Privacy Policy
Last updated: 3 August 2026
This website, istanbulhagiasophiatickets.com, is operated by Cityberry Tourism Agency (Istanbul, Türkiye), which is the data controller for the personal data described here. This policy explains what personal data we collect when you use this site and buy tickets through it, how we use it, who we share it with and the rights you have. We deliberately collect as little as possible.
1. Data we collect
- Identity data — the name (and, where a product requires it, nationality or date of birth) needed to issue your ticket.
- Contact data — your email address and phone number, so we can deliver your ticket and reach you about your booking.
- Booking data — the products purchased, your visit date, the number of guests and related preferences.
- Payment data — your card payment is processed by Stripe. Card details are entered on Stripe's secure systems and are never stored by us; we only receive confirmation that a payment succeeded or failed, plus a billing reference.
- Technical data — IP address, browser and device type, and cookie data, collected when you use the site.
- Support correspondence — messages you send us and our replies.
2. How we use your data, and our legal bases
- To perform our contract with you — process your order, issue and email your mobile ticket, and provide customer support.
- To meet legal obligations — tax and accounting records, fraud prevention and consumer-protection duties.
- For our legitimate interests — keeping the site secure, preventing fraud, and improving our service.
- With your consent — only where consent is required. We do not send marketing email you have not asked for, and we never sell your personal data.
3. Who we share it with
We share data only where needed to deliver the service: with the ticketing supplier that issues your admission (so your ticket is valid at the venue), with Stripe for payment processing, with our hosting and email provider (Cloudflare) which serves this site and sends your confirmation, with analytics providers where enabled, and with legal authorities where we are required to. Each processes data under its own safeguards. We do not sell your personal data.
4. International transfers
Delivering your booking may involve transferring data between the EU/EEA, the United Kingdom and Türkiye. Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
5. Data retention
Booking and financial records are kept for as long as required by Turkish tax and consumer-protection law (generally up to 10 years), then deleted. Support correspondence is kept only for as long as needed to resolve your request and any related follow-up. Any marketing consent is kept until you withdraw it.
6. Your rights (GDPR & KVKK)
Under the EU/UK General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK), you have the right to access your data, to have inaccurate data corrected, to request deletion (“right to be forgotten”), to restrict or object to processing, to data portability, and to withdraw any consent you have given. To exercise any of these rights, email [email protected] — we respond within 30 days.
7. Cookies
This site uses the cookies and similar technologies necessary for it to function, plus analytics measurement where enabled. Analytics data is used in aggregate to understand and improve the site and is not used to identify you personally.
8. Security
We use industry-standard technical and organisational measures — including encryption in transit and restricted access — to protect your data. No method of transmission or storage is completely secure, but we work to protect your information at all times.
9. Children
This site is intended for adults booking on their own or their party's behalf and is not directed at children. We do not knowingly collect data from children other than the guest details an adult provides to complete a booking.
10. Complaints
Please contact us first at [email protected] so we can help. If you remain unsatisfied you may lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or with the data-protection authority in your country of residence.
Contact
Cityberry Tourism Agency — Istanbul, Türkiye — [email protected] — +90 850 304 8726