Privacy Policy

Who we are

This website is operated by SGR Seyahat Acentası Turizm Ticaret Limited Şirketi, trading as Uçhisar Taxi, a licensed Turkish travel agency and member of TÜRSAB (işletme belge no 13924). We provide private airport transfers and related transport in Cappadocia.

For the purposes of Turkish data-protection law (KVKK, Law No. 6698) we are the veri sorumlusu (data controller); for the purposes of the EU General Data Protection Regulation (GDPR) we are the controller of your personal data.

Registered address: Tekelli, Karlık Sk. No:12, 50240 Uçhisar / Nevşehir, Türkiye. Phone / WhatsApp: +90 537 609 53 81. Email: [email protected]. Website: https://www.uchisartaxi.tr. MERSİS: 0769216528900001; Vergi Dairesi Nevşehir, Vergi No 7692165289.

No online payment — no card data

We do not take any payment online. This website only creates a booking request. Our driver then confirms your transfer by WhatsApp, and you pay the driver in person on arrival, in cash or by card, in Turkish lira (TRY).

Because of this, no card numbers, CVV codes, or other payment-card details are ever collected, processed, or stored by this website. There is no deposit and no prepayment.

What data we collect

• Booking details: your name, the pickup and drop-off locations, date and time, number of passengers, vehicle class, and — for airport pickups — your flight number.
• Contact details: your mobile or WhatsApp number and, if you provide it, your email address, so the driver can confirm and reach you.
• Any notes you choose to add: for example a request for a child seat, extra luggage, or a special stop. Please do not enter sensitive information (such as health or religious data) in free-text fields.
• Technical and cookie data: basic information your browser sends (such as IP address and device/browser type) and, only after you consent, analytics and advertising identifiers. See our Cookie Policy for details.

Why we use your data

• To receive and handle your booking request, arrange the driver, and carry out the transfer you asked for.
• To contact you about your booking — confirmation, pickup updates, and any changes — mainly over WhatsApp.
• To keep the legally required accounting, tax, and travel-agency records.
• To keep the website secure, prevent fraud and misuse, and improve our service.
• To send you marketing messages only if you have separately and expressly agreed — never as a condition of booking, and you can opt out at any time.
• To display maps and measure our advertising, only after you give cookie consent.

Our legal bases

In short, we rely on: performance of your requested transfer contract (GDPR Art. 6(1)(b) / KVKK m.5/2-c) for your booking and communications; our legal obligations (GDPR Art. 6(1)(c) / KVKK m.5/2-ç) for tax, accounting, and mandatory carrier reporting; our legitimate interests (GDPR Art. 6(1)(f) / KVKK m.5/2-f) for security, fraud prevention, and internal driver dispatch; and your consent (GDPR Art. 6(1)(a) / KVKK açık rıza) for non-essential cookies and for any marketing.

The full, purpose-by-purpose breakdown is set out in our formal Data Protection Notice (KVKK Aydınlatma Metni & GDPR Notice), linked below.

Who we share your data with

We share your data only with the people and service providers who need it to deliver your transfer. We never sell your personal data.

• The driver assigned to your transfer, so they can confirm, reach you, and complete the trip.
• Supabase — our secure database provider (EU region), which stores your booking.
• Vercel — our website hosting provider.
• WhatsApp / Meta — used to message you your booking confirmation and pickup updates.
• Google — Maps (to show routes) and advertising measurement, loaded only after you give cookie consent.
• ntfy — a push-notification service used internally to alert us to a new booking request.
• Public authorities where the law requires it, including the Turkish U-ETDS passenger-manifest system and tax authorities.

Transfers outside your country

Some of these providers process data outside Türkiye and outside the EU/EEA — for example Google and Meta/WhatsApp are US companies, and your transfer is carried out by our team in Türkiye. Türkiye does not have an EU adequacy decision.

Where data is transferred abroad, we rely on appropriate safeguards: the EU–US Data Privacy Framework and/or Standard Contractual Clauses under Art. 46 GDPR, and — on the Turkish side — the Kurul Standart Sözleşmesi or other appropriate safeguards under KVKK m.9, or the transfer being necessary to perform the service you requested. You can ask us for more information on these safeguards.

How long we keep your data

We keep your data only as long as needed. In brief: booking data is kept for about three years after the transfer (to cover the legal limitation period); accounting and invoice records are kept for ten years as required by Turkish law; un-actioned enquiries are deleted within about six to twelve months; and messaging threads are deleted or anonymised within about twelve months unless a dispute is live. Cookie and analytics identifiers last no longer than about fourteen months.

The full retention schedule is in our Data Protection Notice.

Your rights and how to use them

You have the right to access your data, to have it corrected or erased, to restrict or object to certain processing, to data portability, and to withdraw any consent at any time (without affecting processing already carried out). These rights come from KVKK m.11 and GDPR Arts. 15–22 and 7(3).

• To exercise any right, email [email protected]. We will respond within 30 days (KVKK) / one month (GDPR Art. 12(3)).
• If you are unhappy, you can complain to a supervisory authority: in Türkiye the Kişisel Verileri Koruma Kurumu (kvkk.gov.tr); in the EU/EEA your local Data Protection Authority (for German residents, the competent Landesdatenschutzbehörde or the BfDI).

More detail and related policies

This page is the plain-language summary. For the full legal detail — including the complete purpose, legal-basis, recipient, and retention tables — please read our formal Data Protection Notice (KVKK Aydınlatma Metni & GDPR Privacy Notice). For information on cookies and trackers, and to change your choices, see our Cookie Policy.

If you book a bundled package (for example a transfer combined with a tour and/or an overnight stay) it is a paket tur, and additional package-travel rules and a separate agreement apply.

If we change this policy, we will update the date shown above and, where the change is significant, tell you.