Privacy Policy

This policy covers the ClickToGoo website, your ClickToGoo account, the bookings you make with us and your contact with our support team. It applies whether you book yourself or someone books for you, such as a travel agency, a hotel or your employer.

The payment page of our payment provider, the Google and Apple sign-in pages and the websites we link to are run under their own privacy policies.

Booking data: the lead passenger's name, e-mail address and phone number; the names of the other passengers and the ages of children, if you give them; the pickup and drop-off points, the airport and flight number, the date and time; the number of passengers and bags; the seats and extras you add; the name for the pickup sign and your note for the driver.

Account data, if you open an account: your e-mail address, a securely hashed password and the contact details you save. If you sign in with Google or Apple where we offer it, we receive your name and e-mail address from that service.

Payment data: card payments are made on the secure page of our payment provider, Stripe. We receive the result of the payment and its reference, never your full card number. For a booking paid in cash in the vehicle we record only that you chose cash.

Support data: the requests you send us through the contact form or by e-mail, the messages you send to our WhatsApp number, and our replies.

Technical data: your IP address, browser and device details and the server logs we need to run the site securely, for example to slow down repeated attempts and to stop fraud and automated abuse. Cookies are described in our Cookie Policy.

Referral data: if you reach us through a travel agency's page on our site, we record which agency sent you so that the booking is credited to it.

To take and carry out your booking — pricing it, taking payment, passing the trip details to the transfer firm, sending you the confirmation and the driver's details, and handling changes, cancellations and refunds — and to run your account, because this is necessary to enter into and perform our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5/2-c).

To keep the service secure, prevent fraud and abuse, and improve how it works, on the basis of our legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5/2-f), and to deal with complaints and legal claims, where this is necessary to establish, exercise or defend a right (KVKK Art. 5/2-e).

To meet legal, accounting and tax obligations, on the basis of compliance with a legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5/2-ç).

We do not sell your personal data and we do not use it for advertising.

The transfer firm that carries out your trip receives what it needs for that trip: the booking reference, the passengers' names, the pickup and drop-off points and times, the flight number, the number of passengers and bags, the child and booster seats, the name for the pickup sign and your note for the driver. It does not receive your phone number or e-mail address, and anything the driver needs to tell you reaches you through ClickToGoo.

If you book through a travel agency's page on our site, or a travel agency, a hotel or a company books for you through its ClickToGoo business account, that business can see the booking, including the passengers' names, contact details, flight and notes.

Service providers who act on our instructions and may use the data only to provide their service to us: payment (Stripe), maps and address search (Mapbox), e-mail delivery, WhatsApp and SMS messages (Twilio), site delivery and protection against automated abuse (Cloudflare), and hosting.

Courts and public authorities, when the law requires us to disclose data.

Some providers, for example payment and maps, process data outside Türkiye and the EU/EEA. Such transfers are made under the safeguards required by KVKK Art. 9 as amended in 2024 — an adequacy decision, appropriate safeguards such as standard contractual clauses, or a permitted exception — and GDPR Chapter V.

Where a transfer relies on a specific safeguard, you may request information about it using the contact details above.

The site is served only over an encrypted connection. You enter card details on our payment provider's page, so they never reach our servers.

Only staff who need booking data for their work can see it, and passwords are stored only as secure one-way hashes. The passenger and the driver never receive each other's phone numbers or e-mail addresses.

Keep your password to yourself and share your booking reference only with people you trust: with the reference and your e-mail address, anyone can open your booking.

We keep booking and account data for as long as we need it to provide the service and to answer questions or claims about it, and then for the periods set by tax, accounting and other laws. After that it is deleted or anonymised. Specific retention periods: [•].

Under the GDPR you may request access, rectification, erasure, restriction and portability, and object to certain processing. Under KVKK Art. 11 you may learn whether your data is processed, request information, correction or deletion, learn the third parties to whom it is transferred, object to decisions based solely on automated processing, and claim compensation for damage.

You can delete your account yourself from your account page once you have no upcoming bookings. The deletion takes effect after a grace period during which you can still undo it; your past bookings are then kept without your name, contact details and notes.

We answer requests free of charge and within the time the law allows — at the latest 30 days under KVKK and one month under the GDPR — unless the law permits a fee. We may first ask you to show that the request comes from you.

To exercise these rights contact support@clicktogoo.com. You also have the right to complain to a supervisory authority — in Türkiye the Personal Data Protection Authority (KVKK), or your local EU/EEA authority.

Bookings are made by adults. When you book for a child, you give us the child's details as the adult responsible for them, and we use them only for that transfer.

We update this policy when our service or the law changes. The version in force when you book is recorded with your booking.