Privacy Policy
Last updated: April 2026 · Effective from: 1 January 2026
Overview
Marmaris Holiday Deals ("we", "us", "our") operates marmarisholidaydeals.com. We are a travel comparison and information platform — we do not process payments or bookings directly. This policy explains what data we collect, why, and how you can control it.
Data Controller
Marmaris Holiday Deals Marmaris, Muğla, Turkey
Contact
info@marmarisholidaydeals.com
Jurisdiction
UK PECR · EU GDPR Turkish KVKK
Data We Collect
Data you provide directly
- Name, email address, phone number — when submitting enquiry or booking forms
- Travel preferences (destination, dates, group size) — for quote requests
- WeChat ID or WhatsApp number — if you choose to contact us via these channels
- Business details — if you apply to become a partner or list your business
Data collected automatically
- IP address (anonymised after collection)
- Browser type, operating system, device type
- Pages visited, time on page, scroll depth
- Referral source (e.g. Google, Facebook, direct)
- Approximate location (country/city level — not precise GPS)
- Search queries entered on our site
Data we do NOT collect
- Payment card details or bank information
- Passport or ID document data
- Precise GPS location
- Sensitive personal data (health, religion, ethnicity)
Third-Party Tools & Data Processors
We use the following third-party services. Each acts as a data processor under our instructions, or as an independent data controller where noted.
Google Analytics 4
AnalyticsWebsite traffic analysis and user behaviour reporting
Data shared
Anonymised usage data, device info, approximate location (city level)
Retention
2 years (configurable)
Legal basis
Consent (Art. 6(1)(a) GDPR)
Google Tag Manager
InfrastructureManages and deploys marketing and analytics tags without code changes
Data shared
No personal data collected directly; manages other tags
Retention
N/A
Legal basis
Legitimate interest (tag management infrastructure)
Microsoft Clarity
AnalyticsHeatmaps and session recordings to improve UX (anonymised)
Data shared
Anonymised click/scroll data, session replays (PII masked)
Retention
13 months
Legal basis
Consent (Art. 6(1)(a) GDPR)
KAYAK (Affiliate)
AffiliateFlight and hotel price comparison; affiliate commission tracking
Data shared
Click ID, referral source, search parameters
Retention
30 days
Legal basis
Legitimate interest (affiliate tracking)
Supabase
InfrastructureBackend database for reservations, partner applications and lead forms
Data shared
Form submission data (name, email, phone, enquiry details)
Retention
Until deletion requested or 3 years from last activity
Legal basis
Contract performance (Art. 6(1)(b) GDPR) / Consent
Meta Pixel (Facebook)
MarketingRetargeting ads and conversion tracking on Facebook/Instagram
Data shared
Hashed email (if provided), page views, events
Retention
3 months
Legal basis
Consent (Art. 6(1)(a) GDPR)
WhatsApp Business
CommunicationCustomer support and enquiry handling via WhatsApp
Data shared
Phone number, message content (when you initiate contact)
Retention
Per WhatsApp's own retention policy
Legal basis
Consent (you initiate contact)
Your Rights Under GDPR & UK PECR
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing
Ask us to limit how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent
Withdraw cookie consent at any time via Cookie Settings — without affecting prior processing.
Right to Complain
Lodge a complaint with the ICO (UK) or your local supervisory authority.
Data Retention Periods
International Data Transfers
Some of our third-party processors (e.g. Google, Microsoft, Meta) transfer data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place:
- UK Adequacy Regulations or EU Standard Contractual Clauses (SCCs)
- Binding Corporate Rules (BCRs) where applicable
- Transfers to countries with an adequacy decision from the UK ICO or EU Commission
Our primary server infrastructure is hosted in the EU (Supabase — Frankfurt, Germany). Analytics data processed by Google may be stored in the US under Google's SCCs.
Contact & Data Protection
Privacy Enquiries
For any privacy-related requests, data subject rights, or general questions about this policy:
info@marmarisholidaydeals.comResponse within 30 days (GDPR requirement)
Supervisory Authority
UK residents may lodge a complaint with the Information Commissioner's Office (ICO):
ico.org.uk/make-a-complaintICO helpline: 0303 123 1113
Manage Your Cookie Preferences
You can change or withdraw your consent at any time — no account needed.