Privacy Policy
Last updated: this is a draft and has not yet been finalized.
Introduction
This Privacy Policy explains how Tramate processes personal data when you use the tramate.app website or our mobile apps, or contact us over a messaging app. Tramate, based in Göreme, Nevşehir, Türkiye, is the data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK); for visitors in the European Economic Area the GDPR also applies. This text is a draft pending legal review.
Data We Collect
Contact and booking details you give us (name, e-mail address, phone number, travel dates, number of guests and the experiences you ask about); account details if you sign in; the messages you send us; the status of your payment (card details are entered on the payment provider's page and never reach us); and technical data such as IP address, browser, device and the pages you visit.
How We Use Your Data
To answer your questions and to arrange and manage your bookings (performance of a contract); to meet legal obligations such as accounting and travel agency records; to keep the service secure (legitimate interest); and, only with your consent, to measure how the site is used.
Service Providers
We use these providers only for the purposes above: Vercel (hosting, Web Analytics and Speed Insights); Google Analytics and PostHog (usage analytics, only with your consent; PostHog stores data in the EU); Google Firebase (sign-in); iyzico (card payments, on its own payment page); and Google Maps (maps). If you contact us on WhatsApp, LINE, WeChat or RedNote (Xiaohongshu), your messages are also processed by that app's operator under its own privacy policy. We do not sell personal data.
International Transfers
Some of these providers store or process data outside Türkiye, for example in the European Union or the United States. Such transfers are made only on the grounds that Article 9 of the KVKK and, for visitors in the European Economic Area, the GDPR allow.
Your Rights
Under Article 11 of the KVKK you may ask whether we process your personal data, request information about it and its purpose, learn which third parties in Türkiye or abroad receive it, ask for it to be corrected or deleted, object to a result based solely on automated analysis, and claim compensation for unlawful processing. Visitors in the European Economic Area also have the GDPR rights of access, rectification, erasure, restriction, portability and objection, and may complain to their data protection authority. You can withdraw consent at any time; this does not affect processing that took place before.
Contact Us
Send privacy questions and requests to info@tramate.app. We answer within 30 days at the latest, as the KVKK requires.