Privacy & Your Data

What a booking needs and no more: your name, email address, phone number, and the passenger details required to issue flight tickets and hotel reservations. Card numbers are handled by the bank and never reach us.

We also keep the ordinary technical records any website keeps, such as which pages were visited and what was searched for in this help centre. The search terms help us find questions that our help pages do not yet answer.

The full account is in the privacy policy.

Yes. We operate under Turkey's data protection law, KVKK, and we apply the GDPR to travellers in the European Union and the European Economic Area.

In practice that means we collect what a booking needs, we say what we do with it, we keep it only as long as there is a reason to, and we act on your requests within the time the law allows.

The legal detail, including the legal reason for each way we use personal data, is set out in the privacy policy.

You can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to a particular use of it. Write to info@toliratours.com from the address on the booking and we will act on it.

Deletion has one limit worth knowing before you ask. Records tied to a completed booking, invoices among them, have to be kept for as long as Turkish tax and tourism law requires. Data outside those legally required records can be deleted.

We do not charge for these requests and you do not need to use special legal wording when you ask.

Only with the people who have to have it to run your trip: the hotels holding your rooms, the airline issuing your tickets, the guide meeting you, and the bank processing your payment. Each supplier receives only the details needed to provide its part of the booking.

We do not sell personal data and we do not pass it to advertisers.

Where a supplier sits outside your own country, which is unavoidable for a trip in Turkey, the transfer happens under the safeguards described in the privacy policy.

Write to info@toliratours.com, or use the contact form, and say the message is about your data. We read your message ourselves.

Include enough for us to find you: the name on the booking, the email address you used, and the booking reference if you have one. We need these details to check your identity and find the right booking. This check helps us handle your request safely.

If our answer does not satisfy you, you can complain to your national data protection authority, and within Turkey to the KVKK authority.