Privacy Policy

1. Who We Are / Data Controller

The data controller for truebluetour.com is:

True Blue Tour
Trading name of Onur Turizm Gıda İnşaat İthalat İhracat Ticaret Limited Şirketi
Alemdar Mahallesi, Alayköşkü Caddesi No. 3/A
Fatih, İstanbul, Türkiye

• Tax Office / No: Hocapaşa – 6430222341
• Email: [email protected]
• Phone: +90 501 157 82 36

We are a licensed destination management company (DMC) operating group and private tours across Türkiye, Morocco, Greece, Egypt, Armenia, and Georgia.

2. Applicable Law

Our primary legal framework is the Turkish Personal Data Protection Law No. 6698 (KVKK). Because we serve international travellers, including those from the European Economic Area (EEA), we also align our practices with the EU General Data Protection Regulation (GDPR). Where both frameworks apply, we follow the stricter standard.

3. Personal Data We Collect

3.1 Data You Provide Directly

• Booking and enquiry information
• Name and surname
• Email address
• Phone number
• Nationality
• Passport number (where required)
• Travel dates
• Group composition
• Special dietary, accessibility or medical requirements
• Billing address
• Account registration details
• Contact form submissions
• Newsletter subscriptions
• Gift card recipient information

3.2 Data Collected Automatically

• IP address
• Browser type
• Operating system
• Device information
• Pages visited
• Referral URL
• Time spent on the website
• Cookie information

3.3 Data Received From Third Parties

We may receive booking and contact information from travel agencies, affiliates, booking platforms, and review services when necessary to fulfil your booking.

4. Purposes of Processing

• Managing bookings
• Providing customer support
• Account management
• Payment processing
• Fraud prevention
• Marketing communications (with consent)
• Website analytics
• Legal compliance
• Protecting legal rights

5. Sharing Your Personal Data

We do not sell your personal information.

Your data may be shared with:

• Hotels
• Tour guides
• Transportation providers
• Activity operators
• Payment providers
• Website hosting providers
• CRM and email service providers
• Travel agencies
• Government authorities where legally required
• Professional advisers

6. Data Retention

• Booking records: 10 years
• Customer accounts: Duration of account + 3 years
• Marketing consent: Until withdrawn + 3 years
• Contact enquiries: 2 years
• Analytics data: Up to 26 months
• CCTV footage (if applicable): 30 days

7. Your Rights

You may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion
• Restrict processing
• Receive your data in portable format
• Object to processing
• Withdraw consent
• Lodge a complaint with the relevant authority

To exercise your rights, please contact: [email protected]

8. Cookies

We use functional, analytics and marketing cookies to improve your experience.

9. Marketing Communications

Marketing emails are sent only with your consent. You may unsubscribe at any time using the link provided in every email or by contacting us directly.

10. Data Security

• TLS / HTTPS encryption
• Restricted staff access
• Regular security updates
• Secure third-party processor agreements

11. Children's Privacy

Our services are not intended for children under 18 years of age. If we become aware that a child's personal data has been collected without appropriate consent, it will be deleted.

12. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced on our website or by email where appropriate.

14. Contact

Privacy Policy Version 2.0
Effective Date: 1 June 2026