Information Security Policy

Last updated: 4 November 2026

This is a translation for convenience; if the two versions differ, the Turkish version prevails.

As HYPE Restoran İşletmesi Mimari Tasarım LTD. ŞTİ. ("Charm Bistro"), we treat the confidentiality and security of the information of our guests, staff and all stakeholders as one of our priorities.

Information security on our website

Our website (www.charmbistro.com) is for information only and is designed to keep security risks low from the start:

• The website has no membership, forms, online ordering or payment, so no passwords, card details or other personal information are collected or stored through it.
• Every page is served only over an encrypted connection (HTTPS/TLS), and browsers are told never to connect without encryption (HSTS).
• The website consists of static pages with no server-side software or database, and it is served on Cloudflare's infrastructure, which protects it against attacks.
• There are no advertising or tracking scripts; browser security headers (including a Content Security Policy) only allow approved sources to load.
• Google Maps loads only when a visitor asks for it.

To this end, at Charm Bistro we are committed to:

• balancing the three core elements of information security, confidentiality, integrity and availability, in our venue and digital services,
• ensuring that personal data such as reservation details and security camera footage can only be accessed by authorised staff who need it for their work (the "need-to-know" principle),
• using strong passwords and, wherever possible, two-step verification on the accounts and systems we use (website, domain, e-mail and social media accounts),
• informing our staff about personal data protection and information security,
• assessing and fixing vulnerabilities and possible breaches as quickly as possible, and, where required, notifying the Turkish Personal Data Protection Board and the people concerned within the legal deadlines,
• complying with all legislation on information security and personal data protection (Turkish Personal Data Protection Law No. 6698, etc.).

Details on how your personal data is processed are in our Privacy Notice.

Reporting security issues

For any questions, comments or reports of possible vulnerabilities or breaches concerning our website or systems, please contact us at charmbistro@hotmail.com. We review reports made in good faith and will get back to you.