Privacy Policy
Last updated: May 2026
1. Data Controller
This privacy policy describes how personal data collected through the booknow.one platform — operated by ŞEREF TURİZM VE TİCARET LTD. ŞTİ. (the "Company", "we") — is handled.
- Trade Name: ŞEREF TURİZM VE TİCARET LTD. ŞTİ.
- Address: İnönü Mah. Cumhuriyet Cad. Ulumaç Apt. No.93 İç Kapı No.10 Şişli / İSTANBUL
- Tax Office / No: Beyoğlu V.D. / 810 003 1613
- MERSİS No: 0810003161300014
- Email: hello@booknow.one
2. Personal Data Collected
The following personal data is processed in the course of reservations and service delivery:
- Identity information: First name, last name, nationality
- Contact information: Email address, phone number
- Reservation details: Tour date, number of guests, pickup point, special requests
- Payment information: Chosen payment method (card data is processed exclusively through the iyzico infrastructure; the Company does not store card numbers)
- Technical data: IP address, browser type, session data
3. Purposes of Processing
- Creating, confirming and managing reservations
- Tour operations and logistics coordination (guide and vehicle assignment)
- Communicating with the customer via WhatsApp, email or phone
- Fulfilling legal obligations (TÜRSAB, tax, e-invoice)
- Ensuring the security and integrity of the platform
- Measuring and improving service quality
4. Legal Grounds
Your personal data is processed under the following legal grounds set out in 6698 sayılı Kişisel Verilerin Korunması Kanunu (Personal Data Protection Law No. 6698, "KVKK"):
- Establishment and performance of a contract (KVKK art. 5/2-c)
- Compliance with a legal obligation (KVKK art. 5/2-ç)
- Legitimate interest (KVKK art. 5/2-f)
- Explicit consent — used only for non-mandatory marketing communications (KVKK art. 5/1)
5. Transfer of Personal Data
Your data may be shared with the following parties as part of service delivery:
- Tour guides and transport providers: Name, phone and reservation details, for operational coordination
- Payment infrastructure (iyzico): Information strictly required to process the transaction, when card payment is selected
- Legal authorities: In response to requests from courts, tax offices, TÜRSAB or other competent bodies
Other than the cases listed above, your data is not shared with, sold to or rented to any third party.
6. Data Retention Periods
- Reservation and guest data: 10 years from the service date (as required by the Turkish Commercial Code)
- Payment records: 10 years
- Technical log records: 2 years
- Marketing consent: Until consent is withdrawn
7. Cookies
The platform only uses strictly necessary cookies for session management. No third-party analytics or marketing cookies are used.
8. Your Rights Under KVKK
Under Article 11 of KVKK, you have the right to:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether your data is used in line with that purpose
- Know the third parties to whom your data is transferred, inside or outside Türkiye
- Request correction if your data is incomplete or inaccurate
- Request erasure or destruction under the conditions set out in the law
- Object to outcomes adverse to you that result from automated processing of your data
- Claim compensation for damages caused by unlawful processing
You may submit your requests in writing to hello@booknow.one. Applications are answered within 30 days.
9. Security
Your personal data is protected against unauthorized access, alteration, disclosure or destruction by appropriate technical and administrative measures. Card payments are handled through the PCI-DSS compliant iyzico service, and no card data is stored on the Company's servers.
10. Policy Updates
This policy may be updated from time to time. Material changes will be announced on the platform. The current version is always available on this page.
