Last Updated: April 22, 2026

Corporate Information and Jurisdiction: This website and all services provided herein are owned and operated by Zenrota Limited, a company incorporated under the laws of Hong Kong. Operational, regional support, and ground fulfillment services are managed by our regional office in Istanbul, Turkiye.

Primary Contracting Entity:
Zenrota Limited (Hong Kong)
Unit 909, Prosperity Millennia Plaza, 663 King's Road, Quarry Bay, Hong Kong.

Regional Operational Support:
Zenrota Tourism Travel and Trade Limited Company (Türkiye)
Okul Sokak No:1 Altunizade Sitesi A Blok Kat: 4 Daire: 17, 34662 Uskudar / Istanbul, Turkey.

Contact Information:
Email: [email protected]
Global Support — WhatsApp Only: +44 7751127859
Local Office: +90 850 304 7936
Direct Operations: +90 539 234 65 02
Website: zenrota.com

PRIVACY POLICY

Effective Date: April 22, 2026

1. Introduction and Responsible Entities

This Privacy Policy explains how personal data are collected, used, disclosed, retained, and protected in connection with zenrota.com and the travel services available through the platform.

Website Operator and Primary Contracting Entity: Zenrota Limited, Unit 909, Prosperity Millennia Plaza, 663 King's Road, Quarry Bay, Hong Kong.

Regional Operational Support: Zenrota Tourism Travel and Trade Limited Company, Okul Sokak No:1 Altunizade Sitesi A Blok Kat: 4 Daire: 17, 34662 Uskudar / Istanbul, Turkey.

For privacy inquiries concerning either entity, contact [email protected]. Regional assistance is available through +90 850 304 7936 or +90 539 234 65 02. Global support is available through WhatsApp only at +44 7751127859.

References to “Zenrota,” “we,” “us,” or “our” refer to the relevant entity acting within its actual responsibilities. Each entity is responsible as a data controller or data user for processing whose purposes and means it determines. Where an entity processes information solely on another entity’s instructions, its responsibilities reflect that processing role.

The applicable service-specific privacy notice shall identify the entity responsible for the relevant processing. The Turkish entity’s processing as data controller is also described in its KVKK Data Protection Notice.

Personal data are handled in accordance with applicable legislation, including the Hong Kong Personal Data (Privacy) Ordinance and Turkish Personal Data Protection Law No. 6698 (“KVKK”), to the extent each applies.

This Policy provides information about processing. Reading it, using the website, or accepting booking terms does not itself constitute consent to optional processing.

2. Personal Data We Collect

Depending on the services requested, we may collect:

• Identity information: Name, surname, date of birth, nationality, and identity or passport details where required for a booking.
• Contact information: Telephone number, email address, and residential, correspondence, or billing address.
• Payment and transaction information: Billing details, payment status, transaction references, and refund records. Card details submitted through the payment provider’s payment interface are processed by that provider. Zenrota may receive limited payment information necessary to confirm, administer, or refund the transaction.
• Travel information: Passenger details, itineraries, tickets, accommodation reservations, rental arrangements, tour bookings, and relevant service preferences.
• Customer support information: Inquiries, correspondence, complaints, and information supplied to resolve service-related requests.
• Technical and usage information: IP address, device and browser information, online identifiers, cookie information, and website usage statistics, subject to applicable consent requirements.

Where a service requires health information or other sensitive personal data, additional information about the relevant processing and safeguards shall be provided before collection. Any required explicit consent shall be obtained separately.

3. How We Collect Personal Data

We collect personal data through bookings, account registration, website and application forms, correspondence, customer support channels, and other interactions with you.

Information may also be provided by a person authorized to make a booking on your behalf, by the relevant travel supplier, or by a payment provider in connection with your transaction.

Technical information may be collected automatically through website operations and permitted cookies or similar technologies.

Where information is required to complete a booking or fulfill a legal obligation, this shall be indicated at collection. If necessary information is not provided, we may be unable to arrange the requested service. Optional marketing information is not a condition of booking.

4. Purposes and Legal Grounds for Processing

We process personal data for defined purposes and in accordance with the requirements of the applicable law.

Where the KVKK applies, the relevant processing grounds include:

• Booking and service administration: Identity, contact, travel, and transaction information necessary to enter into or perform a contract with you.
• Legal compliance: Records necessary to meet accounting, invoicing, reporting, and other statutory obligations.
• Claims and disputes: Information necessary to establish, exercise, or protect legal rights.
• Security and service improvement: Proportionate processing necessary for legitimate interests, such as fraud prevention, system security, and service quality, provided that your fundamental rights and freedoms are not prejudiced.
• Optional activities: Explicit consent where required for personalized marketing, optional tracking, or other processing without an alternative applicable legal ground.

Processing subject to Hong Kong law shall comply with the applicable collection, purpose, use, retention, security, and access requirements of that law. A processing ground available under one jurisdiction does not automatically satisfy the requirements of another.

Special categories of personal data require an applicable condition under the relevant law; ordinary contractual necessity or legitimate interests alone do not authorize health-data processing under the KVKK.

5. Marketing and Service Communications

We may send booking confirmations, payment notifications, itinerary changes, and other communications necessary to provide the requested services.

Promotional messages, personalized offers, and campaigns shall be sent only where the applicable consent or authorization requirements have been met.

You may decline optional marketing or withdraw your permission through the unsubscribe mechanism provided in the communication or by contacting [email protected]. Declining marketing does not affect an existing booking.

Consent to cookies, marketing communications, and other optional processing shall be managed separately where required.

