Privacy Policy / Gizlilik Politikası

Yoldago Ltd ("Yoldago", "we", "us", or "our") is the data controller responsible for your personal data. We are registered in England and Wales under company number 17253122 (registered address: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom). We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect and process the following categories of personal data:

• Identity data: Full name, username, date of birth (for age verification)
• Contact data: Email address, phone number
• Profile data: Profile photo, account preferences, trust level, ratings
• Transaction data: Product requests, trips, matches, agreed prices, delivery codes
• Payment data: Payment confirmation records (card details processed exclusively by Stripe — we do not store them)
• Communications data: Messages exchanged through the Platform
• Technical data: IP address, browser type, device information, session data
• Usage data: Pages visited, features used, actions taken on the Platform

We process your personal data on the following legal bases:

• Contract performance: To create and manage your account, facilitate matches between Shoppers and Travelers, process transactions, and provide Platform services
• Legal obligation: To comply with applicable laws including anti-money laundering, tax, and fraud prevention requirements; to retain transaction records for 6 years
• Legitimate interests: To maintain Platform security, prevent fraud and abuse, send service-related communications, and improve our services
• Consent: To send marketing communications (where you have opted in)

• Account data: Retained for 2 years after account closure or last active use
• Transaction records: Retained for 6 years (legal and tax obligation)
• Communications data: Retained for 2 years from date of communication
• Technical/usage data: Retained for 13 months

After the applicable retention period, data is securely deleted or anonymised.

We do not sell your personal data. We share data only with:

• Stripe Technology Europe Limited — payment processing. Stripe is an authorised payment institution regulated by the Central Bank of Ireland.
• Supabase Inc. — database and authentication infrastructure (servers located in EU/EEA)
• Vercel Inc. — hosting and content delivery
• Resend Inc. — transactional email delivery
• Google LLC — analytics (Google Analytics, only with your consent)
• Vonage / Sinch — SMS verification
• Law enforcement or regulatory authorities — where required by law or court order

All processors are bound by data processing agreements and provide appropriate safeguards.

Some of our processors are based outside the UK/EEA. Where data is transferred internationally, we ensure adequate protections are in place, including Standard Contractual Clauses (SCCs) approved by the UK ICO or the EU Commission, or reliance on adequacy decisions.

We use cookies and similar technologies. For full details, please see our Cookie Policy. Essential cookies are used without your consent as they are strictly necessary for the Platform to function. Analytics and preference cookies require your consent.

You have the following rights regarding your personal data:

• Right of access: To obtain a copy of your personal data
• Right to rectification: To correct inaccurate or incomplete data
• Right to erasure: To request deletion of your data (subject to legal retention obligations)
• Right to restriction: To restrict processing in certain circumstances
• Right to data portability: To receive your data in a structured, machine-readable format
• Right to object: To object to processing based on legitimate interests or for direct marketing
• Rights relating to automated decision-making: Not to be subject to solely automated decisions that significantly affect you

To exercise any of these rights, contact us at: info@yoldago.com.tr. We will respond within one month.

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure, including SSL/TLS encryption in transit, row-level security on database access, hashed password storage, and regular security reviews.

The Platform is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform. Continued use of the Platform after notice of changes constitutes acceptance of the updated Policy.

For any privacy-related queries or to exercise your rights:
Yoldago Ltd, 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.
Email: info@yoldago.com.tr