Privacy Policy

Last updated: February 2026

1. Who We Are

LycianWay Walking Tours ("we", "us", "our") operates the website lycianway.co.uk and provides guided walking tour services along the Lycian Way in Turkey. We are committed to protecting your personal data and respecting your privacy.

2. What Data We Collect

We collect the following personal data when you interact with our services:

• Booking data: Full name, email address, phone number, number of guests, preferred dates, and special requests
• Account data: Email address and encrypted password (if you create an account)
• Payment data: Processed securely by Stripe. We do not store your card details
• Communication data: Messages sent via our contact form or email
• Technical data: Browser type, IP address, and pages visited (if analytics cookies are accepted)

3. How We Use Your Data

• To process and manage your booking
• To send booking confirmations and trip-related communications
• To respond to enquiries and support requests
• To improve our website and services (with consent)
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

• Contract: Processing necessary to fulfil your booking
• Legitimate interest: Responding to enquiries, improving our services
• Consent: Analytics cookies and marketing communications (where applicable)
• Legal obligation: Tax and accounting requirements

5. Data Sharing

We share your data only with:

• Stripe: Payment processing
• Resend: Transactional email delivery
• Cloudflare: Website hosting and security

We do not sell your personal data to third parties.

6. Cookies

We use the following types of cookies:

• Essential cookies: Required for the website to function (e.g., session tokens, cookie consent preference). These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our site. Only loaded with your consent.

You can change your cookie preferences at any time by clearing your browser's local storage.

7. Data Retention

• Booking data: retained for 6 years (UK tax requirements)
• Account data: retained until you request deletion
• Enquiry data: retained for 2 years
• Analytics data: anonymised after 14 months

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, email us at info@lycianway.co.uk.

9. Data Security

We protect your data using industry-standard measures including HTTPS encryption, hashed passwords (PBKDF2-SHA256), and secure cloud infrastructure via Cloudflare.

10. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top will reflect the most recent revision.

11. Contact

For privacy-related queries, contact us at: info@lycianway.co.uk