6. Disclosure of Personal Data

We disclose personal data only for specified purposes and where a lawful basis permits the disclosure. Relevant recipient categories include:

• Travel suppliers: Airlines, coach, train and ferry operators, hotels, rental companies, tour operators, transfer providers, and other suppliers receive information necessary to arrange and fulfill the booked services.
• Payment providers and financial institutions: Relevant transaction, billing, and identification information may be disclosed to process payments, administer refunds, verify transactions, and prevent fraud.
• Technical and operational providers: Where engaged, providers supporting hosting, communications, customer support, or website functionality may process limited information necessary for those functions.
• Zenrota entities: Information may be shared between the Hong Kong and Turkish entities where necessary for the disclosed booking or operational purpose and legally permitted.
• Competent authorities: Information may be disclosed in response to lawful requests or applicable legal obligations.

Where a provider acts on our instructions, appropriate contractual and security requirements shall govern its processing. Suppliers that determine their own processing purposes may act independently and provide their own privacy notices.

Any use of third-party analytics or advertising technology is additionally subject to the Cookie Policy and applicable consent requirements.

7. International Transfers

Travel services may require information to be processed in Hong Kong, Turkey, the destination country, or another country in which a relevant supplier operates.

International transfers shall comply with the applicable legal requirements. For transfers subject to Article 9 of the KVKK, this includes an applicable adequacy decision, appropriate safeguards, or a permitted exception whose conditions are satisfied.

Corporate affiliation, booking acceptance, or acknowledgment of this Policy does not independently authorize a transfer.

Where an occasional transfer lawfully relies on explicit consent, transfer-specific information and the relevant potential risks shall be provided before that consent is requested. This Policy does not obtain blanket consent for routine international transfers.

Information about the recipients, destinations, and safeguards relevant to your service may be requested from [email protected].

8. Retention of Personal Data

Personal data are retained only for as long as necessary for the disclosed purposes and any applicable legal retention requirements.

Retention periods depend on the information involved, the booking and service lifecycle, accounting and regulatory requirements, complaint handling, and applicable legal claim periods.

Data shall not be retained indefinitely merely because storage is available. When retention is no longer justified, information shall be securely deleted, destroyed, or anonymized in accordance with applicable requirements.

Withdrawal of consent does not require deletion of records that must lawfully be retained on another valid basis.

9. Cookies and Similar Technologies

Cookies and similar technologies may support essential website functions, remember preferences, measure performance, and enable optional personalization or advertising.

Where consent is required, optional technologies shall remain disabled until you make an affirmative choice. You may accept, reject, or adjust optional categories through the website’s cookie preference controls and revisit those choices later.

Browser settings provide additional controls but do not replace any consent we are required to obtain.

Further information about the technologies used, their providers, purposes, and durations is provided in the Cookie Policy and accompanying cookie details.

10. Your Privacy Rights

Your rights depend on the applicable law and may include:

• Requesting access to your personal data and information about its processing.
• Requesting correction of inaccurate or incomplete information.
• Requesting erasure, destruction, or anonymization where the applicable legal conditions are met.
• Objecting to processing where the law provides that right.
• Withdrawing consent to processing based on consent.
• Raising a complaint with the competent data protection authority.

Where the KVKK applies, you additionally retain the rights set out in Article 11, including information about domestic and international recipients, notification of qualifying rectification or deletion actions to recipients, objection to adverse results arising exclusively from automated analysis, and compensation for damage caused by unlawful processing.

Under Hong Kong law, applicable data access and correction rights remain available. Rights described under another jurisdiction are not automatically identical under Hong Kong law.

To submit a request, contact [email protected] or write to the relevant entity at the address above. Formal KVKK applications must follow the legally recognized submission methods described in the KVKK Data Subject Application Form.

We may request proportionate information to verify your identity or authority. Requests shall be handled within the applicable statutory periods and subject to lawful exceptions.

11. Security Measures

We apply technical and organizational safeguards appropriate to the nature of the information and the risks involved, including measures intended to prevent unauthorized access, unlawful processing, accidental loss, and improper disclosure.

Service providers entrusted with personal data are required to protect it in accordance with their applicable obligations.

No online transmission or storage system is completely risk-free. This limitation does not reduce our responsibility to apply appropriate safeguards or respond to security incidents in accordance with applicable law.

12. Changes to This Policy

We may update this Policy to reflect changes in our services, processing activities, or legal requirements. The effective date shall be revised accordingly.

Material changes shall be communicated appropriately. Where a new purpose or activity requires additional information or renewed consent, publication of an updated Policy alone shall not authorize that processing.

GET IN TOUCH WITH ZENROTA

Our multilingual support team is available to assist with flight bookings, hotel reservations, customized tours, airport transfers, and general inquiries.

Corporate Headquarters — Hong Kong

Company Name: Zenrota Limited
Registered Address: Unit 909, Prosperity Millennia Plaza, 663 King's Road, Quarry Bay, Hong Kong
Corporate, Administrative, and Financial Inquiries: [email protected]
Global Support — WhatsApp Only: +44 7751127859

Regional Operational Office — Türkiye

Company Name: Zenrota Tourism Travel and Trade Limited Company
Address: Okul Sokak No:1 Altunizade Sitesi A Blok Kat: 4 Daire: 17, 34662 Uskudar / Istanbul, Turkey
Local Office: +90 850 304 7936
Direct Operations: +90 539 234 65 02

Customer Support

General Inquiries and Bookings: [email protected]
Privacy Inquiries and Rights Requests: [email protected]
Availability: 24/7/365 Customer Service and Live Chat