages spoken, experience, availability, and photographs that you upload for recruitment and client matching.

Automatic data

Standard server logs and any analytics we enable, such as IP address, browser type, and pages visited. We do not use advertising trackers.

We do not knowingly collect special-category data. Photographs are provided voluntarily for recruitment purposes with your consent.

Legal basis for processing

We process personal data on the following lawful bases under Article 6 of the GDPR:

• Consent — when you submit an enquiry or application and agree to be contacted.
• Contractual necessity — to prepare quotations and, where an assignment is agreed, to carry it out.
• Legitimate interests — to manage our roster, match candidates to briefs, and keep business records.
• Legal obligation — where required by applicable law, such as tax or employment records.

How we use your information

• Responding to enquiries and preparing tailored quotations.
• Assessing applications and matching hostesses to client briefs.
• Coordinating confirmed assignments with venues and hotels.
• Maintaining recruitment and operational records.
• Improving our website and services.

We do not sell your personal data.

Sharing and recipients

We share personal data only where necessary:

• Cloud providers — Cloudflare for web hosting and R2 object storage of uploaded photographs, and our email-forwarding provider.
• Clients and venues — for confirmed assignments, relevant details such as name, role, and languages may be shared with the contracting venue, hotel, or organiser.
• Service providers — engaged under appropriate confidentiality and data-protection terms.

We never sell data and do not share it for third-party marketing.

International data transfers

Our infrastructure runs on the Cloudflare global network. Where personal data is transferred outside the EU/EEA or Türkiye, we rely on appropriate safeguards such as Standard Contractual Clauses and the provider data-protection commitments. Applicant photographs are stored on Cloudflare R2.

Data retention

We keep enquiry data only as long as needed to respond, plus a reasonable period afterwards — typically up to 24 months. Application data and photographs are retained for the duration of your involvement with our roster and a limited period thereafter, unless you ask us to delete them sooner. You may request deletion at any time.

Security

We protect data using TLS encryption in transit, strict access controls, and secure object storage on Cloudflare R2. Access to personal data is limited to authorised personnel. No method of transmission or storage is fully secure, but we apply measures appropriate to the sensitivity of the data.

Your rights

Under the GDPR you have the following rights:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask us to delete your data.
• Restriction — limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting processing already carried out.
• Complaint — to your local data-protection authority.

To exercise any right, email info@antalyahostess.com. We respond within one month.

Children's data

Our services and recruitment are aimed at adults. We do not knowingly collect data from anyone under 18, and applications require confirmation that the applicant is at least 18 years old.

Cookies

This website uses only essential first-party functionality. Should we enable analytics or preference cookies in future, we will disclose them here and provide a way to manage them. We do not use third-party advertising cookies.

Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. The last-updated date above indicates the most recent revision.

Contact

For any privacy question or request, contact our data-protection contact at info@antalyahostess.com.