AllinAlanya — A clear, plain-language guide to how we protect your data.
1. Who we are
AllinAlanya is a marketplace offering delivery, excursions & activities, airport transfers and Tax-Free shopping to guests in and around Alanya through a single platform. The AllinAlanya brand is operated by BLUELAND GIDA İTRİYAT ELEKTRONİK TİCARET VE PAZARLAMA LİMİTED ŞİRKETİ.
This Privacy Policy explains in plain language how we collect, use and protect your personal data when you use www.allinalanya.com and our mobile app. For formal, detailed information please also see our KVKK Information Notice.
Data controller: BLUELAND GIDA İTRİYAT ELEKTRONİK TİCARET VE PAZARLAMA LİMİTED ŞİRKETİ — Hacet Mah. Eşref Kahvecioğlu Cad. 07400 Antalya — order@allinalanya.com
2. What data we collect
What we collect depends on the service you use:
| Data type | Contents |
|---|
| Identity | First name, last name |
| Contact | Phone, email, hotel and room info |
| Address / Location | Delivery address, mobile app location |
| Order | Items, quantity, amount, history |
| Technical | IP address, device/browser info, logs, cookies |
| Flight (Transfer) | Flight no, arrival/departure time |
| Passport (Tax-Free) | Passport no, nationality |
Important: We take payment in cash or via card terminal at the door. Because we do not take online payments, your card details are never collected, seen or stored by us.
3. Why we collect data
- To create and fulfil your order or booking
- To run and verify delivery and service processes
- To provide customer support and answer your questions
- To meet invoicing, accounting and tax obligations
- To prevent fraud and keep the platform secure
- With your consent, to send campaign and offer announcements
- With your consent, to run usage analytics and show relevant ads
4. Legal bases
We process your data under KVKK Art. 5 and GDPR Art. 6 on these bases: performance of a contract (data needed to fulfil your order/booking); legal obligation (records required by tax and accounting law); legitimate interest (security, fraud prevention, service quality); and explicit consent (marketing messages and analytics/marketing cookies — entirely optional and withdrawable at any time).
5. Who we share data with
We do not sell your data. We share it only with parties needed to deliver the service, to the extent necessary: courier/delivery team; excursion & transfer partners (agency/operator); email & SMS providers (Mailchimp, Klaviyo) — only with marketing consent; analytics (Google Analytics 4); advertising (Meta Pixel, Google Ads, TikTok) — only with cookie/marketing consent; accountant; and competent public authorities where legally required.
6. International transfers
Some tools we use (Mailchimp, Klaviyo, Google, Meta, TikTok) have servers abroad (e.g. the US and EU). Some of your data may therefore be processed abroad. We carry out these transfers under KVKK Art. 9 and the relevant GDPR provisions, using appropriate safeguards (e.g. Standard Contractual Clauses — SCC) or your explicit consent. UK and EU guests: your GDPR rights are separately safeguarded in Section 8.
7. How long we keep data
| Data type | Period | Reason |
|---|
| Order & invoice records | 10 years | Tax law (VUK / TTK) |
| Customer support records | 3 years | General limitation period |
| Site logs | 2 years | Law no. 5651 |
| Cookie data | Up to 13 months | KVKK Board practice |
| Marketing consent | Until withdrawn | Explicit consent |
8. Your rights
Under KVKK Art. 11 and GDPR Art. 15–22 you can: learn whether your data is processed and request information; ask for incorrect/incomplete data to be corrected; ask for erasure; learn who data was shared with; object to processing; receive your data in a portable format (data portability — GDPR); and withdraw consent at any time for consent-based processing. To use these rights, email order@allinalanya.com. We respond within 30 days at the latest.
9. Cookies
We use strictly necessary, analytics and marketing cookies. Necessary cookies are required for the site to work; analytics and marketing cookies activate only with your consent. See our Cookie Policy for details.
10. How we protect your data
We take reasonable technical and administrative measures: SSL/TLS encryption in transit, access control and authorisation, keeping systems updated with regular audits, and data-protection awareness for staff. In the event of a breach, we make the notifications required by law to the authorities and affected individuals.
11. Children's data
AllinAlanya does not serve users under 18 and does not knowingly collect data from under-18s. Over-the-counter (OTC) health products are sold only to users aged 18+. If we detect data belonging to an under-18 user, we delete it immediately.
12. Contact
Email: order@allinalanya.com — Address: Hacet Mah. Eşref Kahvecioğlu Cad. 07400 Antalya. Users located in Türkiye also have the right to complain to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu, www.kvkk.gov.tr).
In case of any discrepancy, the Turkish version of this policy prevails. Operated by BLUELAND GIDA İTRİYAT ELEKTRONİK TİCARET VE PAZARLAMA LİMİTED ŞİRKETİ.
