Privacy Policy

What we collect

• Booking details: your name, email address, telephone number, the date and departure time you chose, the number of guests, and your order number.
• Payment result: whether the payment succeeded, the amount, and a reference from the bank. Never the card number — it is entered on the bank’s own page and never reaches us.
• Technical data: IP address, browser and device type, and the pages you viewed, collected through the analytics described in the Cookie Policy.

Why we use it

• To take a booking, reserve your places and confirm it to you — without this we cannot perform the contract.
• To answer your messages and handle cancellations and refunds, including telling you if a sailing is cancelled.
• To meet accounting, tax and consumer-law record-keeping obligations.
• To understand how the site is used, in aggregate, so it can be improved. This is the only purpose that depends on your consent, and it is the one the cookie banner asks about.

Who it is shared with

The tour operator whose booking system supplies the seats receives what it needs to carry you — the name on the booking, the date, the departure time and the number of guests. The bank that processes the payment receives what it needs to take it. Our email and hosting providers process data on our instructions. Nobody buys, rents or is sold your data, and it is not used for advertising.

Some of these providers operate outside Türkiye. Where data is transferred abroad it is done on the legal bases the KVKK allows, and to providers bound by contractual protections.

How long we keep it

Booking and payment records are kept for ten years, which is the retention period Turkish commercial and tax law requires. Correspondence is kept for as long as it may be needed to resolve a dispute, and then deleted. Analytics data is retained in aggregate only.

Your rights

You may ask what data we hold about you, ask for it to be corrected or deleted, object to processing based on our legitimate interests, ask for a copy in a portable format, and withdraw consent for analytics at any time. Write to the address on the Contact page; we answer within thirty days.

You may also complain to the Turkish Personal Data Protection Authority (KVKK Kurumu), or, in the European Union, to your national supervisory authority.

Security

The site is served over HTTPS, payments run through 3-D Secure on the bank’s own infrastructure, and access to booking records is limited to the people who need it to do their work.