Privacy Policy

This policy explains why we, as Istanbul Travel Point, collect your personal data, how we use it and how we protect it.

Data we collect

When you create a booking we process your name, e-mail address, telephone number, pickup and drop-off points, journey date and, where given, your flight number and notes. At the payment step your card details are transmitted directly to the licensed payment institution; they are not stored on our servers and are not seen by us.

When you visit our site your IP address and session details are also recorded for security purposes.

Purposes of use

• Creating and confirming your booking and assigning a driver
• Sending confirmation, reminder and change notifications
• Taking payment, issuing invoices and handling refunds
• Measuring service quality and meeting our legal obligations

Your data is not sold or rented to third parties for marketing purposes.

Data sharing

The minimum information required for the journey to take place — name, telephone, pickup point and time — is shared with the assigned driver. We work with a payment institution for payment processing and with an e-mail infrastructure provider for message delivery, each acting as a data processor. Data may be shared with competent authorities upon lawful request.

Retention period

Booking and payment records are retained for 10 years as required by tax and commercial legislation. At the end of that period the data is deleted or anonymised.

Security

SSL/TLS encryption is used across the site. Payments are taken with 3D Secure verification. Access to the management panel is protected by role-based authorisation and two-step verification.

Cookies

Strictly necessary cookies are used to maintain your session and remember your language preference. The booking flow does not work without them.

Your rights

For your rights to access, correct or delete your personal data, please see our KVKK Disclosure Notice, and send your requests through the channels on our Contact page.