Last Updated: April 2026

Privacy Policy

Learn how we collect, use, and protect your personal information.

1. Introduction

Welcome to MatchOnWay. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit matchonway.com or use our mobile applications. Please read this policy carefully. If you disagree with its terms, please discontinue use of our services. Questions? Contact us at [email protected].

2. Information We Collect

Personal Information You Provide: When you create an account or book a tour, we collect your name, email address, phone number, profile photo, and travel preferences. Payment information is processed securely and we never store full card numbers. Automatically Collected Data: We automatically collect your IP address, browser type, pages visited, session duration, device identifiers, and referring URLs. Cookies and Tracking Technologies: We use cookies, local storage, and similar technologies to personalize your experience and analyze usage patterns. See Section 10 for more details.

3. How We Use Your Information

We use the information we collect to: - Create and manage your account - Process and confirm tour bookings - Provide customer support and respond to inquiries - Send booking confirmations and travel updates - Deliver personalized tour and destination recommendations - Analyze and improve our platform - Detect and prevent fraudulent activity - Comply with legal obligations - Send marketing communications (with your consent)

4. Information Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share data in these circumstances: Tour Operators: When you make a booking, we share necessary details with the relevant tour operator. Service Providers: We work with trusted third-party vendors under strict data processing agreements. Legal Requirements: We may disclose information if required by law or court order. Business Transfers: In a merger or acquisition, your data remains protected under this policy.

5. Data Security

We implement industry-standard security measures: - SSL/TLS encryption for all data transmission - Encrypted storage for sensitive data - Firewall protection and intrusion detection - Role-based access controls for staff - Regular security audits and penetration testing - PCI-DSS compliant payment processing While we strive to protect your data, no internet transmission is 100% secure. Report any suspected breach to [email protected] immediately.

6. Your Rights (GDPR/KVKK)

Under GDPR and Turkish KVKK law, you have the right to: - Access the personal data we hold about you - Request correction of inaccurate or incomplete data - Request deletion of your data (right to be forgotten) - Restrict how we process your data - Receive your data in a portable, machine-readable format - Object to processing based on legitimate interests - Withdraw consent at any time To exercise these rights, email [email protected]. We respond within 30 days.

7. Data Retention

We retain personal data only as long as necessary: - Account data: Until you delete your account - Booking records: 7 years from transaction date (legal requirement) - Communication logs: 2 years - Marketing preferences: Until you unsubscribe - Technical logs: 90 days After the retention period, we securely delete or anonymize your data.

8. International Data Transfers

Your information may be transferred to and processed in countries other than Turkey, including EU member states. We ensure appropriate safeguards including Standard Contractual Clauses approved by the European Commission and Data Processing Agreements with all processors.

9. Children's Privacy

MatchOnWay services are not directed at individuals under 18. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it immediately. Contact [email protected] if you have concerns.

10. Cookies and Tracking

Essential Cookies: Required for basic site functionality, session management, and security. Cannot be disabled. Analytics Cookies: We use Google Analytics to understand how visitors interact with our site. Data is aggregated and anonymized. Marketing Cookies: Used to deliver relevant advertisements. Only with your consent. Preference Cookies: Remember your language and display preferences. Manage cookie preferences through your browser settings or our cookie consent banner.

11. Third-Party Services

Our platform integrates with: - Stripe: Payment processing - Google Analytics: Website analytics - Cloudflare: Security and CDN - SendGrid: Transactional email - Mapbox: Interactive maps Each service is governed by its own privacy policy.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the date, notify registered users by email, and display a notice on our website. Continued use after changes are posted constitutes acceptance.

13. Contact Us

Email: [email protected] Address: Istanbul, Turkey Data Controller: MatchOnWay For GDPR/KVKK requests, include your full name, account email, and a description of your request. We may need to verify your identity. You may also lodge a complaint with your local data protection authority.