1. Data Controller

This notice has been prepared under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (the "KVKK") and the related Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

The data controller is the House of Zij platform. The trade name, address and registry information of the legal entity operating the platform are given on the Contact page. For any matter regarding your personal data you can reach us at [email protected].

2. Categories of Personal Data Processed

Identity and contact information: first name, last name or username, email address, and the information you share when you contact us.

Birth information: date of birth, and where possible the time and place of birth. This information is needed so that birth chart, transit, solar return and numerology calculations can be made.

Content entered by the user: intention texts for readings, questions, what you write in the Council chat, and other information you enter into free text fields.

Membership and transaction information: your membership tier, subscription status, purchase and usage records, and your past readings.

Payment process information: records such as the amount and date of a payment transaction. Your card number and similar sensitive payment data are processed by the authorised payment institution; House of Zij does not see or store this information.

Technical data: IP address, browser and device information, site usage records (logs), and data collected through cookies.

In-site usage and behaviour data: when you are signed in, and linked to your member identity, which rooms and pages you visit (for example tarot, Audire, Council), roughly how long you spend in each section, whether you read content in writing or listen to it as audio, and the sections you engage with most. This data is not anonymous; it is tied to your identity and held first-party on our own infrastructure.

3. Purposes of Processing Personal Data

Calculating the astrology, numerology, tarot, coffee reading and career tools, and producing AI assisted interpretations.

Providing the membership service and managing membership and subscription processes.

Completing payment transactions and invoicing.

Handling support requests and communicating with users.

Ensuring the security of the service, preventing misuse, and improving the service.

Giving you a personalised experience, understanding which content is valuable to you, and improving the service based on your in-site preferences (only where you have given explicit consent).

Fulfilling obligations arising from applicable legislation.

4. Legal Grounds for Processing

Personal data is processed on the following legal grounds set out in Article 5 of the KVKK: that processing is directly related to the conclusion or performance of a contract (membership and service delivery), that it is necessary for the data controller to fulfil a legal obligation (tax and commercial legislation), and the legitimate interests of the data controller provided they do not harm the fundamental rights and freedoms of the data subject (security, prevention of misuse, service improvement).

In cases not covered by the grounds above, personal data is processed only on the basis of your explicit consent. Where explicit consent is required, it is obtained separately from this notice and through your free will.

Processing your in-site usage and behaviour data on an identity-linked basis, and providing a personalised experience through it, relies solely on your explicit consent. This consent is not required to use your membership or other services; even without it you can continue to use the core services, and you can withdraw your consent at any time.

5. Special Categories of Personal Data

House of Zij does not knowingly and systematically collect the special categories of personal data listed in Article 6 of the KVKK (health, belief, sexual life and the like).

We ask that you do not write your health condition, your beliefs or other special category information into free text fields such as intention texts, questions and the Council chat. If you do enter such information into these fields, you are considered to have shared it of your own will.

6. Use of Artificial Intelligence and Transfer Abroad

Most of the interpretations on the platform are produced with artificial intelligence. For this process, some of the data you enter (for example your birth information and question texts) may be transferred to AI and infrastructure service providers that may be located abroad, in order to generate the interpretations.

Likewise, the providers used for services such as the payment infrastructure and email delivery may be located abroad. Transfer of data abroad is carried out within the framework of Article 9 of the KVKK.

The Council members (Hypatia, Sibylla and the others) are artificial intelligence characters, not real people. When you use this feature, the texts you write are processed for the purpose of producing interpretations.

7. Personal Data Processing Under the Threshold Week

The Threshold Week (the Seven Day Threshold) runs on top of the existing membership infrastructure and does not create a new special category of data. Within this scope, in addition to the identity, contact, transaction security, customer transaction, and user content categories listed above, the following technical data is processed: the canonical (simplified) form of the email address, the timestamps marking the start and end of the Threshold Week, the use status of the Threshold Week per account, and IP and device fingerprint information used to prevent the same person from claiming more than one Threshold Week.

Purpose and legal grounds: this data is processed to make the Threshold Week possible, to define its scope, and to track its duration, relying on KVKK Article 5/2-c (the conclusion and performance of a contract), and to prevent the same user from claiming a second Threshold Week and to detect misuse of the service, relying on KVKK Article 5/2-f (the legitimate interest of the data controller).

Retention periods: the control data for the Threshold Week (canonical email, IP, device fingerprint, start and end records) is kept for 24 (twenty four) months from the end of the Threshold Week, so that the same user is not granted a second Threshold Week. Content generated by the user during the Threshold Week (Defterim notes, voice notes, Council chat history) is kept on the user account in a locked state for 12 (twelve) months from the end of the Threshold Week. If the user moves to a paid membership within that period, this content becomes accessible again. If the user has not returned by the end of the twelfth month, the data is reviewed at regular intervals and, after notice to the user, either deleted or anonymised.

Right to object to automated decisions: the assessment of "may be the same person" carried out under the Threshold Week can amount to an automated decision that results in a Threshold Week not being granted to a user. Under KVKK Article 11/g you retain the right to object to this automated decision. You may write to [email protected] to file an objection; your application is reviewed by a person, and if you are confirmed to be a different individual, the Threshold Week is opened.

The data processing carried out under the Threshold Week falls under the same regime as all rights set out under "Your Rights as a Data Subject" (KVKK Article 11) on this page. You may exercise all of these rights at any time, including the right to request deletion.

8. Parties to Whom Personal Data is Transferred

Personal data may be transferred, limited to the purposes stated above, only to the following parties: authorised payment institutions for completing payment transactions, service providers for interpretation production and infrastructure, the relevant service providers for email communication, and authorised public institutions and bodies in the event of a legal request.

House of Zij does not sell your personal data for marketing purposes and does not share it with third parties for that purpose.

9. Method of Collecting Personal Data

Personal data is collected electronically through forms on the site, membership and account operations, the information you enter into the reading and calculation tools, support requests, and cookies.

10. Retention Period of Personal Data

Personal data is kept while your membership is active and to the extent the service requires.

After the membership ends, the data is kept for the mandatory retention periods required by the relevant legislation (for example the periods set under tax and commercial legislation). At the end of these periods personal data is deleted, destroyed or anonymised.

11. Your Rights as a Data Subject

Under Article 11 of the KVKK you have the following rights: to learn whether your personal data is being processed, to request information if it has been processed, to learn the purpose of processing and whether it is used in line with that purpose, and to know the third parties to whom the data has been transferred in the country or abroad.

You also have the right to: request correction if your personal data has been processed incompletely or incorrectly, request its deletion or destruction within the conditions set out in the KVKK, request that these operations be notified to the third parties to whom the data was transferred, object to a result against you arising solely from the analysis of automated systems, and request compensation for damage you suffer due to unlawful processing of your data.

12. How to Apply

To use the rights above you can send your requests in writing through the Contact page or to [email protected]. Your application will be concluded as soon as possible, and within thirty days at the latest, depending on the nature of the request.

If your application is rejected, if you find the answer given insufficient, or if no answer is given in time, your right to file a complaint with the Personal Data Protection Board is reserved.

13. Cookies

The site uses cookies that are technically necessary for it to work, and anonymous analytics cookies. The details of the data processing carried out through cookies are explained on the Cookie Policy page. The processing of signed-in members' identity-linked in-site usage behaviour is a separate activity that relies on explicit consent rather than cookies; its details are explained in the relevant sections above.

14. Updates to This Notice

This notice may be updated in line with changes in legislation or developments in the services. The current text is always published on this page, and the update date is stated below.