Privacy Policy

Bespoke Istanbul (“we,” “us”) is a trip-planning and concierge service operating in Istanbul, Türkiye. For the purposes of the EU General Data Protection Regulation (GDPR) and Türkiye's Law on the Protection of Personal Data (KVKK, Law No. 6698), we act as the data controller for the personal data described below.

When you use the trip planner, contact form, or message us directly, we collect:

• Name, email address, and WhatsApp number (if provided)
• Country of residence (if provided)
• Trip preferences you submit — dates, party size, interests, pace, budget tier, dietary needs, and any special occasion you mention
• The content of messages you send us
• Basic, aggregated analytics about how the site is used (see Section 7)

We use this information to build and quote a personalised itinerary, to coordinate bookings on your behalf, to respond to enquiries, and to improve the planning tool itself. We do not use your trip preferences for anything other than planning your trip.

Under GDPR, we process this data on the basis of your consent (submitting the planner or contact form) and our legitimate interest in operating a planning service you've asked to use. Under KVKK, processing is based on explicit consent given at the point of submission.

Trip planning data is kept for as long as needed to plan and deliver your trip, plus a reasonable period afterward for record-keeping and any follow-up. [Placeholder — define an exact retention period, e.g. 24 months after your last enquiry, and add an automatic deletion process before launch.]

We share data with a small number of processors needed to run the service:

• An email delivery provider, to send your plan and quote to your concierge
• Our hosting provider, to run the website itself
• An analytics provider, for aggregated, non-identifying usage statistics

We do not sell personal data, and we do not share your trip details with the venues, guides, or partners we recommend until you've confirmed you want to book with them.

The site uses privacy-conscious analytics to understand aggregate traffic and where people drop off in the planning flow — never to identify you individually. [Placeholder — list the specific analytics tool(s) in use and link a cookie-preferences control once one exists.]

Under GDPR and KVKK, you can ask us to: confirm what data we hold about you; correct inaccurate data; delete your data; restrict or object to processing; and receive your data in a portable format. To exercise any of these, contact us at hello@bespokeistanbul.com. [Placeholder — confirm the correct KVKK data controller application process and timeline before launch.]

We'll update this page if how we handle data changes, and update the date at the top when we do.