Privacy Policy

This privacy policy explains how we collect, use, store and protect your personal data when you visit our website, book wheelchairs or other mobility equipment, create an account or contact us. It is our information notice under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, for visitors from the European Union and the United Kingdom, under Articles 13 and 14 of the General Data Protection Regulation (“GDPR”).

1. Data controller

The data controller is Moor Yaşam Sağlık Ürünleri Limited Şirketi, the company that operates the Istanbul Wheelchair Rental website and service (“we”, “us”). Our address and contact details are listed at the end of this page. For any privacy question, please contact us by e-mail with the subject “Personal data”.

2. Personal data we collect

• Identity and contact data: first and last name, e-mail address, phone number and country.
• Booking and delivery data: the equipment, dates and times you choose, delivery and collection address, hotel name and room number, map location if you pin one, and the comments you add.
• Sizing data: the user’s height and weight, if you give them, so that we can prepare equipment of the right size.
• Transaction data: prices, payment method, payments and refunds, invoices and receipts.
• Account data: if you create an account, your login details (a password, if you set one, is stored only in hashed form), saved addresses and your marketing preferences, with the date and IP address of each permission.
• Communication data: messages you send through the contact form, by e-mail or on WhatsApp, and our replies.
• Technical data: IP address, browser and device information, and security logs created when you use the website and its forms; usage statistics if you accept analytics cookies.

We do not ask for medical information. If you choose to tell us about a health condition (for example in a comment), we use it only to prepare suitable equipment and the delivery, and you can ask us to delete it at any time.

3. How and why we use your data

We collect your data directly from you through the website, e-mail, phone and WhatsApp, and automatically through cookies and server logs. We use it for the following purposes and legal grounds under Article 5 of KVKK (and Article 6 of GDPR):

• To take, confirm and manage your booking, deliver and collect the equipment and give support during the rental: necessary for the conclusion and performance of the contract with you.
• To issue invoices, keep accounting records and respond to requests from authorities: necessary to comply with our legal obligations, such as the Turkish Commercial Code and Tax Procedure Law.
• To answer your messages and complaints: our legitimate interest in responding to you and, where it concerns a booking, the performance of the contract.
• To protect the website and our customers from spam, fraud and misuse, and to establish, exercise or defend legal claims: our legitimate interest and, for claims, the establishment, exercise or protection of a right.
• To improve the website with usage statistics: only with your consent, given through the cookie banner.
• To send you offers and news by e-mail, SMS or WhatsApp: only with your explicit consent, which you can withdraw at any time in your account or by contacting us. Messages needed to manage your booking are not marketing and are sent regardless of this choice.

We do not sell your personal data and we do not make decisions about you based solely on automated processing.

4. Who we share your data with

Your data is shared only as far as necessary for the purposes above, with:

• our employees and the drivers who deliver and collect your equipment;
• service providers that work for us under confidentiality and data processing obligations: website hosting, e-mail delivery, spam protection (Cloudflare Turnstile, where enabled) and website analytics (Google Analytics, only with your consent);
• our accountants, legal advisers, banks and payment providers, where needed for a payment, refund or legal matter;
• courts, public authorities and law enforcement, when required by law.

When you view a map, the map tiles are loaded from OpenStreetMap and, where a Google map is shown, from Google; these providers receive your IP address in order to display the map.

5. International transfers

Some of our service providers, such as Google and Cloudflare, process data on servers outside Türkiye, including in the European Union and the United States. Such transfers are made only in accordance with Article 9 of KVKK, for example on the basis of standard contractual clauses notified to the Personal Data Protection Authority or, for optional analytics, your consent. If you contact us from abroad, your data is transferred to us in Türkiye, which is necessary to provide the service you request.

6. How long we keep your data

• Bookings, invoices and payment records: 10 years from the end of the calendar year in which they were created, as required by Turkish commercial and tax law.
• Customer accounts: until you delete your account or ask us to delete it; booking records are then kept for the legal period above.
• Contact form messages: 2 years; messages identified as spam are deleted after 90 days.
• Marketing permissions: for as long as they are valid and for the legal period after withdrawal, as proof of consent.
• Security logs and sessions: for a short period, normally no longer than a few weeks.

When the retention period ends, data is deleted, destroyed or anonymised.

7. How we protect your data

The website is served only over an encrypted (HTTPS) connection. Access to customer data is limited to authorised staff with personal accounts, passwords are stored hashed, forms are protected against automated abuse, and our systems are backed up and kept up to date. If a data breach occurs, we will inform the Authority and affected people as required by law.

8. Your rights

Under Article 11 of KVKK you have the right to:

• learn whether your personal data is processed and, if so, request information about it;
• learn the purpose of the processing and whether the data is used in line with that purpose;
• know the third parties in Türkiye or abroad to whom your data is transferred;
• ask for incomplete or inaccurate data to be corrected, and for data to be deleted or destroyed under the conditions of Article 7 of KVKK;
• ask for the correction, deletion or destruction to be notified to the third parties to whom the data was transferred;
• object to a result against you that arises solely from automated analysis of your data;
• claim compensation for damage caused by unlawful processing.

If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, data portability and objection, the right to withdraw consent at any time without affecting earlier processing, and the right to complain to the data protection authority of your country.

9. How to make a request

You can send your request in writing to our address, by registered e-mail (KEP), or by e-mail from the address you used with us, in line with the Communiqué on the Procedures and Principles for Applications to the Data Controller. Please state your name, contact details and what you are asking for, and add your booking number if you have one. We will reply free of charge as soon as possible and within 30 days at the latest. If your request is rejected or you are not satisfied with our answer, you may complain to the Personal Data Protection Authority (KVKK).

10. Children

Our services are intended for adults. Bookings for children must be made by a parent or guardian, and we do not knowingly collect personal data from children without this.

11. Changes to this policy

We may update this privacy policy when our services or the law change. The date of the latest update is shown at the top of this page. The Cookie Policy explains our use of cookies in more detail, and our Terms and Conditions apply to every rental.