Privacy policy

This policy explains what personal data we collect when you visit this website, fill in one of its forms or contact us directly, what we use it for and what rights you have. We process your data in line with Türkiye's Personal Data Protection Law No. 6698 (KVKK) and, where they apply to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Who is responsible for your data

Data controller: COLORIDO TOURS TURKEY TURIZM TICARET LTD. STI., trading as Türkiye Local Guide (Colorido Tours, TÜRSAB licence A-12116).
Address: Istasyon Mah. 1421. Sk. Divan Residence Sitesi. No:62 / 2B, İç Kapı No: K3, Küçükçekmece, Istanbul, Türkiye.
Email: info@turkiyelocalguide.com · Phone / WhatsApp: +90 552 533 53 35

Türkiye Local Guide is the brand under which Colorido Tours offers the private tours designed and guided by Sinan Topali, licensed tour guide. The same controller is responsible for all the data described on this page, including job applications and partner proposals.

2. What data we collect and why

We only use the data you give us, plus the minimum technical data described in section 3 and, only if you accept them, the cookies described in the cookie policy. The fields marked as required are needed to answer you; without them we can't deal with your request.

• Contact form and service enquiries (the contact page and each service page): your name, email address, phone number and message, plus any trip details you add (the day tour or service you're interested in, date, start time, duration, number of people, language, city). We use them to answer your enquiry.
• Tailor-made trip requests (tailor-made form): your name, email address, phone number and country, and the details of your trip — dates, number of adults and children, destinations, interests, pace, accommodation, budget, dietary requirements and special requests. We use them to design your itinerary and prepare your quote.
• Tour booking and quote requests (the form on each tour page): your name, email address, phone number, country, start date, number of adults and children, rooms and any comments. We use them to check availability, send you a quote and manage your booking.
• Your private quote page: we send your quote as a private link protected by an access code. If you use it to tell us which option you prefer, how many travellers there will be or to send us a message, we record that with your quote so we can follow up.
• Satisfaction surveys: after your trip we may send you a short survey, also protected by an access code. We record your name, your ratings and your answers to improve our service. If you tick the box, we may publish your opinion on this website with your first name only; you can ask us to remove it at any time.
• Job applications (Work with us) and partner proposals (Partner with us): see section 5.
• Email, WhatsApp and phone: whatever you send us directly. Once you book, we may also need the names of all the travellers and, for domestic flights, a copy of the photo page of your passport. If you write to us on WhatsApp, WhatsApp also processes your messages under its own privacy policy.

If you choose to tell us about allergies, health-related dietary needs or reduced mobility, we use that information only to organise your trip safely. By sharing it with us you explicitly consent to this use, and you can withdraw that consent at any time.

3. Data collected automatically

Besides what you write to us, when you send a form or open the private link to a quote we record the IP address of the connection and the date and time. Depending on the form, we also record the main language your browser is set to, or a rough indication of your browser and operating system. For the private link we also record the browser and operating system, the website you came from (domain only, if your browser sends it) and whether the access used the correct code or was a failed attempt. The same happens when you answer a satisfaction survey after your trip: each response stores the date, the IP address and the browser, so we can detect duplicate responses.

For the private link this has two purposes: protecting your quote — which contains your details and a price — against access by anyone else, and knowing whether the link we sent you has arrived and been opened. For forms, it helps us spot spam and misuse, trace a request if there is ever a dispute about it, and know which languages our visitors speak. The legal basis is our legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) in the security of our systems and in managing the proposal we have prepared for you. This data is not used for advertising, not combined with profiles and not passed on to third parties.

4. Legal basis

• Your consent, when you send a form or contact us (GDPR Art. 6(1)(a); KVKK Art. 5(1)). You can withdraw it at any time; this does not affect the processing carried out before.
• Steps prior to a contract and the contract itself: preparing your quote and organising and running your trip (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• Legal obligations, such as keeping the invoices and booking records required by law (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
• Legitimate interest in the security of our systems and in managing your proposal, as explained in section 3 (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• Explicit consent for any health-related information you share with us (GDPR Art. 9(2)(a); KVKK Art. 6).

