Privacy policy

Turkey Direct is operated by QLG Media Ltd("we", "us"), a company registered in England & Wales. This policy explains what personal data we collect, why, and what your rights are under the UK GDPR.

What we collect

Guests: name, email, phone, country, enquiry + booking messages, billing address (captured by Stripe at checkout), IP address and browser data.
Owners:name, email, phone, address, date of birth (via Stripe Identity), business details, bank account (via Stripe, never seen by us), photos & descriptions you upload.

Why we collect it

To send your enquiry to the villa owner and their reply to you.
To confirm bookings, send receipts and process refunds.
To verify owner identity (fraud prevention; Stripe Identity).
To keep the site working (sessions, security, logs).
With your consent only: product updates, new-villa alerts, saved search notifications.

Who we share it with

The villa owner — their whole purpose for being on the platform is to receive your enquiry. Commission-plan owners see only your name until you pay a deposit; full contact unlocks on payment.
Stripe — all payment processing, Stripe Identity verification. Stripe is PCI-DSS compliant; we never see your card.
Mailgun — transactional email (enquiry notifications, booking confirmations, receipts).
Vercel + Cloudflare — hosting, CDN, DDoS protection.
Google / Microsoft — analytics and anti-spam, with your cookie consent.

We do not sell your personal data to anyone, ever.

How long we keep it

Enquiries: 2 years, then anonymised.
Bookings + payment records: 7 years (UK tax requirement).
Marketing contacts: until you unsubscribe.
Web analytics: 26 months maximum.

Your rights

Under UK GDPR you have the right to:

Access the data we hold about you
Correct inaccurate data
Delete your data (right to be forgotten)
Restrict or object to processing
Data portability
Complain to the UK Information Commissioner's Office

To exercise any of these, email [email protected]. We'll respond within 30 days.

Cookies

See our separate Cookie policy for what we set and why, and how to turn it off.

Changes to this policy