Licensed Turkish travel agency · TÜRSAB A-10807 Free cancellation up to 30 days before travel

Privacy policy

Effective date: October 8, 2026 · Last updated: October 13, 2026

This policy explains what personal information Turkey Itineraries collects when you visit turkeyitineraries.com, contact us or book a tour, how we use it, who we share it with, and the choices and rights you have. We collect only what we need to plan and run your trip, and we never sell your personal information.

1. Who we are

Turkey Itineraries is operated by two companies under the same ownership:

  • Travelpedia Travel Ltd, registered in England and Wales (company no. 17299925), Unit 501 Leroy House, 434–436 Essex Road, London N1 3FY, United Kingdom, which takes bookings and payments.
  • Travelpedia DMC Turizm, a Group A travel agency licensed by the Ministry of Culture and Tourism of Türkiye and a member of TÜRSAB (license no. 10807), İstiklal Mah. Demirciler Sok. No:19/9, Odunpazarı, Eskişehir, Türkiye, which organizes and operates the tours in Türkiye.

Both companies decide together how your information is used for your trip and are responsible for protecting it. In this policy, “we”, “us” and “our” mean both companies. You can contact us about privacy at info@turkeyitineraries.com.

2. Information we collect

Information you give us

  • Enquiries: your name, email address, the message you write and any trip details you share (dates, number of travelers, places, interests) through our contact form, “Build your trip” form, email or WhatsApp.
  • Bookings: the lead traveler’s name, email, phone number and country; the names of everyone traveling; children’s ages; and, when an airline, hotel or site requires it, passport details and dates of birth.
  • Special requests: dietary needs, mobility needs or other information you choose to share so we can look after you. Some of this may be health information. We use it only to arrange your trip and only with your consent, and you can withdraw that consent at any time.
  • Payment: card payments are handled by our payment processor, Stripe. Your full card number goes directly to Stripe and is never stored on our servers. We receive limited details such as the card brand, the last four digits, the expiry date and the payment status.

Information collected automatically

  • Server logs: our hosting provider records technical data such as IP address, browser type, pages requested and the time of the request. These logs are used for security and to keep the site running.
  • Cookies: see section 7. We do not use advertising cookies or cross-site tracking.

3. How we use your information and our legal bases

Purpose Legal basis (UK GDPR / KVKK)
Answering your questions and preparing itineraries and quotes Steps you ask us to take before a contract; our legitimate interest in responding
Taking your booking, payment and balance payment, and running your tour Performance of our contract with you
Sharing traveler details with hotels, airlines, guides, drivers and sites Performance of our contract with you
Handling dietary, mobility or health information Your explicit consent
Accounting, tax and the records Turkish tourism law requires agencies to keep Legal obligation
Preventing fraud and keeping our website and payments secure Legitimate interests; legal obligation
Sending a short message after your trip asking how it went or inviting a review Legitimate interests (you can opt out at any time)
Sending news or offers Only if you opt in. We do not currently send marketing emails.

4. Who we share your information with

We share personal information only as needed to provide your trip and run our business:

  • Travel suppliers in Türkiye: the hotels, domestic airlines, licensed guides, drivers and transport companies, balloon operators and boat operators who deliver the services you booked.
  • Stripe, which processes card payments. Stripe’s handling of your data is described in the Stripe Privacy Policy.
  • Google, which provides Google Analytics for our website statistics (see section 7).
  • Service providers that host our website and email and provide messaging (including WhatsApp, operated by Meta, when you choose to message us there). They process data only on our instructions.
  • Professional advisers, such as accountants and lawyers, under confidentiality.
  • Authorities, when the law requires it, for example police registration of hotel guests in Türkiye.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not allow suppliers to use it for their own marketing.

5. International transfers

Our tours take place in Türkiye and our booking company is in the United Kingdom, so your information is transferred between the United States (or your country), the United Kingdom and Türkiye. Where UK or Turkish law requires it, we protect transfers with appropriate safeguards such as the UK International Data Transfer Agreement or standard contractual clauses, or we rely on the transfer being necessary to perform the contract you asked us to enter into.

