Istanbul PRIME Pass is operated by Cityberry Tourism (TURSAB licence 11745). This Privacy Policy explains what personal data we collect when you visit this website or purchase a pass, how we use it, and the choices you have.
1. What we collect
- Order data: name, email, billing country, pass type, traveller count, selected start date.
- Payment data: processed by Stripe; we never store full card numbers.
- Technical data: IP, browser, device, anonymised usage analytics via Google Analytics 4 (only if you accept cookies).
- Communication: messages you send to our support channels.
2. Why we collect it
- To deliver your pass and provide customer support (contract).
- To comply with tax and tourism-licence obligations (legal obligation).
- To improve our service and tailor marketing (consent).
3. Sharing
We share order data with our infrastructure providers — Stripe (payments), Bookberry (booking platform), Cloudflare (hosting), Google (analytics), and selected attraction partners required to honour your pass. We never sell personal data to advertisers.
4. International transfers
Your data may be processed in the EU, the UK, and the United States under Standard Contractual Clauses or equivalent safeguards.
5. Your rights
You may request access, correction, or deletion of your data at any time, withdraw consent for marketing, and lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local supervisory authority. Contact privacy@istanbulprimepass.com.
6. Retention
Order records are kept for 10 years to satisfy fiscal requirements. Analytics data is anonymised after 26 months.
7. Cookies
For details on cookies, see our Cookie Policy.
8. Changes
We may update this policy. Material changes will be announced on this page with a revised "last updated" date.