Legal

Privacy Policy

Effective date: 22 June 2026

1. Who we are

AntalyaTransfers.co ("we", "us", "our") is an online transfer booking service, operated by Dmitry Kulish, Individual Entrepreneur registered in Georgia (ID 302275099), acting as merchant of record. We arrange and confirm transfer bookings and subcontract the transfer itself to independent, licensed local transportation partners in and around Antalya, Turkey. We are the data controller for personal data collected through this website.

Contact: [email protected] · WhatsApp/phone: +90 531 597 22 34

2. What data we collect

2.1 Data you give us

• Full name
• Email address
• Phone number (used for booking confirmation and WhatsApp coordination)
• WhatsApp number (if different from phone)
• Telegram username (optional)
• Pickup and drop-off addresses
• Flight number (optional — used for flight tracking)
• Special requests / notes
• Payment card details (processed securely by our payment service provider — we never see or store full card numbers)

2.2 Data collected automatically

• Browser type, language, and operating system
• Pages visited, time on page, referrer URL
• Anonymised IP address (last octet removed)
• Cookie identifiers (see Section 8)

2.3 Data we do NOT collect

• Your precise GPS location
• Passport or ID numbers
• Biometric data
• Sensitive categories (health, religion, race, etc.) — unless you voluntarily mention them in a special request

3. How we use your data

• Booking fulfilment — confirming your booking, assigning a transportation partner, and sending you their contact details via email and/or WhatsApp
• Flight tracking — monitoring your flight for delays so the pickup time can be adjusted
• Customer support — responding to questions and resolving disputes
• Payment processing — passing the minimum required data to our payment service provider
• Analytics — understanding how visitors use the site (aggregated, anonymised) to improve the product
• Legal and accounting — retaining booking records to comply with Georgian accounting obligations and Turkish operational/legal obligations where applicable
• Safety — detecting fraud and abuse

Legal basis (GDPR / KVKK): Contract performance (Art. 6(1)(b) GDPR) for booking data; Legitimate interest (Art. 6(1)(f)) for analytics; Legal obligation (Art. 6(1)(c)) for accounting records.

4. Third parties we share data with

We share only what is necessary with the following processors. We do not sell your data to anyone.

We also share your name, phone number, and pickup/drop-off details with the assigned transportation partner so they can complete your transfer. Transportation partners are independent licensed operators bound by a confidentiality agreement.

5. How long we keep your data

• Booking records (name, contact, route, price): 3 years from the transfer date — required by applicable accounting and tax obligations
• Analytics data: 12 months, then auto-deleted
• Support messages: 12 months after the last message
• Cookie data: per the cookie lifetimes in Section 8
• Deleted-account data: purged within 30 days of a deletion request, except where retention is legally required

6. Your rights

Under KVKK (Turkey's Personal Data Protection Law, Law No. 6698) and the EU GDPR (if you are an EU resident), you have the right to:

• Access — ask us for a copy of the personal data we hold about you
• Correction — ask us to fix inaccurate data
• Deletion — ask us to delete your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format (JSON or CSV)
• Object — object to processing based on legitimate interest
• Restriction — ask us to pause processing while a dispute is resolved
• Withdraw consent — for any processing based on consent, you can withdraw at any time

To exercise any right, email [email protected] with your full name and email address. We respond within 30 days. Turkish residents may also apply to the Personal Data Protection Authority (KVKK).

7. International data transfers

Some processors (our payment provider, PostHog, Anthropic) operate outside Georgia and the EU. Transfers are governed by Standard Contractual Clauses (SCCs) or the processor's adequacy decision. Anthropic processes only the minimum context needed to run the AI booking assistant; no booking data is used to train their models under our API agreement.

8. Cookies

We use a small number of cookies:

• Essential cookies — required for the booking wizard to work (session ID). No consent needed.
• Analytics cookies — PostHog and Google Analytics 4. These are set only after you accept analytics cookies in the cookie banner.
• Preference cookie — remembers your cookie choice (stored in localStorage, not a cookie).

You can decline analytics cookies at any time by clicking "Decline" in the cookie banner, or by emailing us. Essential cookies cannot be turned off while using the site.

9. Children

Our service is not directed at children under 16. We do not knowingly collect data from children. If you believe we have collected data about a child, contact us and we will delete it immediately.

10. Changes to this policy

We may update this policy when we add new features or processors. We will post a notice on the website and update the effective date. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact

AntalyaTransfers.co
Email: [email protected]
Phone / WhatsApp: +90 531 597 22 34