Last updated: 10 October 2026
This notice sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, if you live in the EU, the EU GDPR. It complements our Privacy Policy, which describes the data we collect in full.
1. Data controller
LONDONOS LTD, registered in England and Wales, company number 12665318
86-90 Paul Street, London EC2A 4NE, United Kingdom
Email: [email protected] · Phone: +44 20 3411 2421
Bookings for services in Turkey are handled together with our Turkish travel agency, GGG GUVENCOGLU TURIZM INS BIL TER HIZ SAN VE TIC LTD (TÜRSAB A9163).
2. Why we use your data and on what lawful basis
| Purpose | Data | Lawful basis (Art. 6 UK GDPR) |
|---|---|---|
| Making, confirming and managing your booking; sending confirmations and changes | Name, contact details, booking details, guest names | Performance of a contract (6(1)(b)) |
| Issuing flight tickets | Date of birth, gender, nationality, passport or ID number and expiry | Performance of a contract (6(1)(b)); the airline’s legal obligations |
| Taking payment, refunds, preventing fraud | Payment results (card details are handled by our payment provider) | Contract (6(1)(b)); legitimate interests (6(1)(f)) |
| Accounting and tax records | Booking and payment records | Legal obligation (6(1)(c)) |
| Answering your questions | Your messages and contact details | Contract or legitimate interests (6(1)(b), (f)) |
| Keeping the site secure | IP address, logs, necessary cookies | Legitimate interests (6(1)(f)) |
We do not send marketing, do not use advertising or analytics cookies, and do not make decisions about you based solely on automated processing.
3. Your rights
- Access: get a copy of the personal data we hold about you.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: have your data deleted where we no longer need it or have no lawful basis to keep it. Records we must keep by law (for example accounting records) cannot be deleted before the end of the legal period.
- Restriction: ask us to limit how we use your data while a question about it is resolved.
- Portability: receive the data you gave us in a common machine-readable format.
- Objection: object to processing based on our legitimate interests.
- Withdraw consent: where we rely on your consent, withdraw it at any time.
To use any of these rights, email [email protected] from the address you booked with, or tell us your booking number (LR-…). It is free, and we reply within one month. If we need to confirm your identity, we will ask.
4. International transfers
We work from the UK and Turkey, so booking data moves between the two. Data sent to the hotels, tour and transfer companies and airlines in Turkey or elsewhere is transferred because it is necessary to perform your booking (Art. 49(1)(b)). Where our service providers process data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.
5. How long we keep data
Booking and payment records: 6 years after the end of the financial year (UK), or up to 10 years where Turkish law applies. Account details: while your account is open. Messages: for a reasonable time after your request is resolved. Technical logs: a short time. After that, data is deleted or anonymised.
6. Complaints
Please contact us first so we can put things right. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). If you live in the EU, you can complain to the data protection authority in your country.
7. Customers in Turkey
Bookings handled by our Turkish agency are also covered by Turkey’s Personal Data Protection Law No. 6698 (KVKK). The KVKK notice is available in Turkish: KVKK Aydınlatma Metni.