Last updated: 10 October 2026
This policy explains what personal data we collect when you use londonos.co.uk, make a booking or contact us, why we use it, who we share it with, and your rights.
1. Who we are
The data controller is LONDONOS LTD, company number 12665318, 86-90 Paul Street, London EC2A 4NE, United Kingdom. For bookings and agency services in Turkey, GGG GUVENCOGLU TURIZM INS BIL TER HIZ SAN VE TIC LTD (TÜRSAB A9163), Balbey Mahallesi, İsmetpaşa Caddesi No:6/C, Muratpaşa / Antalya.
Contact: [email protected]
2. What we collect
- Identity and contact details: name, email, phone number, and the names of other guests on the booking.
- Passenger details for flights: date of birth, gender, nationality, passport or Turkish ID number and document expiry date. The airline needs these to issue a ticket.
- Booking details: the hotel, room, tours, transfers and flights you choose; dates; flight number and arrival time; any special requests.
- Payment details: your card details go straight to our licensed payment provider. We never see or store your card number; we only keep the result of the payment.
- Account details: if you open an account, your email, a one-way hash of your password, and your booking history.
- Messages: what you send us by email, WhatsApp, phone or the contact form.
- Technical data: IP address, browser type, pages visited and error logs, for security and to keep the site running.
3. Why we use it
- To make your booking, confirm it with the hotel, tour or transfer company or airline, and send you confirmations, changes and cancellations (performance of a contract).
- To take payment, make refunds and prevent fraud (contract, legitimate interests).
- To meet accounting, tax and travel-industry obligations (legal obligation).
- To answer your questions and support you (contract, legitimate interests).
- To keep the site secure and fix faults (legitimate interests).
We do not send marketing emails. If we ever want to, we will only do so with your consent.
4. Who we share it with
- Hotels, tour and activity companies, transfer companies, airlines and ticketing systems that provide what you booked, and only what they need for it.
- Our licensed payment provider and banks.
- Infrastructure providers for hosting, content delivery (CDN), email delivery and security, who process data only on our instructions.
- Public authorities where the law requires it.
We do not sell your data or share it for advertising.
5. International transfers
Our companies are in the UK and Turkey, and your data moves between the two. If you book a hotel or airline in another country, the details needed for that service go there. Our infrastructure providers may run servers in the EU, the UK or the USA. We use the safeguards the law requires for these transfers, such as adequacy decisions and standard contractual clauses.
6. How long we keep it
Booking and payment records are kept for as long as accounting and tax law requires (6 years in the UK, up to 10 years in Turkey). Account details are kept while your account is open. Messages are kept for a reasonable time after your request is resolved, and technical logs for a short time. After that, data is deleted or anonymised.
7. Security
The site runs over encrypted connections (HTTPS) only. Booking and passenger details can be accessed only by authorised members of our team; ID numbers are masked in lists and never included in email or messaging notifications.
8. Your rights
Under the UK GDPR you can ask to access your data, have it corrected or erased, restrict or object to its use, receive it in a portable format, and withdraw consent where we rely on it (details in our GDPR Notice). Email [email protected]; we reply within one month.
You can complain to the Information Commissioner’s Office (ico.org.uk) in the UK, or the Personal Data Protection Authority (kvkk.gov.tr) in Turkey.
9. Cookies
We only use cookies the site needs to work; there are no advertising or analytics cookies. Details: Cookie Policy.
10. Children
Bookings must be made by someone aged 18 or over. We collect children’s details only as guests or passengers on a booking, from the adult making it.
11. Changes
We may update this policy. The current version is always on this page, with the date at the top.