Looking for a cruise ship, not a Bosphorus boat tour? Plan your cruise and Istanbul stay

Privacy policy and KVKK notice

This notice explains how personal information is handled when you browse Istanbul On Boat, contact us or request a cruise, private yacht, event or cruise vacation. Accepting service terms does not confirm availability or subscribe you to marketing.

Who is responsible and how to contact us

Istanbul On Boat is a service channel of The History Travel / Hevra Turizm, the agency identified on this website, with TÜRSAB licence 7377. Agency address: Alemdar Mah. Ticarethane Sok. 5/3, Fatih, İstanbul, Türkiye. Agency telephone: +90 212 517 21 21. For privacy questions or requests, contact info@istanbulonboat.com or +90 501 235 06 70, using the subject “Privacy request”. Identify the relevant enquiry where possible; do not send unnecessary identity documents.

Information we collect and how we receive it

We receive information directly through website forms, email, telephone and WhatsApp. Depending on your request, this can include your name, contact details, travel date and time, hotel or pickup details, guest counts, selected cruise or package, menu and extra choices, event/company details, and correspondence. Cruise vacation enquiries can also include your planning stage, approximate dates, travelers, preferred route, budget and existing reservations. Technical logs may record IP addresses, requested resources, browser details and timestamps. Give only information needed for the request; avoid payment-card numbers, passport copies and unnecessary health details. Tell other travelers whose information you provide about this notice.

Purposes and legal grounds

We use information to assess enquiries, prepare quotes, check availability, contact you, coordinate confirmed arrangements, handle changes and complaints, maintain necessary records, prevent misuse and protect legal rights. Depending on the purpose, processing is assessed under KVKK Article 5, including necessity for establishing or performing a contract, legal obligations, protection of rights or legitimate interests subject to the applicable conditions. Special-category information needs a separate assessment under Article 6; this notice does not request blanket consent to it. Service-terms acknowledgement and necessary operational messages are separate from optional marketing or tracking permission.

Recipients and service notifications

The organising team and relevant boat, tour, hotel or transfer providers may receive the information needed for your chosen arrangements. Website hosting and communication providers process technical or enquiry information for service operation. Reservation and enquiry notifications are sent through Resend email; when enabled, the same request details are also sent to the team's configured Telegram destination. These notifications can include contact details and free-text notes. WhatsApp is an external service you choose to open; its own privacy rules apply. Information may also be disclosed where required by law or necessary for legal claims.

Processing outside Türkiye

Email, messaging, hosting and measurement providers may process information outside Türkiye or your country of residence. Applicable international-transfer requirements, including KVKK Article 9, must be addressed for each relevant provider and transfer. Accepting service terms is not blanket consent to international transfers and does not establish the required safeguards. Ask our privacy contact about the recipients and arrangements relevant to your information.

Cookies, technical storage and measurement

Optional Google Analytics 4 and Microsoft Clarity stay off until you permit each tool. Use Accept all, Reject all or Customize settings; accepting request terms does not give analytics permission. Necessary security and form features remain available. We store your separate choices in this browser using iob_privacy_v1 local storage for 180 days. If choices cannot be saved, optional tools remain off. With JavaScript disabled neither tool loads.

Google Analytics measures visits and page views using browser/device information and cookie identifiers; advertising storage, advertising personalisation and Google Signals remain disabled. We do not send form values, names, contact details or request references as analytics fields. Page URLs exclude queries, fragments and referrers. Query-bearing, private and error pages do not load measurement tags. Microsoft Clarity provides clicks, scrolling, heatmaps and masked session recordings, not camera or microphone video; request forms and their results are marked for masking before it loads.

Permitted Google _ga and _ga_* cookies are configured here for up to 180 days without automatic extension. Clarity _clck and _clsk and any provider-domain cookies follow Microsoft’s cookie documentation; browser limits may shorten storage. Use Cookie settings in the footer to change or withdraw permission at any time. Withdrawal sends denial signals, removes accessible first-party analytics cookies and reloads an already instrumented page to stop the loaded tools. It does not erase prior records or cookies on another provider’s domain; use browser settings for those. Contact us about deletion or other privacy rights.

Retention and security

Enquiry and service records are retained for the time needed to handle your request and confirmed arrangements, meet applicable recordkeeping duties, prevent abuse and resolve disputes. Legal obligations or ongoing claims can require longer retention; we do not promise one fixed deletion period for every record. Contact us for the criteria applying to your information. Access should be limited to people who need it for the stated purposes. No internet transmission or storage system can be guaranteed completely secure.

Your rights under KVKK

Under KVKK Article 11, you can ask whether your data is processed, request information about processing and its purpose, learn recipients in Türkiye or abroad, seek correction of incomplete or inaccurate data, and request deletion or destruction when the legal conditions apply, including notification to recipients where required. You can object to an adverse result arising solely from automated analysis and seek compensation for unlawful processing. Send requests to our privacy contact or agency address. We may need proportionate identity verification. Applications are handled under Article 13 and the applicable procedure, as soon as possible and within 30 days; further complaint rights may apply.

Service terms, requests and updates

Before sending a form, acknowledge the terms and conditions for Istanbul On Boat requests. This is a request; the team confirms availability and the applicable arrangements separately. Terms acknowledgement is not a waiver of privacy rights. To plan a trip, browse Bosphorus cruises or cruise and Istanbul stay planning. We update this notice when the described processing changes; contact us with any question about your particular record.

The sweetest moments begin on the water.

Questions about a cruise or a private event? We usually reply within minutes.