Privacy Policy

Last updated: 26 October 2026

Who we are

Itinerary of Türkiye (Yenibosna Tax Office, Tax No. 76003842, Istanbul, Türkiye) ("we", "us") operates itineraryofturkiye.com. We act as the data controller for the processing described below. You can contact us through the contact section of our website.

Enquiry forms

Visitors do not need to create an account. When you submit an enquiry form, we collect your name, country, email address and/or phone number, service of interest, planned timing and preferred contact method. We also receive the form language and the page from which you submitted it. We use this information to respond to your enquiry and coordinate the next steps you request.

Enquiry records, their follow-up status and internal team notes are stored in private Vercel Blob storage. Authorised team members can view and update these records through a password-protected administration area. The form also uses Web3Forms to send our team an email notification containing the enquiry details. An email notification is separate from the saved enquiry record.

Administration and security

The administration area uses an essential sign-in cookie lasting up to eight hours. It is HttpOnly, so browser scripts cannot read it, and contains no enquiry details. This cookie is used for team access, not for visitor accounts. To limit abusive submissions and sign-in attempts, the application uses rate-limit identifiers; where an IP address is used, only a keyed hash is stored for this purpose, not the raw address in an enquiry record.

WhatsApp contact

If you choose to contact us, your message is transmitted via WhatsApp (Meta Platforms Ireland Ltd.) under WhatsApp's own terms and privacy policy. We receive your name, phone number and message content, and manage conversations in our customer relationship tools in order to respond to your inquiry. Legal basis: steps taken prior to entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in responding to inquiries (Art. 6(1)(f)).

Please do not send sensitive data

Do not send medical reports, photos, passport documents or payment details via the form or chat. If you share health information voluntarily, we use it only to arrange the consultation you requested and delete it when it is no longer needed.

Service providers

Vercel hosts this website and provides the private storage used for enquiry records. Standard server logs (such as IP address and browser information) may be processed for security and delivery purposes. Web3Forms processes enquiry details to deliver the email notification to our team. See Vercel's storage documentation and Web3Forms' privacy information for further provider information.

Retention

Enquiry and conversation records are kept only as long as needed to handle your inquiry and any resulting engagement, and are then deleted. This applies to saved enquiry records, internal notes and related email correspondence.

Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or port your data, and to object to processing (GDPR Art. 15–21; Turkish KVKK Art. 11). To exercise these rights, contact us through the website. You may also lodge a complaint with your supervisory authority (in Türkiye: KVKK; in the EU: your local data protection authority; in the UK: the ICO).

Changes

We will post any updates to this policy on this page.

See also: Terms of Service · Legal Notice