Your information
Privacy Policy
This page explains how information is used when you browse, ask us a question, plan a trip or make a booking. It also explains how to contact us about your data.
Last updated: 15 September 2026
01Who to contact
1. Who to contact
See Turkey Tours is the name used on seeturkeytours.com. We handle questions about information provided through this website and the travel bookings made here.
For a privacy request, email info@seeturkeytours.com or use the contact form. Put “Privacy request” in your message and identify the relevant booking, account or enquiry if you can. You can also ask us for the contracting organisation’s details.
2. The information involved
What we process depends on what you do on the site. Browsing a tour and reserving a flight do not require the same information.
- Enquiries: your contact details, proposed dates and the message you send.
- Bookings: the lead traveller’s details, selected services and the passenger information required for those services. This can include names, birth dates, nationality and passport details.
- Accounts: login information, saved traveller details, bookings and trip designs linked to the account. Passwords are stored as protected hashes rather than readable text.
- Payments: billing information, payment status, transaction references and records needed to verify and reconcile a payment.
- Messages and requests: correspondence, planner conversations and information you choose to provide when asking for help.
- Technical information: session and device information, IP addresses, request times, errors and security events generated when you use the site.
Please provide only what is relevant. Do not put passport numbers, full payment details or medical records in a general enquiry or AI planner message.
3. Why we use information
We use contact information to answer questions and discuss requested travel arrangements. Traveller and booking details help us reserve services, issue documents, coordinate providers and support the trip.
Payment and accounting records help us match money to bookings, issue invoices, prevent fraud and meet record-keeping duties. Technical records help maintain sessions, investigate errors and protect the website. Saved preferences and designs help you return to your planning.
The lawful basis depends on the purpose and the law that applies. It can include steps requested before a contract, performing a contract, meeting a legal duty, or a legitimate interest such as proportionate fraud prevention, where permitted and balanced against individual rights. Where consent is required, that consent must be obtained for the relevant use. KVKK and GDPR have distinct rules; we do not treat one as a substitute for the other.
If you share a dietary, access or health-related requirement, we use the relevant details to check arrangements with the provider. Sensitive information requires an appropriate legal basis and safeguards. Ask how to provide necessary details privately rather than sending a full medical history.
4. Using the AI trip planner
The planner sends the information needed to prepare a route to an external AI service. This can include your messages, conversation context, dates, party details, preferences and the relevant travel catalogue. The response is used to present and revise a proposed itinerary.
Do not type card data, passport numbers or sensitive personal information into the planner. A description such as “fewer stairs” can explain a practical preference without sharing a diagnosis. You can contact us instead if a request needs personal discussion.
Saved designs and related messages may remain available with your account or booking. Unbooked guest designs are temporary. The planner’s output is a proposal for you to review, not a decision about your eligibility or a confirmed reservation.
5. Cookies and browser storage
Cookies and similar browser storage help keep a session, remember cart contents and preferences, and protect forms. Blocking them may prevent parts of the website from working, including login and checkout.
Analytics features, when enabled, can process page visits, interactions, device information and related identifiers to understand use of the site. Aggregated reports do not mean every underlying record is anonymous. Optional tracking requires the controls and consent applicable to that use.
You can review and remove stored site information through your browser settings. This may clear preferences or sign you out. Contact us if you want to understand a particular cookie or provider rather than deleting everything.
How your payment is handled
6. What happens during payment
We never store your full card number or security code. There is no field for either in our records. Card details are entered on our checkout page and passed straight to the bank, which runs the 3D Secure check with you and returns the result.
What we keep from a card payment is the outcome, a reference number, the amount and currency, and the last four digits of the card. That is what lets us match a payment to your booking, answer a question about it and issue a refund to the same card.
We will never ask for a full card number or a security code by email, WhatsApp or the contact form. Any message that does is not from us, and you should not answer it.
Where you pay by bank transfer instead, the details you send are used only to match the payment to your booking. Where a balance is settled in cash, the record created is the receipt you are given and the booking entry it belongs to. Payment records are kept for as long as tax and commercial law requires.
The bank and any payment provider involved process your payment under their own responsibility, and each publishes its own privacy notice for that processing.