6. How long we keep information

  • Enquiries that do not lead to a booking: up to 2 years after our last contact.
  • Booking and payment records: up to 10 years after your trip, as required by UK and Turkish accounting, tax and tourism laws.
  • Health, dietary and mobility details: deleted within 6 months after your trip unless a claim is ongoing.
  • Server logs: up to 12 months.

7. Cookies and analytics

Necessary cookies. Our website uses cookies that are strictly necessary for it to work, such as cookies that protect forms against spam and keep secure sessions when you pay. These do not require consent. Stripe may set its own necessary cookies on the payment page to prevent fraud.

Analytics. We use Google Analytics 4, provided by Google Ireland Limited and Google LLC, to understand how visitors find and use our website and to count enquiries and bookings (for example, when a booking is paid or a WhatsApp, email or phone link is clicked). Google Analytics uses cookies (such as _ga) and collects information such as the pages you visit, the device and browser you use and your approximate location. Google Analytics 4 does not log or store IP addresses. We do not use Google Analytics for advertising, and advertising features are switched off. Analytics data is kept for 14 months.

Your choice. If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics cookies are only set after you click Accept in our cookie banner. Until then, Google Analytics only receives basic signals without cookies or identifiers. Elsewhere, analytics is on by default. Wherever you are, you can change your choice at any time with the Cookie settings link at the bottom of every page, or by installing the Google Analytics opt-out browser add-on. Our legal basis is your consent where the law requires it, and otherwise our legitimate interest in improving our website. Google may process this data in the United States under the EU–US Data Privacy Framework; see Google’s Privacy Policy.

8. Your rights

Wherever you live, you can ask us to:

  • tell you what personal information we hold about you and give you a copy;
  • correct information that is wrong or incomplete;
  • delete your information, unless we must keep it for legal reasons or an active booking;
  • stop or limit certain uses, or withdraw consent you gave us;
  • send your information to you or another company in a portable format.

Email info@turkeyitineraries.com. We will confirm your request and reply within 30 days (45 days where US state law allows). We may need to verify your identity first. We will not treat you differently for using your rights.

California and other US state residents

If you live in California, Colorado, Connecticut, Virginia or another state with a consumer privacy law, you have the rights listed above, including the right to know, correct and delete your personal information and the right to opt out of its sale or sharing. In the past 12 months we have collected identifiers (such as name, email and phone), commercial information (bookings and payments), and, with consent, limited sensitive information (health or mobility needs), for the purposes described in section 3, from you and from your travel companions. We have not sold or shared personal information as those laws define it, and we do not use sensitive personal information to infer characteristics about you. You may use an authorized agent to make a request.

United Kingdom and Türkiye

You have rights under the UK GDPR and Türkiye’s Personal Data Protection Law No. 6698 (KVKK). If you are unhappy with how we handle your information, please contact us first. You may also complain to the UK Information Commissioner’s Office (ico.org.uk) or Türkiye’s Personal Data Protection Authority (kvkk.gov.tr).

9. Security

Our website uses HTTPS encryption. Card payments are processed by Stripe, which is certified as a PCI DSS Level 1 Service Provider, the highest level of certification in the payments industry. We limit access to personal information to the people who need it to run your trip.

10. Children

Our website is not directed at children under 13, and we do not knowingly collect information from them. Bookings must be made by an adult, who provides the details of any children traveling.

11. Changes to this policy

We may update this policy. The date at the top shows when it last changed. If we make a significant change, we will tell travelers with upcoming bookings by email.

12. Contact

Privacy questions: info@turkeyitineraries.com
Travelpedia Travel Ltd, Unit 501 Leroy House, 434–436 Essex Road, London N1 3FY, United Kingdom
Travelpedia DMC Turizm, İstiklal Mah. Demirciler Sok. No:19/9, Odunpazarı, Eskişehir, Türkiye · TÜRSAB license no. 10807

Not sure which route fits?

Tell us your dates, who is traveling and what you want to see. The Turkey Itineraries team replies within a few hours with a private itinerary and a clear price.

Chat on WhatsApp