Privacy Policy
Last updated: 17 October 2026
1. Introduction
Turkey Boutique Tours is a brand operated by Farout Tourism Co. Ltd. - Soh Travel Agency, a licensed travel agency based in Turkey (TURSAB licence nos. 13689 and 3627).
Throughout this Privacy Policy, the brand and its associated services are referred to as "Farout", "we", "us" or "our".
We respect the privacy of our customers, website visitors and anyone who contacts us about our tours. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit this website, contact us, request information, make a reservation or travel with us.
We process personal information in accordance with applicable data protection laws, including Turkey's Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the European Union General Data Protection Regulation (GDPR).
By using our services you acknowledge that you have been informed of the data processing practices described in this policy. Where consent is required by law, we will request it separately.
2. Data Controller and Contact Information
Company: Farout Tourism Co. Ltd. - Soh Travel Agency Country: Turkey Registered address: Sey Konutlari, Turkmen, Turgut Ozal Blv. No: 95/5, 09400 Kusadasi / Aydin Email: cruises@faroutturkey.com Phone: +90 545 149 33 85
For questions about your personal information or requests concerning your data protection rights, please contact us using the details above.
3. Personal Information We Collect
The information we collect depends on how you interact with us and which services you request.
3.1 Personal and contact information
- Full name
- Email address
- Telephone number
- Country of residence and nationality
- Postal and billing address
- Passport or identification details, when required (for example for hotel registration or domestic travel)
- Date of birth or age, when required by a service provider
3.2 Booking and travel information
When you request or book a tour, gulet cruise, transfer or other travel service, we may collect:
- Selected tour and departure date
- Number of travellers
- Room and cabin preferences
- Transfer and transportation requirements
- Booking history
- Customer communications
- Special requests and service preferences
3.3 Health information and special requirements
You may voluntarily provide information about dietary restrictions, food allergies, mobility requirements or other needs relevant to your trip. Certain information, particularly medical or health-related details, may be considered sensitive personal data. We process this information only when necessary and when an appropriate legal basis exists under applicable law. You are not required to provide health information that is unrelated to the services you request.
3.4 Payment and billing information
When you make a booking or payment, we may process the payment amount and currency, transaction date, booking or transaction reference, payment status, payment method, billing and invoicing information and payment confirmation details.
Payments may be processed through authorised banks or third-party payment service providers. Card details are handled by those providers under their own privacy and security policies; Farout does not store full payment card numbers.
3.5 Website and technical information
When you visit our website, certain information may be collected automatically, including IP address, browser type and version, device and operating system information, pages visited, date and time of visits, referring websites, cookie identifiers and website performance information. See section 9 for cookies.
3.6 Reviews
If you submit a review on our website, we collect the name you provide, your email address (used only to verify the review; never published), your country and the text of the review. Published reviews show the name, country and travel month you provide.
4. How We Use Your Information
We may use personal information for the following purposes:
- Booking management: to receive, process, confirm and manage reservations for tours, gulet cruises, transfers and other travel services.
- Service delivery: to organise and provide booked services, coordinate arrangements and communicate with the hotels, gulet operators, guides and transport companies involved.
- Customer communication: to send booking confirmations, departure instructions, meeting points, transfer details, itinerary updates and other important travel information.
- Payments and accounting: to process transactions, issue invoices, maintain financial records and comply with accounting obligations.
- Customer support: to answer enquiries, respond to complaints and assist customers before, during and after their trips.
- Legal compliance: to meet applicable tax, tourism, security and other legal requirements.
- Website security: to protect our systems against unauthorised access, fraud, misuse and technical threats.
- Service improvement: to evaluate website performance and improve our services.
- Marketing: to send travel news and offers when we have an appropriate legal basis or have obtained the consent required by law.
We do not use personal information for purposes incompatible with those for which it was originally collected unless permitted by applicable law.
5. Legal Bases for Processing Personal Data
Depending on the activity and applicable legislation, we may process your personal information on the following legal bases:
- Performance of a contract: processing necessary to manage reservations and provide the travel services you have requested.
- Legal obligations: processing required for accounting, taxation, invoicing and other regulatory responsibilities.
- Legitimate interests: processing necessary for website security, fraud prevention and service improvement, where permitted and where your rights do not override those interests.
- Consent: processing based on your consent where required, such as certain marketing activities, non-essential cookies or particular categories of sensitive information.
- Legal claims: processing necessary to establish, exercise or defend legal rights.
The appropriate legal basis is determined separately for each processing activity.
6. Sharing Personal Information
Farout does not sell customers' personal information to third parties.
