Privacy Policy
Last updated: October 2026
This Privacy Policy explains how Lenda Tour ("we", "us") collects, uses and protects personal data when you use our website lendatouronline.com ("the Website") and the Lenda Tour mobile application ("the App"). Lenda Tour is operated by Lenda Tour Turizm Seyahat Organizasyon İnşaat Ltd. Şti. (TÜRSAB licence no. 11527), Istanbul, Turkey, which acts as the data controller.
The Website is a business-to-business (B2B) booking system for travel agencies and tour operators. Agencies enter the details of their travellers in order to make reservations. If you are an agency, you are responsible for informing your travellers that their data will be shared with us for this purpose.
Part A – The Website
1. Information we collect
- Account information: when an agency registers, we collect the email address, password, name, surname, telephone number, address, city, state, country, zip code and agency name.
- Traveller information: to make a reservation we collect passenger names, gender, date of birth, nationality, room type, passport number and expiry date, telephone number and email address, as entered by the agency.
- Travel details: dates, selected tours, hotels and transfers, flight numbers and times, pickup locations, special requests and comments, and the agency's own reference number.
- Payment information: when you pay by credit card, the card details you enter are transmitted to our bank for 3D Secure verification and processing. [We do not store full card numbers or security codes on our systems. – PLEASE CONFIRM]
- Contact and request forms: when you use the Contact Us or Tailor Made Tour forms, we collect your title, name, surname, telephone number, email address and the details of your request.
- Technical information: our servers automatically record technical data such as IP address, browser type and the date and time of access, for security and troubleshooting purposes.
2. How we use your information
- To create and manage agency accounts and allow users to sign in.
- To make, confirm, change and cancel reservations with hotels, transport companies, guides and other service providers.
- To issue vouchers, itineraries, tour notes, invoices and other travel documents.
- To process payments and keep our accounting records.
- To send booking, payment, confirmation and cancellation emails.
- To answer questions and requests sent through our contact forms.
- To protect the Website against spam, fraud and misuse.
- To meet our legal obligations, including tourism, tax and accounting regulations in Turkey.
3. Legal basis
We process personal data because it is necessary to perform a contract (your reservation), to comply with legal obligations, and for our legitimate interests in running a secure booking service. Where required, we ask for your consent, for example for optional cookies.
4. Cookies
The Website only uses cookies that are necessary when you sign in or make a reservation, for example to keep you signed in and to remember your choice when you tick "Remember me". We also remember whether you have accepted our cookie notice. We do not use advertising or tracking cookies.
5. Third-party services
- Google reCAPTCHA is used on our registration and contact forms to protect against spam and abuse. It may collect information about your device and how you use the form. Google's Privacy Policy and Terms of Service apply.
- Google Fonts is used to display the Website's typeface. When a page loads, your browser connects to Google's servers, which receive your IP address.
- Our bank processes card payments and 3D Secure verification.
- Email service provider: booking emails are sent through [EMAIL PROVIDER, e.g. Microsoft 365].
6. Data sharing
We share personal data only as needed to provide your travel services: with hotels, transport and transfer companies, guides, airlines and other suppliers involved in your trip; with the travel agency that made the booking; with our bank and payment providers; and with public authorities when required by law. We do not sell personal data or share it for advertising or marketing purposes.
7. International transfers
Our systems are located in [COUNTRY OF SERVERS]. Because many of our customers and travellers are in the European Union, Brazil and other countries, personal data may be transferred between these countries and Turkey. We take reasonable measures to protect your data during such transfers, as required by applicable law.
8. Data retention
We keep reservation, invoice and payment records for [RETENTION PERIOD, e.g. 10 years] to comply with Turkish tax and commercial law. Passport details are kept for [PERIOD] after the end of the trip. Agency accounts are kept while the account is active. Contact form messages are kept for [PERIOD].
9. Security
We use encrypted connections (HTTPS), password protection and access controls to protect personal data. Passwords are stored in hashed form. No system is completely secure, but we work to protect your information against loss, misuse and unauthorised access.
10. Your rights
Depending on where you live, you have rights under the Turkish Personal Data Protection Law (KVKK), the EU General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (LGPD). These include the right to know whether we process your data, to access it, to have it corrected or deleted, to object to or restrict its processing, and to receive a copy of it. You may also complain to your local data protection authority, such as the Turkish Personal Data Protection Authority (KVKK), your EU supervisory authority or Brazil's ANPD. To exercise your rights, please contact us using the details below.
Part B – The Mobile App
The App lets travellers view their travel documents by entering a booking reference (PNR) number.
- Information we process: the PNR number you enter, the reservation information linked to it (passenger names, hotel, tour, transfer and travel document details) and your device language setting, used only to show the App in English, Spanish or Portuguese.
- Local storage: the App saves your last-used PNR number on your device for convenience. It is only sent to us when you look up your reservation. You can remove it by uninstalling the App.
- WhatsApp: you can optionally contact our support team or your guide via WhatsApp. The App opens WhatsApp with a pre-filled message and you decide whether to send it. WhatsApp's own privacy policy applies.
- We do not sell App data or share it for advertising or marketing purposes.
Children
The Website and the App are not directed at children. Children's data is only processed as part of a family reservation made by an adult or a travel agency.
Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Last updated" date.
Contact us
Lenda Tour Turizm Seyahat Organizasyon İnşaat Ltd. Şti.
Erenköy Mah. Dr Mithat Süer Sok A Blok No1/D20, Kadıköy, Istanbul, Turkey
Phone: +90 216 408 18 08
Email: info@lendatour.com