Privacy Notice

Last updated: 30 September 2026

Who is responsible for your data

Hakan Kavalci, trading as Voyagedesk Holidays, is the data controller for personal data collected through this website. This means we decide how and why your data is used.

What we collect and why

• Booking and traveller details — names, dates of birth, email, phone, hotel and flight details, special requests. Used to make and deliver your booking (contract).
• Account and login details — for agencies, partners and staff. Used to provide access to the service (contract).
• Messages to us — contact forms and support requests. Used to answer you (legitimate interests).
• Technical data — IP address, device and browser information, language choice and usage data. Used to run, secure and improve the website and prevent fraud (legitimate interests).
• Marketing preferences — only if you opt in (consent, which you may withdraw at any time).

We also keep booking and payment records where the law requires it (legal obligation). Card details are collected by our payment provider, not by us.

Who we share it with

• Hotels, airlines, transfer and excursion suppliers, and guides who deliver your booked services.
• Service providers that host and run our website and database.
• Paddle, our Merchant of Record, for the sale of our services, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities, where the law requires it.

International transfers

Your travel requires sharing data with suppliers at your destination, and our providers may process data outside your country. Where required we use safeguards such as standard contractual clauses.

How long we keep it

We keep booking data for as long as needed to deliver your trip and meet accounting and legal duties (usually up to 10 years), then delete or anonymise it.

Your rights

You can ask to access, correct, delete, restrict or transfer your data, object to how we use it, and withdraw consent. We reply within one month. You may also complain to your local data protection authority (in Türkiye, KVKK; in the EU/UK, your national supervisory authority).

Security

We use appropriate technical and organisational measures, including encrypted connections and restricted access controls.

Cookies and local storage

We use only essential storage in your browser — for example to remember your language and keep you signed in. We do not use advertising cookies.

Questions? Contact us.