Back to Home

Privacy Policy & Data Protection

Last Updated: August 27, 2026

At Istanbul Luxury Car Rental (a company of Hanzo Global Pte. Ltd.), protecting your personal data, privacy, and confidentiality is our highest priority. This policy outlines how we collect, process, store, and safeguard your personal information in compliance with the Turkish Law on Personal Data Protection No. 6698 (KVKK), the EU General Data Protection Regulation (GDPR), and international travel industry privacy standards.

1. Data Controller & Organizational Identity

Istanbul Luxury Car Rental operates as a premier luxury ground transport brand of Hanzo Global Pte. Ltd. (Hanzo Global Luxury Travel Group) in coordination with Hanzo Tour (TÜRSAB Travel Agency License A-8738) and official Ministry of Transport D2/A1/B2 license holders. For all reservation, passenger dispatch, flight tracking, and customer service inquiries, Istanbul Luxury Car Rental acts as the Data Controller responsible for processing your personal data.

2. Information We Collect

To deliver seamless, VIP airport transfers, chauffeur-driven rentals, and corporate travel arrangements, we collect the following categories of data:

• Personal Identifiers: Full name, phone number, email address, nationality, and official identity/passport details where mandated by Turkish Ministry of Transport passenger manifest regulations (U-ETDS).

• Flight & Itinerary Details: Flight arrival/departure numbers at Istanbul Airport (IST) or Sabiha Gökçen Airport (SAW), pickup times, destination addresses, hotel arrangements, and special passenger requirements (e.g., child seats, VIP meet & greet greeter setup, luggage assistance).

• Corporate & Travel Advisor Credentials: Company details, TAX/VAT numbers, billing addresses, and agency identification numbers (CCRA TRUE Code, CLIA ID).

• Communication Logs: Messages sent via our website booking forms, direct email correspondence, and WhatsApp reservation communications.

3. Legal Basis & Purposes of Data Processing

Your personal data is processed strictly under lawful, specified, and legitimate business purposes:

• Contract Fulfillment: Managing your reservation, dispatching suit-clad chauffeurs, setting up terminal greeters, and conducting real-time flight tracking to adjust pickup times for flight delays.

• Legal Compliance: Transmitting mandatory passenger manifests to the Ministry of Transport U-ETDS portal as mandated by Turkish Highway Transportation Regulation No. 27095, issuing tax invoices, and fulfilling legal accounting audits.

• Customer Support & Security: Maintaining 24/7 client support, confirming reservation updates via WhatsApp/email, ensuring vehicle safety, and handling emergency contacts.

4. Third-Party Data Disclosures & Security Portals

Your personal information is handled with strict confidentiality. We do not sell, rent, trade, or monetize your data under any circumstances. Data is only shared with authorized entities in the following limited cases:

• Statutory Authorities: Sharing mandatory passenger manifests with official law enforcement and the Ministry of Transport U-ETDS portal as required by law.

• Service Providers: Secure payment gateway providers and flight tracking API systems strictly for real-time transfer execution.

5. Data Security & Storage Standards

We enforce stringent technical and organizational measures to safeguard your personal data against unauthorized access, loss, alteration, or disclosure. All web traffic and communication channels are encrypted with SSL/TLS 256-bit encryption. Physical and digital server access is restricted to authorized personnel operating under non-disclosure obligations.

6. Data Retention & Anonymization

Personal data is retained only for the period necessary to fulfill your transfer contract and satisfy mandatory legal retention periods (such as 5 to 10 years for official financial tax records). Upon expiration of the retention requirement, your data is securely deleted, destroyed, or anonymized in accordance with KVKK and GDPR guidelines.

7. Your Rights Under KVKK & GDPR

As a data subject, you retain full rights regarding your personal data:

• Right to Information: Request confirmation as to whether your personal data is being processed.

• Right of Access & Correction: Access your personal records and request correction of incomplete or inaccurate data.

• Right to Erasure: Request the deletion or destruction of your personal data when legal retention obligations expire.

• Right to Object & Restrict: Object to automated processing or request restrictions on data handling.

To exercise any of your statutory rights, please submit a formal request to info@istanbulluxurycarrental.com. We respond to all verified data requests within 30 days.