Privacy Policy

    Last updated: 13 February 2026

    1. Who We Are

    Tarabya Travel ("we", "us", "our") is a travel curation service based in London, United Kingdom. We act as the data controller for any personal data collected through this website.

    Contact: info@tarabyatravel.com

    2. What Data We Collect

    When you submit a form on our website, we collect the following information:

    • Your full name and email address
    • Travel preferences and requirements you provide (destinations, dates, number of travellers, etc.)
    • Your country of origin (derived from your connection, not your IP address)

    We do not collect or store your IP address, and we do not use tracking cookies or third-party analytics tools.

    3. How We Use Your Data

    We use your personal data solely to:

    • Respond to your travel enquiry and prepare a tailored itinerary
    • Communicate with you about your trip
    • Understand the geographic distribution of our enquiries (country-level only)

    4. Legal Basis for Processing

    Under the UK General Data Protection Regulation (UK GDPR), we process your data on the basis of:

    • Legitimate interest, to respond to your enquiry and provide our travel curation services
    • Consent, by submitting a form, you consent to us processing the information you provide

    5. Data Sharing

    We may share your data with:

    • Hotels, tour operators, and transport providers in Türkiye, only the information necessary to arrange your trip
    • Our email delivery provider (Resend), solely to send you confirmation and notification emails

    We do not sell, rent, or trade your personal data to any third parties.

    6. Data Retention

    We retain your form submission data for up to 24 months from the date of submission. After this period, your data is securely deleted unless you have an ongoing relationship with us.

    7. Your Rights

    Under UK GDPR, you have the right to:

    • Access the personal data we hold about you
    • Request correction of inaccurate data
    • Request deletion of your data ("right to be forgotten")
    • Object to or restrict the processing of your data
    • Request a copy of your data in a portable format
    • Withdraw your consent at any time

    To exercise any of these rights, please email us at info@tarabyatravel.com. We will respond within 30 days.

    8. Data Security

    We take appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/SSL), secure database storage with access controls, and rate-limiting to prevent abuse.

    9. International Transfers

    Your data may be processed on servers located outside the UK (including the European Union). Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

    10. Complaints

    If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.