Privacy Policy

✔ Seferturk Tourism – Privacy Policy

Last Updated: 20 November 2025

Seferturk Tourism Travel (Seferturk Pvt. Ltd.) is committed to protecting the privacy of users visiting seferturk.com and using our travel, tourism, and consultancy services.
This Privacy Policy explains how we collect, use, store, protect, and disclose your personal data in accordance with:

  • Pakistan Personal Data Protection Act (PDPA – Draft/2023)
  • General Data Protection Regulation (GDPR)
  • Turkish Personal Data Protection Law (KVKK)
  • Verifone Company Payments compliance requirements

By using our website, you agree to the terms described below.


1. Personal Data We Collect

1.1. Information You Provide

We may collect and process the following information:

  • Full name
  • Email address
  • Phone number
  • Passport details (required for travel bookings)
  • Country of residence
  • Billing address
  • Contact messages or inquiry form details
  • Booking-related documents

1.2. Automatically Collected Data

  • IP address
  • Device information
  • Browser information
  • Geolocation (approximate)
  • Cookies and tracking data
  • Log and analytical data

1.3. Payment Information

  • Credit/debit card details are never stored or processed by Seferturk Tourism.
  • All payment data is processed securely by 2Checkout (Verifone) under PCI-DSS Level 1 standards.

2. Purpose of Data Collection and Use

Your personal data is used for the following purposes:

  • Processing tour, hotel, flight, and transfer bookings
  • Facilitating visa consultancy services
  • Completing secure payment transactions
  • Managing customer accounts
  • Providing customer support
  • Confirming and updating reservations
  • Fraud and risk detection
  • Fulfilling legal and regulatory requirements
  • Sending marketing offers (with your explicit consent)
  • Improving website performance and analytics

Under PDPA, data processing is based on:
Consent
Contractual necessity
Legitimate interest
Legal obligation


3. Data Sharing and Disclosure

We may share personal data with:

3.1. Service Providers

  • 2Checkout (Verifone Payments) – payment processing
  • Paximum / XML Suppliers – hotel and travel bookings
  • Hotels, airlines, and transport companies
  • Local tour operators and guides
  • Visa processing centers

3.2. Legal Authorities

Data may be shared with government agencies if required by law.

3.3. International Data Transfer

Since our customers are globally located (Pakistan, Turkey, GCC, Europe), we may transfer your personal data to:

  • Pakistan
  • Turkey
  • EU countries
  • Countries where our suppliers operate

International transfers comply with PDPA Section 15, GDPR Chapter V, and KVKK international transfer rules.


4. Data Retention

We retain personal data only for as long as necessary:

Data Type

Retention Period

Booking & invoicing data

10 years

Passport & travel documents

Until service completion + 1 year

Marketing data

Until consent is withdrawn

Log data

2 years

Once retention periods expire, data is securely deleted or anonymized.


5. Cookies and Tracking Technologies

We use the following cookies:

  • Essential Cookies: Login, session, security
  • Performance Cookies: Site functionality
  • Analytics Cookies: Google Analytics, server logs
  • Marketing Cookies: Facebook Pixel, Google Ads (if enabled)

Users can disable cookies anytime via browser settings.


6. Data Subject Rights (Under PDPA, GDPR, KVKK)

You have the following rights:

  • Right to access your data
  • Right to correct inaccurate data
  • Right to request data deletion
  • Right to restrict processing
  • Right to data portability
  • Right to withdraw consent
  • Right to object to marketing
  • Right to lodge a complaint with relevant authorities

Requests may be submitted to: info@seferturk.com

We respond within 30 days as required under PDPA.


7. Data Security Measures

We implement advanced security measures, including:

  • SSL/TLS encryption
  • Firewalls and WAF protection
  • Encrypted server infrastructure
  • Role-based access control
  • Regular security audits
  • PCI-DSS compliant payment handling through 2Checkout

We take all reasonable steps to prevent unauthorized access, misuse, loss, or alteration of your data.


8. Children’s Data Protection

Seferturk Tourism does not knowingly collect data from individuals under 18 years unless accompanied by parental consent for travel bookings.


9. Changes to This Policy

We may update this Privacy Policy as needed.
Any changes will be posted on this page with a new “Last Updated” date.


10. Contact Information

Seferturk Pvt. Ltd.
Islamabad / Pakistan
Email: info@seferturk.com
Phone: +92 051 237 53 01
Website: www.seferturk.com