5. Job applications and partner proposals

If you send us your application through Work with us, we use your contact details, your CV and what you tell us only to assess your profile for Colorido Tours' recruitment processes. The legal basis is your consent, which you can withdraw at any time. We keep the application and the CV for up to 12 months from when you send them, and then they are deleted. Your CV is never published on the website, is not passed on to third parties and is only seen by our team in the private admin area.

If you write to us through Partner with us on behalf of a company, we use the contact details you give us to study your proposal and reply to you. We keep them for as long as the conversation or the collaboration lasts and, if it doesn't go ahead, for up to 12 months.

6. How long we keep your data

• Enquiries, quotes and bookings: for as long as needed to deal with your request and your trip, and afterwards for as long as we are legally required to keep them.
• IP addresses and the other technical data linked to accesses to the private link of a quote: up to 13 months from the last access, or until the quote is deleted, whichever comes first.
• IP addresses and the other technical data recorded when you send a form: for as long as we keep the request itself.
• Job applications and CVs: up to 12 months from when you send them.
• Partner proposals: while the conversation or collaboration lasts and, if it doesn't go ahead, up to 12 months.

7. Who we share your data with

We don't sell your data or use it for advertising. We only share it when it is needed:

• Technical service providers that host this website and handle our email, and an artificial intelligence tool that helps us draft quotes and itineraries from the details of your request. They act on our instructions and only for these purposes.
• Suppliers needed for your trip — such as hotels, transport companies, airlines for domestic flights, restaurants and activity providers — each of them receiving only what it needs (for example, the travellers' names, or passport details for a flight).
• Google, only if you accept cookies (for its measurement and advertising tools, when they are enabled, and for the meeting-point maps on day tour pages) or click to load a map: see the cookie policy.
• Public authorities, when the law requires it.

8. International transfers

Colorido Tours is based in Türkiye and manages your data from there. If you live in the European Union, the European Economic Area or the United Kingdom, this means your data is transferred to a country outside those areas; where the GDPR or the UK GDPR applies to our processing, we comply with it and you keep all the rights described on this page.

The technical service providers that host this website and our email, and the AI tool, may store or process data in other countries, including the European Union and the United States. We only use them for the purposes described here and, where the KVKK or the GDPR requires specific safeguards for these transfers, we rely on the mechanisms those laws provide.

9. Your rights

You can ask us to:

• confirm whether we process your data and give you a copy of it (access);
• correct inaccurate or incomplete data (rectification);
• delete it (erasure) or restrict how we use it;
• stop processing it on the basis of our legitimate interest (objection);
• give you the data you provided in a portable format (portability);
• stop any processing based on your consent, by withdrawing it at any time.

Under Article 11 of the KVKK you also have the right to know the purpose of the processing and whether your data is used accordingly, to know the third parties in Türkiye or abroad to whom it is transferred, to have corrections or deletions notified to them, to object to a result against you that arises exclusively from automated analysis, and to claim compensation if you suffer damage because of unlawful processing. We don't make decisions about you based solely on automated processing.

To exercise any of these rights, email info@turkiyelocalguide.com from the address you used with us, or write to the postal address in section 1. We may ask you to confirm your identity. It is normally free of charge, and we will reply as soon as possible and within one month at the latest (30 days for requests under the KVKK).

10. Right to complain

If you think we haven't handled your data properly, please tell us first and we'll do our best to put it right. You also have the right to complain to a data protection authority:

• in the United Kingdom, the Information Commissioner's Office (ICO): ico.org.uk;
• in the European Union or the EEA, the supervisory authority of the country where you live or work, or where you think the infringement took place (the European Data Protection Board lists them at edpb.europa.eu);
• in Türkiye, the Personal Data Protection Board (kvkk.gov.tr), after first contacting us.

11. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. Quote and survey pages are protected by an access code, and CVs can only be seen by our team in the private admin area.

12. Cookies

Which cookies we use and how to accept or reject them: cookie policy.

13. Changes to this policy

If we change this policy, we will publish the new version on this page with a new date at the top.