At MBD Travel, a subsidiary of MBD TOURISM L.L.C, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, disclose and safeguard your personal information when you visit and interact with our website. By using our website and services you agree to the practices described here.
We do not sell or rent your personal data. Data needed to deliver a service may be shared, to the necessary extent, with the service providers and authorised recipients described below.
1. Information we collect
We collect several types of information to provide and improve our services.
- Personal identification information: when you register or interact with our website we may collect your name, email address, phone number and billing information.
- Usage data: information on how you access and use our website, such as IP addresses, browser type, pages visited and time spent on the website.
- Cookies: we use cookies and similar tracking technologies to monitor activity on our website and to improve the user experience.
2. How we use your information
We use the information we collect for the following purposes:
- To provide and maintain our services, including processing bookings, handling enquiries and delivering personalised experiences.
- To communicate with you, including updates, promotional content and customer support messages.
- To improve our website and services by analysing usage patterns and user feedback.
- To comply with legal obligations and protect our rights and interests.
3. Data sharing and disclosure
We do not sell, rent or trade your personal information to third parties. We may share your personal data only in the following situations:
- Service providers: trusted third parties who assist us in running the website and providing services.
- Legal compliance: where required by law or to comply with a legal process.
4. Data security
We take reasonable steps to protect your personal information from unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure.
5. Data retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy. Once your data is no longer needed we securely delete it.
6. Your rights
You have certain rights regarding the personal data we hold about you:
- Access: you can request access to the personal information we hold about you.
- Correction: you can request corrections to any inaccurate or incomplete information.
- Deletion: you can request the deletion of your personal data, subject to legal obligations and retention requirements.
- Opt-out: you can unsubscribe from promotional emails.
7. Cookies and tracking technologies
We use cookies to enhance your experience. You can control cookies through your browser settings.
Everything that is not essential depends on the choice you make in the cookie bar at the bottom of the page. If you do not accept, none of it runs and the site works the same.
- mbd_kvkk: your choice in the cookie bar. Kept for 180 days.
- mbd_ss: search session. Links the searches of one visit to improve results. Deleted when the browser closes. Set only if you accept.
- mbd_anon: anonymous visitor ID. It does not carry your name or e-mail; it links searches on different days to the same browser. Kept for 180 days. Set only if you accept.
- Search log: the searches you make on the site (the text you type, dates, number of travellers, filters and how many results came back) are recorded to improve search results. E-mail addresses, phone, Turkish ID and card numbers typed into the search box are removed before anything is stored; your IP address and browser details are not recorded. The search log is kept for 400 days. If you accept, searches are linked to each other through mbd_ss and mbd_anon; that link is removed after 90 days and the search stays without an identity.
- Instagram embed (Meta): the "On Instagram" section on experience pages loads posts from Meta's servers (www.instagram.com/embed.js). Your IP address, browser details and the page you are viewing go to Meta, and Meta may set its own cookies. This data is covered by Meta's own privacy policy. The section appears only if you accept.
8. Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. If you provide information to such third parties, different rules may apply, and you should contact them directly about their use of the information they collect.
9. Changes to this policy
Website policies and terms and conditions may be changed or updated occasionally to meet requirements and standards. Customers are therefore encouraged to visit these sections frequently. Modifications are effective on the day they are posted.
10. Contact us
If you have questions about this privacy policy, our contact details are on the Support page and in the footer of every page.
11. Facebook, Instagram, WhatsApp and support correspondence
When you message MBD Travel accounts or contact us through the MBD Travel Graph API app, we may process the profile name, platform user identifier, username or phone number you share, message content, attachments and sending/delivery information to respond to your enquiry. Contact details and correspondence provided through email and web support are used for the same purpose.
Messages and attachments are held in our Chatwoot support system. Authorised staff access them through the CRM correspondence screen to follow up and respond to your request. Where needed, staff verify and link the conversation to the relevant customer or booking record. The CRM stores that link and necessary activity records; it does not create a separate copy of messages or attachments. Sending us a message does not by itself constitute marketing consent.
Meta and hosting or communication service providers process data in their respective roles to deliver communications. These services may involve processing outside your country. Meta platforms process data relating to their own accounts and services under their own privacy policies.
We retain routine support correspondence that does not form part of booking, accounting or dispute records for 30 days after the support request is closed, then delete or anonymise it. Records needed for bookings, accounting, disputes or legal obligations are retained only for the relevant purpose and required retention period.
You can request deletion by emailing [email protected]. Within 30 days of receiving the request, we provide a written response explaining the outcome or why specific records cannot be deleted. Any shorter mandatory legal deadline takes precedence.
Our Data deletion instructions page explains how to request deletion of correspondence and related personal data. Removing app permissions does not automatically delete past records. We assess requests taking retention needs and legal obligations into account.
This text was originally published in English and the English version prevails in case of any difference in interpretation. The Turkish version restates the same provisions for information.