Privacy Policy

Welcome to Turkish Trail, a US-based travel agency specializing in guided tours of cultural experiences in Turkey. We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.turkishtrail.com), book tours, subscribe to newsletters, or interact with our services. By using our services, you consent to the practices described herein.

This policy complies with the California Consumer Privacy Act (CCPA) for California residents, the EU General Data Protection Regulation (GDPR) for EU/EEA users, Turkey’s Personal Data Protection Law (KVKK) for Turkish residents, and other applicable laws. We act as the data controller and process data on servers primarily located in the United States.

1. Information We Collect

We collect personal information to provide and improve our travel services. This includes:

• Personal Identifiers: Name, email address, phone number, address, date of birth, and passport details (for bookings).
• Travel-Related Data: Tour preferences, booking history, payment information (processed via secure third-party gateways), and special requirements (e.g., dietary needs or accessibility accommodations).
• Usage Data: IP address, browser type, pages visited, time spent on site, and device information via cookies and analytics tools.
• Communication Data: Messages, feedback, or inquiries submitted through forms or email.
• Sensitive Data: Health information (e.g., medical conditions for tours) or payment card details (not stored by us; handled by PCI-compliant processors).

We do not knowingly collect data from children under 16 without parental consent. If you book for minors, provide only necessary details.

2. How We Collect Information

• Directly from You: When booking tours, signing up for newsletters, or contacting us via forms/email/phone.
• Automatically: Through cookies, web beacons, and similar technologies for site functionality, analytics (e.g., Google Analytics), and personalized ads.
• From Third Parties: Tour partners (e.g., hotels, guides), payment processors, or marketing affiliates, with your consent where required.

3. How We Use Your Information

We use your data for legitimate purposes under KVKK and GDPR, including:

• Service Delivery: Processing bookings, arranging tours (e.g., underground city visits), and sending confirmations/itineraries.
• Communication: Responding to inquiries, sending newsletters (with opt-out), or updates on Cappadocia highlights.
• Improvement: Analyzing usage to enhance site/tours, troubleshoot issues, or develop new offerings.
• Marketing: Personalized promotions (e.g., Ihlara Valley hikes), based on consent or legitimate interest; you can unsubscribe anytime.
• Compliance: Verifying identity, preventing fraud, or meeting legal obligations (e.g., tax reporting).

Legal bases: Consent (e.g., marketing), contract performance (bookings), legitimate interests (analytics), or legal requirements.

4. Sharing Your Information

We share data only as necessary and with safeguards:

• Service Providers: Tour operators, hotels, transport companies, and IT vendors (e.g., email platforms like Mailchimp) bound by confidentiality.
• Legal/Regulatory: To authorities if required (e.g., health/safety during tours) or in response to subpoenas.
• Business Transfers: In mergers/acquisitions, with notice.
• With Consent: For affiliates or third-party ads.

We do not sell personal data. International transfers (e.g., to EU partners) use Standard Contractual Clauses or adequacy decisions under GDPR/KVKK.

5. Data Security

We implement reasonable measures (e.g., encryption, firewalls, access controls) to protect data from unauthorized access, loss, or breach. However, no system is fully secure; we cannot guarantee absolute protection. In case of a breach, we notify affected users and authorities as required by law (within 72 hours under GDPR; promptly under KVKK).

6. Data Retention

We retain data only as long as needed:

• Booking data: 5 years post-tour (for disputes/taxes).
• Marketing: Until opt-out or 2 years inactivity.
• Analytics: Anonymized indefinitely.

You can request deletion earlier, subject to legal holds.

7. Your Rights

Under KVKK and GDPR, you have rights regarding your data:

• Access: Request a copy of your data.
• Rectification: Correct inaccuracies.
• Erasure: Delete data (right to be forgotten).
• Restriction: Limit processing.
• Objection: Oppose marketing or legitimate interest processing.
• Portability: Receive data in structured format.
• Withdraw Consent: At any time, without affecting prior processing.

To exercise rights, email info@turkishtrail.com. We respond within 30 days (KVKK) or 1 month (GDPR). For EU users, you may lodge complaints with your supervisory authority (e.g., via edpb.europa.eu). Turkish residents: Contact the Personal Data Protection Authority (kvkk.gov.tr).

For sensitive data, we require explicit consent.

8. Third-Party Links

Our site links to partners (e.g., booking platforms). We are not responsible for their privacy practices; review their policies.

9. Changes to This Policy

We may update this policy to reflect legal changes or operations. Posted updates will include the new effective date. Significant changes prompt email notice. Continued use post-update implies acceptance.

10. Contact Us

For questions, contact our Data Protection Officer:

Turkish Trail 2231 Fox Boro Ln Naperville, IL 60564 Email: info@turkishtrail.com Phone: +1 331 814 0104

This policy supplements our Terms of Service. Last reviewed: October 25, 2025.