Privacy Policy

Data Controller

Under Turkey's Personal Data Protection Law (KVKK, Law No. 6698) and applicable data protection principles, your personal data is processed by Çerkezköy Travel Turizm Seyahat Acentesi, the travel agency trading as Istanbul Airport Rides / Vibu Transfer. Tax office: Çerkezköy. Tax number: 8610502309. Business address: Gazi Osman Paşa Mah. Atatürk Cad. Er-Toprak İş Merkezi No: 57 İç Kapı No: 309, Çerkezköy / Tekirdağ, Türkiye.

Personal Data We Process

Full name, phone number, email address; booking details (pickup/drop-off address, flight number, date/time, vehicle type); payment-related transaction records (we never store your card details directly — these are processed by our payment provider); WhatsApp/SMS/email communication records; website usage data via GA4, which only activates with your consent (see our Cookie Policy).

Purposes of Processing

Creating your booking, matching a driver, and completing the transfer; sending booking confirmations, driver details, reminders and cancellation notices via WhatsApp/SMS/email; responding to customer support requests; meeting legal obligations (tax, accounting); measuring service quality; and consent-based analysis of site usage.

Legal Basis

Your data is processed on the basis of contract performance (the booking/transfer service), compliance with legal obligations (invoicing/accounting records), and legitimate interest (service quality, fraud prevention). Marketing communications are sent only with your explicit consent, which you may withdraw at any time.

Sharing With Third Parties

To the extent necessary to deliver the service, data is shared with: payment processors (Stripe, iyzico), WhatsApp messaging infrastructure (Meta), email delivery infrastructure (Resend), SMS infrastructure, maps/route calculation (Google Maps), and server hosting (Railway). These providers are used solely to deliver the service, limited to the minimum data required — your data is never sold or rented to third parties for marketing purposes.

Retention Period

Booking and communication records are retained for a reasonable period after service completion in case of disputes; invoices and accounting records are retained for 5 years as required by Turkish Tax Procedure Law (VUK). See our Cookie Policy for analytics cookie retention.

Your Rights

You have the right to: learn whether your data is being processed; request information about that processing; learn the purpose of processing and whether it's used accordingly; know the third parties your data is shared with, domestically or abroad; request correction of inaccurate or incomplete data; request deletion or destruction where the legal conditions are met; request that these actions be notified to any third parties your data was shared with; object to a result produced solely by automated analysis; and claim compensation if you suffer damage from unlawful processing.

Contact & Requests

To exercise the rights above, email your request to info@istanbulairportrides.com. Requests are resolved within 30 days at the latest, depending on their nature.

This policy was last updated on August 21, 2026.