Legal
Privacy Policy
Last updated: 24 June 2026
AllinAlanya — A clear, plain-language guide to how we protect your data.
1. Who we are
AllinAlanya is a marketplace offering delivery, excursions & activities, airport transfers and Tax-Free shopping to guests in and around Alanya through a single platform. The AllinAlanya brand is operated by BLUELAND GIDA İTRİYAT ELEKTRONİK TİCARET VE PAZARLAMA LİMİTED ŞİRKETİ.
This Privacy Policy explains in plain language how we collect, use and protect your personal data when you use www.allinalanya.com and our mobile app. For formal, detailed information please also see our KVKK Information Notice.
Data controller: BLUELAND GIDA İTRİYAT ELEKTRONİK TİCARET VE PAZARLAMA LİMİTED ŞİRKETİ — Hacet Mah. Eşref Kahvecioğlu Cad. 07400 Antalya — order@allinalanya.com
2. What data we collect
What we collect depends on the service you use:
| Data type | Contents | How collected |
|---|---|---|
| Identity | First name, last name | Order/booking form |
| Contact | Phone, email, hotel and room info | Order/booking form |
| Address / Location | Delivery address, mobile app location | Form + app |
| Order | Items, quantity, amount, history | Automatic |
| Technical | IP address, device/browser info, logs, cookies | Automatic |
| Flight (Transfer) | Flight no, arrival/departure time | Transfer booking |
| Passport (Tax-Free) | Passport no, nationality | Only for Tax-Free |
Important: We take payment in cash or via card terminal at the door. Because we do not take online payments, your card details are never collected, seen or stored by us.
3. Why we collect data
- To create and fulfil your order or booking
- To run and verify delivery and service processes
- To provide customer support and answer your questions
- To meet invoicing, accounting and tax obligations
- To prevent fraud and keep the platform secure
- With your consent, to send campaign and offer announcements
- With your consent, to run usage analytics and show relevant ads
4. Legal bases
We process your data under KVKK Art. 5 and GDPR Art. 6 on these bases:
- Performance of a contract: data needed to fulfil your order/booking.
- Legal obligation: records required by tax and accounting law.
- Legitimate interest: security, fraud prevention and service quality.
- Explicit consent: marketing messages and analytics/marketing cookies — entirely optional and withdrawable at any time.
5. Who we share data with
We do not sell your data. We share it only with parties needed to deliver the service, to the extent necessary:
- Courier / delivery team: your delivery address and phone (Delivery service).
- Excursion & transfer partners (agency/operator): your booking and contact details (Excursion & Transfer services).
- Email & SMS providers (Mailchimp, Klaviyo): your contact details — only with marketing consent.
- Analytics (Google Analytics 4): cookie-based usage data.
- Advertising (Meta Pixel, Google Ads, TikTok): cookie-based data — only with cookie/marketing consent.
- Accountant / financial advisor: invoice and order information.
- Competent public authorities: only where legally required.
6. International transfers
Some tools we use (Mailchimp, Klaviyo, Google, Meta, TikTok) have servers abroad (e.g. the US and EU). Some of your data may therefore be processed abroad. We carry out these transfers under KVKK Art. 9 and the relevant GDPR provisions, using appropriate safeguards (e.g. Standard Contractual Clauses — SCC) or your explicit consent. Marketing and cookie-based transfers are made only with your consent.
UK and EU guests: your rights under the GDPR are separately safeguarded in this policy (see Section 8).
7. How long we keep data
| Data type | Period | Reason |
|---|---|---|
| Order & invoice records | 10 years | Tax law (VUK / TTK) |
| Customer support records | 3 years | General limitation period |
| Site logs | 2 years | Law no. 5651 |
| Cookie data | Up to 13 months | KVKK Board practice |
| Marketing consent | Until withdrawn | Explicit consent |
8. Your rights
Under KVKK Art. 11 and GDPR Art. 15–22 you can:
- learn whether your data is processed and request information;
- ask for incorrect or incomplete data to be corrected;
- ask for erasure of your data;
- learn who your data was shared with;
- object to processing;
- receive your data in a portable format (data portability — GDPR);
- withdraw consent at any time for consent-based processing.
To use these rights, email order@allinalanya.com. We respond within 30 days at the latest.
9. Cookies
We use strictly necessary, analytics and marketing cookies. Necessary cookies are required for the site to work; analytics and marketing cookies activate only with your consent. You can change your preferences at any time. See our Cookie Policy for details.
10. How we protect your data
We take reasonable technical and administrative measures: SSL/TLS encryption in transit, access control and authorisation, keeping systems updated with regular audits, and data-protection awareness for staff. In the event of a breach, we make the notifications required by law to the authorities and affected individuals.
11. Children's data
AllinAlanya does not serve users under 18 and does not knowingly collect data from under-18s. Over-the-counter (OTC) health products are sold only to users aged 18+. If we detect data belonging to an under-18 user, we delete it immediately.
12. Third-party links
Our site may contain links to Google Maps, social media or our partners. These services have their own privacy policies; BLUELAND is not responsible for the practices of these third parties.
13. Updates
This Privacy Policy may be updated from time to time. For significant changes we will notify you via the site or email. The latest version is always at www.allinalanya.com.
14. Contact
Email: order@allinalanya.com
Address: Hacet Mah. Eşref Kahvecioğlu Cad. 07400 Antalya
Users located in Türkiye also have the right to complain to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu, www.kvkk.gov.tr).
