Privacy Policy

1. Who we are

Luma Yacht (“Luma”) is a customer-facing brand of MERYEM YILDIZ TURIZM SEYAHAT ACENTASI, which operates lumayacht.com and is the data controller. The company is a TÜRSAB A Group licensed travel agency, #14316. MerrySails provides the shared booking-support mailbox and operational notification channel. This policy explains what personal data we collect, why, and the rights you have over it. It is written to align with the Turkish Personal Data Protection Law (KVKK No. 6698) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. The data we collect

We only collect what we need to answer your enquiry and arrange a charter:

• Enquiry & booking details you provide through our enquiry form or by message — typically your name, contact details (phone, email or WhatsApp number), your preferred date, group size, occasion and any notes about your charter.
• Messages you send us over WhatsApp, email or phone, and our replies.
• Technical & usage data collected automatically when you visit the site — such as your IP address, browser and device type, pages viewed and referring source — via cookies and analytics tools.

We do not knowingly collect data from children, and we do not ask for special-category data (such as health or financial card details) through this website.

3. How we use your data

• To respond to your enquiry and prepare a charter quote.
• To arrange, confirm and deliver a charter you book, including boarding details.
• To communicate with you about your booking before, during and after your charter.
• To keep records required for our business and for legal or tax obligations.
• To understand how the site is used and improve it, and — where relevant — to measure marketing performance, using aggregated or pseudonymised analytics.

Our lawful bases are: taking steps at your request before entering a contract and performing that contract; our legitimate interests in running and improving the business; your consent (for non-essential cookies and analytics); and compliance with legal obligations.

4. Cookies & analytics

The site uses cookies and similar technologies. Strictly necessary cookies keep the site working. With analytics tools (for example Google's tag manager and Microsoft Clarity) we measure traffic and on-page behaviour to improve the experience. You can control or block cookies through your browser settings; blocking some may affect how the site works.

5. Who we share it with

We do not sell your personal data. We share it only with service providers who help us run the business, under appropriate safeguards, including:

• Messaging & email providers (e.g. WhatsApp and our email host) to communicate with you.
• Analytics providers (e.g. Google and Microsoft) to measure and improve the site.
• Hosting & infrastructure providers that operate the website.
• Authorities or advisors where we are legally required to, or to protect our rights.

Some providers may process data outside Türkiye or the EEA. Where they do, we rely on appropriate transfer mechanisms permitted under KVKK and GDPR.

6. How long we keep it

We keep enquiry and booking data only as long as needed for the purposes above — to serve you and to meet legal, accounting and tax requirements — after which it is deleted or anonymised.

7. Your rights

Subject to applicable law, you may request to access, correct, update or delete your personal data; object to or restrict certain processing; withdraw consent; and request a copy of the data you provided. Under KVKK and GDPR you also have the right to lodge a complaint with the relevant supervisory authority. To exercise any right, contact us using the details below.

8. Security

We take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, but we work to safeguard the information you share with us.

9. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it last changed; material updates will be reflected on this page.

10. Contact us

For any privacy question or request, reach us on WhatsApp at +90 544 898 98 12 or by email at info@merrysails.com. Luma Yacht, operated by MERYEM YILDIZ TURIZM SEYAHAT ACENTASI — TÜRSAB A Group #14316, Istanbul, Türkiye.