We may share relevant information with trusted partners and service providers when necessary to deliver booked services. These may include gulet operators and crews, hotels and accommodation providers, transfer and transportation companies, professional tour guides, booking and reservation system providers, banks and payment service providers, accounting and financial service providers, website hosting and technology providers, and government authorities when legally required.
Only information reasonably necessary for the relevant service will be shared. For example, when you book a tour that includes a gulet cruise, passenger names and travel dates are provided to the gulet operator responsible for your cruise, and to the hotels for your land nights.
Some service providers may act as independent data controllers for information they receive.
7. International Data Transfer
Farout serves customers from many countries and may use technology, communication, booking or payment service providers located outside Turkey. As a result, certain personal information may be processed or transferred internationally.
Where international data transfers take place, we apply the legal requirements and safeguards required by the KVKK and, where applicable, the GDPR. These safeguards may include recognised adequacy decisions, standard contractual clauses or other legally permitted transfer mechanisms.
8. Data Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure or misuse. Depending on the systems involved, these measures include secure HTTPS/TLS connections, restricted access to personal information, password and account security controls, regular security updates, secure data storage and backups, and monitoring of security incidents.
Although no internet-based system can guarantee absolute security, we take reasonable steps to reduce risks and protect the information entrusted to us. If a personal data breach occurs, we will fulfil any applicable legal reporting and notification obligations.
9. Cookies and Tracking Technologies
Our website uses a small number of cookies and similar technologies:
- Essential cookies, required for the website and the admin area to function (for example the session cookie that keeps staff logged in). These cannot be switched off.
- Analytics and advertising cookies (Google Analytics and, where enabled, Meta Pixel), used to understand how the website is used and to measure advertising. These are used only where an appropriate legal basis exists and, where required, after your consent.
You can block or delete cookies in your browser settings at any time; the website will continue to work, although some preferences may not be remembered.
10. Email Communications and Marketing
We may send information about our tours and offers where permitted by law. Marketing communications are sent only when we have an appropriate legal basis, including consent where required. You may unsubscribe from promotional emails using the unsubscribe option provided or by contacting us directly.
Unsubscribing from marketing communications does not prevent us from sending essential messages relating to an existing booking, such as payment confirmations, transfer arrangements or departure updates.
11. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected or to meet legal obligations. Retention periods depend on the duration of the customer relationship, booking and service requirements, accounting and taxation obligations, applicable legal retention periods, the need to establish or defend legal claims and the original purpose of processing.
When personal information is no longer required and there is no legal obligation to retain it, we delete, destroy or anonymise it in accordance with applicable law.
12. Your Data Protection Rights
Depending on your location and applicable legislation, you may have the right to:
- Find out whether your personal data is being processed
- Request information about the personal data we hold
- Learn why your information is processed
- Find out which third parties have received your information
- Request correction of inaccurate or incomplete information
- Request deletion or destruction of personal information where legally permitted
- Request notification of certain corrections or deletions to relevant third parties
- Object to certain automated decisions
- Seek compensation where unlawful processing causes damage
Where the GDPR applies, you may also have additional rights, including data portability, restriction of processing, objection to certain processing activities and the right to lodge a complaint with a competent supervisory authority.
To exercise your rights, please contact us using the details in section 2. We will review and respond to requests within the time limits required by applicable law.
13. Children's Information
Our tours are open to travellers of all ages travelling with a parent or guardian. Where personal information relating to children is processed (for example names for hotel or boat passenger lists), we follow applicable legal requirements, including parental or legal guardian authorisation when necessary. We aim to avoid collecting information that is not reasonably required for the requested service.
14. Third-Party Websites
Our website may contain links to websites operated by independent businesses, tourism providers, review platforms, social media platforms or other third parties. These websites have their own privacy policies and data collection practices. We encourage visitors to review the privacy policies of third-party websites before providing personal information. Farout remains responsible for its own data processing activities in accordance with applicable law.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in legislation, our services, technology or operational requirements. The updated policy will be published on this website with a revised date. Where required by law, we will provide additional notification or request new consent before implementing relevant changes.
16. Contact Us
For questions, concerns or requests relating to your personal information, please contact:
Company: Farout Tourism Co. Ltd. - Soh Travel Agency Address: Sey Konutlari, Turkmen, Turgut Ozal Blv. No: 95/5, 09400 Kusadasi / Aydin, Turkey Email: cruises@faroutturkey.com Phone: +90 545 149 33 85
We will review your enquiry and respond in accordance with applicable data protection laws.