7. Who may receive information
Information can be shared where needed for the service or another lawful purpose. The relevant categories include:
- Travel providers: hotels, airlines, guides, transport companies and activity operators delivering the arrangements you request.
- Payment and financial providers: banks and services handling payment, reconciliation or fraud checks.
- Technology providers: hosting, email, security and support services used to run the website and communicate with travellers.
- AI services: providers processing the planner information described above.
- Professional advisers and authorities: where required for legal, accounting, regulatory or dispute-related purposes.
The information relevant to a flight reservation differs from the information needed for a hotel pickup. Sharing should be limited to the purpose concerned. Some recipients, such as airlines and banks, have their own legal responsibilities and privacy notices.
8. Processing in other countries
A trip in Turkey involves relevant information reaching providers in Turkey. External technology, communication and AI services may also process information in other countries.
Cross-border processing must meet the rules that apply to the particular transfer. Those rules may require an adequacy decision, approved contractual safeguards or another legally permitted mechanism.
Contact us if you need information about the recipients, locations or safeguards relevant to your use of the site or booking. Choosing an overseas holiday is not blanket consent to unrelated international data transfers.
9. How long information is kept
How long a record is kept depends on why it exists. The table below is what we apply; where a record is relevant to an open claim, a dispute or a security investigation, it is kept until that is closed.
| What | How long it is kept |
|---|---|
| Enquiries that never became a booking | Up to two years, so a follow-up question can still be answered. |
| Bookings, invoices and payment records | For as long as Turkish tax and commercial law requires, which is typically ten years. |
| Accounts | Until you delete yours. Deleting an account makes your personal details anonymous and removes saved traveller profiles; only the records listed above are kept. |
| Guest trip designs | About 48 hours. Designs saved to an account stay until you remove them. |
| Technical logs | Replaced on a schedule measured in weeks, unless a log is needed for an ongoing security investigation. |
| Help centre searches | Kept as aggregated counts, with no identifier attached to them. |
Closing an account does not delete every record at once: where information must be kept for one of the reasons above, its use is limited to that remaining purpose. You can ask us which retention rule applies to a particular record.
10. Protecting your information
The website uses measures such as access controls, protected passwords, form-abuse checks and payment-security processes. These help reduce unauthorised use; they do not make any system risk-free.
Use a unique account password and do not share login or bank authentication codes. Keep booking links and documents private because they may contain personal or travel details.
Report a suspected privacy or security problem to our contact address. Where a personal-data breach requires notice to an authority or affected individuals, the applicable legal notification duties and deadlines apply.
11. Requests about your data
Your rights depend on the applicable law and the information involved. Under KVKK, these can include asking whether personal data is processed, learning its purpose and recipients, requesting correction or deletion where the conditions are met, and exercising other rights in Article 11. GDPR may provide additional rights where it applies, including access, restriction, objection and portability in relevant circumstances.
Send your request to info@seeturkeytours.com. Explain what you need and provide a booking or account reference if available. We may need proportionate information to confirm identity before disclosing or changing a record. Do not send identity documents unless requested through an appropriate channel.
We respond within the applicable legal period. KVKK requests must be addressed as soon as possible and within 30 days. Where GDPR applies, the normal period is one month, with any permitted extension explained. A request may be limited by a legal duty to keep records or another person’s rights; we will explain an applicable limit.
You may complain to the competent data-protection authority under the relevant procedure. In Turkey this is the Personal Data Protection Authority. Some complaint routes require first applying to the controller; follow the authority’s current guidance.
12. Information about children
An adult making a family booking may need to provide a child’s name, birth date and travel-document details for the selected services. Those details are used for the booking and related legal requirements.
Please do not encourage children to submit personal information through general enquiries or the planner. If you believe information about a child has been provided inappropriately, contact us so we can review it.
13. When this notice changes
We may update this page when the website, services or processing arrangements change. The date at the top identifies this version.
A policy update does not itself provide consent for a new use of personal data. Where a change requires additional information, consent or another legal step, that requirement still applies.
Need help with your information?
Send a privacy request with your booking or account reference if you have one. Tell us what you would like to access, correct or understand.
Contact See Turkey Tours