Legal
Privacy Policy
Effective date: 1 June 2025
Plain-language summary: We collect only what we need to arrange your transfer. We never sell your data. We share it only with the driver and the services listed below. You can ask us to delete your data at any time.
1. Who we are
AntalyaTransfers.co ("we", "us", "our") is a software platform and marketplace operator registered in Turkey. We connect passengers with independent, licensed transfer drivers in and around Antalya. We are the data controller for personal data collected through this website.
Contact: [email protected] · WhatsApp/phone: +90 531 597 2234
2. What data we collect
2.1 Data you give us
- Full name
- Email address
- Phone number (used for confirmation and WhatsApp driver matching)
- WhatsApp number (if different from phone)
- Telegram username (optional)
- Pickup and drop-off addresses
- Flight number (optional — used for flight tracking)
- Special requests / notes
- Payment card details (processed by Stripe — we never see or store raw card numbers)
2.2 Data collected automatically
- Browser type, language, and operating system
- Pages visited, time on page, referrer URL
- Anonymised IP address (last octet removed)
- Cookie identifiers (see Section 8)
2.3 Data we do NOT collect
- Your precise GPS location
- Passport or ID numbers
- Biometric data
- Sensitive categories (health, religion, race, etc.) — unless you voluntarily mention them in a special request
3. How we use your data
- Booking fulfilment — confirming your booking, assigning a driver, and sending you driver contact details via email and/or WhatsApp
- Flight tracking — monitoring your flight for delays so the driver adjusts pickup time
- Customer support — responding to questions and resolving disputes
- Payment processing — passing the minimum required data to Stripe
- Analytics — understanding how visitors use the site (aggregated, anonymised) to improve the product
- Legal and accounting — retaining booking records to comply with Turkish tax law
- Safety — detecting fraud and abuse
Legal basis (GDPR / KVKK): Contract performance (Art. 6(1)(b) GDPR) for booking data; Legitimate interest (Art. 6(1)(f)) for analytics; Legal obligation (Art. 6(1)(c)) for accounting records.
4. Third parties we share data with
We share only what is necessary with the following processors. We do not sell your data to anyone.
| Third Party | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing | https://stripe.com/privacy |
| PostHog | Product analytics (anonymised) | https://posthog.com/privacy |
| Google Maps / Places API | Address autocomplete & mapping | https://policies.google.com/privacy |
| Anthropic (Claude API) | AI booking assistant | https://www.anthropic.com/privacy |
| Google Analytics 4 | Website analytics | https://policies.google.com/privacy |
| Yandex Metrica | Website analytics (EU/TR traffic) | https://yandex.com/legal/confidential/ |
We also share your name, phone number, and pickup/drop-off details with the assigned driver so they can complete your transfer. Drivers are independent contractors bound by a confidentiality agreement.
5. How long we keep your data
- Booking records (name, contact, route, price): 3 years from the transfer date — required by Turkish tax law
- Analytics data: 12 months, then auto-deleted
- Support messages: 12 months after the last message
- Cookie data: per the cookie lifetimes in Section 8
- Deleted-account data: purged within 30 days of a deletion request, except where retention is legally required
6. Your rights
Under KVKK (Turkey's Personal Data Protection Law, Law No. 6698) and the EU GDPR (if you are an EU resident), you have the right to:
- Access — ask us for a copy of the personal data we hold about you
- Correction — ask us to fix inaccurate data
- Deletion — ask us to delete your data ("right to be forgotten")
- Portability — receive your data in a machine-readable format (JSON or CSV)
- Object — object to processing based on legitimate interest
- Restriction — ask us to pause processing while a dispute is resolved
- Withdraw consent — for any processing based on consent, you can withdraw at any time
To exercise any right, email [email protected] with your full name and email address. We respond within 30 days. Turkish residents may also apply to the Personal Data Protection Authority (KVKK).
7. International data transfers
Some processors (Stripe, PostHog, Anthropic) operate outside Turkey and the EU. Transfers are governed by Standard Contractual Clauses (SCCs) or the processor's adequacy decision. Anthropic processes only the minimum context needed to run the AI booking assistant; no booking data is used to train their models under our API agreement.
8. Cookies
We use a small number of cookies:
- Essential cookies — required for the booking wizard to work (session ID). No consent needed.
- Analytics cookies — PostHog and Google Analytics 4. These are set only after you accept analytics cookies in the cookie banner.
- Preference cookie — remembers your cookie choice (stored in localStorage, not a cookie).
You can decline analytics cookies at any time by clicking "Decline" in the cookie banner, or by emailing us. Essential cookies cannot be turned off while using the site.
9. Children
Our service is not directed at children under 16. We do not knowingly collect data from children. If you believe we have collected data about a child, contact us and we will delete it immediately.
10. Changes to this policy
We may update this policy when we add new features or processors. We will post a notice on the website and update the effective date. Continued use of the site after changes constitutes acceptance of the updated policy.
11. Contact
AntalyaTransfers.co
Email: [email protected]
Phone / WhatsApp: +90 531 597 2234