Privacy Policy
Last updated: Oct 12, 2026
1. Controller
Waylora's founder, an individual based in Türkiye who operates gowaylora.com pending company registration, is the controller of personal data processed through Waylora. Contact: support@gowaylora.com.
2. Data we collect
Account data (name, email, password hash, preferences); booking data (traveller names, dates of birth and passport details where a supplier requires them, contact details); payment metadata (payment status and provider reference — never full card numbers); support messages; technical data (IP address, device information) and, with consent, analytics data.
3. Why we use it
To provide and manage bookings (contract); to comply with legal obligations such as accounting and fraud prevention (legal obligation); to keep the service secure and improve it (legitimate interests); and to send marketing emails only where you have opted in (consent).
4. Sharing
We share only the data a supplier needs to fulfil your booking, our payment provider, our email provider and hosting/infrastructure providers under data processing agreements. Some suppliers are located outside your country; where required we use appropriate safeguards such as Standard Contractual Clauses.
5. Security
Passport numbers are encrypted at rest. Access to personal data is restricted by role and logged. Payment data is handled by our payment provider.
6. Retention
We keep booking and financial records for the period required by tax and accounting law in Türkiye. Account data is deleted or anonymised when you delete your account, except where retention is legally required.
7. Your rights
Depending on where you live (including under the GDPR), you may access, correct, export or delete your data, object to or restrict processing, and withdraw consent at any time. You can export or delete your data from My Account → Privacy & data, or contact us. You may also complain to your local data protection authority.
8. Cookies
See Cookie settings to choose which optional cookies we may use.