Privacy Policy

What we collect

• Booking details: your name, email address, telephone number, the ticket and date you chose, and your order number.
• Payment result: whether the payment succeeded, the amount, and a reference from the bank. Never the card number — it is entered on the bank’s own page and never reaches us.
• Technical data: IP address, browser and device type, and the pages you viewed, collected through the analytics described in the Cookie Policy.

Why we use it

• To take a booking, issue a ticket and confirm it to you — without this we cannot perform the contract.
• To answer your messages and handle cancellations and refunds.
• To meet accounting, tax and consumer-law record-keeping obligations.
• To understand how the site is used, in aggregate, so it can be improved. This is the only purpose that depends on your consent, and it is the one the cookie banner asks about.

Who it is shared with

The tour operator whose booking system issues your ticket receives your name and email so that it can issue and send it. The bank that processes the payment receives what it needs to take it. Our email and hosting providers process data on our instructions. Nobody buys, rents or is sold your data, and it is not used for advertising.

Some of these providers operate outside Türkiye. Where data is transferred abroad it is done on the legal bases the KVKK allows, and to providers bound by contractual protections.

How long we keep it

Booking and payment records are kept for ten years, which is the retention period Turkish commercial and tax law requires. Correspondence is kept for as long as it may be needed to resolve a dispute, and then deleted. Analytics data is retained in aggregate only.

Your rights

You may ask what data we hold about you, ask for it to be corrected or deleted, object to processing based on our legitimate interests, ask for a copy in a portable format, and withdraw consent for analytics at any time. Write to the address on the Contact page; we answer within thirty days.

You may also complain to the Turkish Personal Data Protection Authority (KVKK Kurumu), or, in the European Union, to your national supervisory authority.

Security

The site is served over HTTPS, payments run through 3-D Secure on the bank’s own infrastructure, and access to booking records is limited to the people who need it to do their work.