Privacy Policy

This Privacy Policy explains, in plain language, how Antalion collects,

uses, shares and protects information when you visit antalion.com or

use the Antalion transfer marketplace, in line with Turkey's Personal

Data Protection Law No. 6698 ("KVKK"), the EU/UK General Data

Protection Regulation ("GDPR") for visitors from the EU/EEA and UK, and

commonly recognised international privacy standards (including

principles reflected in laws such as the US California Consumer

Privacy Act and Brazil's LGPD). For the formal KVKK/GDPR data-protection

notice, see our Data Protection Notice page. (Template text — the final

legal text should not be published before review by qualified counsel.)

1. Who We Are

Antalion is a marketplace/software platform (not a travel agency) that

connects passengers requesting airport/resort transfers with

independent, licensed transfer drivers and companies in the Antalya

region. Antalion is the data controller for the personal data described

in this policy. Contact details are in Section 15.

2. Information We Collect

Account and contact data: full name, phone number, email address,

preferred language and currency. Trip data: pickup/drop-off addresses,

date/time, passenger and luggage counts, flight number, special

requests (child seats, in-vehicle extras). Payment data: transaction

and commission records processed through our licensed payment provider

(iyzico) — Antalion does not store full card numbers. Driver-specific

data: driving licence, vehicle registration, transport-permit

documents, IBAN and, where applicable, company/tax identification for

payout purposes. Communications data: in-app messages between

customers and drivers (filtered and moderated for safety), customer

support correspondence, and reviews/ratings left after a trip.

Technical data: IP address, device/browser type, and the cookie/local-

storage data described in Section 6.

3. How We Use Your Information

To create and publish transfer requests and match them with drivers;

to verify your phone number by SMS/WhatsApp/Telegram before a request

goes live; to enable in-app messaging between customer and driver

without exposing either party's direct contact details; to process

payments and hold funds in escrow until a trip is confirmed complete;

to calculate and pay driver payouts and Antalion's commission; to send

service notifications (new offers, trip status, payment confirmations,

review reminders); to operate our loyalty-points and dealer/partner

programmes; to detect and prevent fraud, abuse and contact-information

sharing; to moderate content and enforce our driver/customer terms; and

to comply with applicable tax, accounting and consumer-protection law.

4. Legal Basis for Processing

We process personal data on the basis of: performance of the transfer

contract formed between you and a driver through the platform;

compliance with legal obligations (e.g. accounting and tax records);

our legitimate interest in operating a safe, fraud-resistant

marketplace (e.g. message moderation, abuse prevention); and, where

required, your explicit consent (e.g. this cookie notice, marketing

communications you opt into).

5. Contact Information Is Never Shared Between Customer and Driver

Antalion's model is built around this rule: customers and drivers never

see each other's phone number or email address. All communication runs

through the in-app messaging system, which is automatically filtered

for contact-information leakage and moderated by our team; sharing

contact details through it can result in penalties under our terms.

6. Cookies and Local Storage

Strictly necessary: cookies/local-storage entries that keep you logged

in, remember your language and currency choice, and keep the site

working correctly — the site cannot function properly without these.

Preference: a browser-only counter that remembers whether you closed

the homepage notification bubble, and whether you accepted this cookie

notice. We do not currently use third-party advertising or analytics

tracking cookies, and we do not sell your data to third parties for

advertising. By continuing to browse the site, or by clicking "Accept"

on the cookie banner, you acknowledge this policy and the use of

strictly necessary cookies. You can clear cookies at any time from your

browser settings, though this will end your session and reset your

language/currency preference.

7. Who We Share Data With

Payment data is processed by our licensed payment provider (iyzico)

under the iyzico Pazaryeri/Marketplace escrow model. We use licensed

processors strictly to deliver the notifications you would expect from

using the service: transactional email (Resend), WhatsApp Cloud API and

Telegram Bot API for messaging, and Google Maps Platform for address

autocomplete and route/distance calculation. We do not sell personal

data to third parties, and we do not share customer or driver contact

details with each other (see Section 5). We may disclose information

where required by law, court order, or to protect the rights, safety

or property of Antalion, our users, or the public.

8. International Data Transfers

Some of our processors (payment, email and messaging infrastructure)

may process data outside Turkey, including within the EU/EEA, UK and

US. Where this occurs, we rely on the safeguards required by KVKK and,

where applicable, GDPR-standard contractual clauses or an adequate

level of protection recognised by the relevant authority.

9. Data Retention

We retain personal data only for as long as necessary for the purposes

described in this policy, or as required by applicable tax, accounting,

consumer-protection or dispute-resolution obligations, after which it

is deleted or anonymised.

10. Data Security

We apply reasonable technical and organisational measures to protect

personal data — including encrypted transport (HTTPS), hashed

passwords and magic-link tokens, and restricted internal access to

personal data — appropriate to the sensitivity of the data involved. No

method of transmission or storage is 100% secure, and we cannot

guarantee absolute security.

11. Your Privacy Rights

Under KVKK Article 11 and, where applicable, the GDPR and other

privacy laws, you have the right to: find out whether your data is

being processed and obtain a copy of it; request correction or deletion

of inaccurate or unlawfully processed data; object to processing and

request its restriction; request data portability; and, where

processing is based on consent, withdraw that consent at any time

without affecting the lawfulness of processing carried out before the

withdrawal. Depending on where you live, additional local rights may

apply (for example, the right to opt out of the sale/sharing of

personal information under US state privacy laws — Antalion does not

sell personal data, so there is nothing to opt out of). You may also

lodge a complaint with Turkey's Personal Data Protection Authority

(KVKK Kurumu) or, if the GDPR applies to your situation, your local

data protection supervisory authority.

12. Children's Privacy

Antalion's services are not directed at children, and we do not

knowingly collect personal data from children. Passenger counts may

include children travelling with a booking adult, but the account and

booking are always made by an adult customer.

13. Third-Party Links

Our site may link to third-party sites (e.g. WhatsApp, the driver

contract PDF, Google Maps). This policy does not cover the privacy

practices of those third parties; please review their own policies.

14. Changes to This Policy

We may update this policy from time to time to reflect changes in our

practices or legal requirements. Material changes will be reflected by

an updated version on this page; continued use of the site after a

change constitutes acceptance of the revised policy.

15. Contact Us

For any question or request regarding this policy or your personal

data, contact us at info@antalion.com.