Privacy Policy

This Privacy Policy applies between Directlifly.com ("we", "us", or "Directlifly") and any person ("you" or the "user") who accesses or uses the website directlifly.com and any related content or services (collectively, the "Services").

Directlifly processes personal data in accordance with applicable legislation, including the Turkish Personal Data Protection Law (KVKK, Law No. 6698) and the EU General Data Protection Regulation (GDPR). We apply the stricter of the two where they differ.

Directlifly is a flight and travel discovery tool. We do not sell tickets, process payments, or create user accounts. The Services allow you to search for non-stop routes and be redirected to third-party partner platforms where transactions take place. As a result, we collect significantly less personal data than a typical travel booking service.

If you have any questions about how we handle your data, contact us at [email protected]

Because Directlifly does not require account registration, we do not collect your name, email address, or payment information directly.

We collect the following data automatically when you use the Services:

• Usage data: pages visited, search queries entered, buttons clicked, time spent on pages
• Technical data: browser type and version, operating system, device type, screen resolution, preferred language
• Location data: country and approximate region, derived from your IP address
• Referral data: the URL you came from and the URL you were redirected to

We use cookies for two purposes:

• Analytics cookies — to understand how the Services are used, via Umami Analytics. Umami is configured to collect anonymous, aggregated data only. No personal identifiers are stored.
• Affiliate/tracking cookies — when you click through to a partner platform, a cookie may be set to attribute the referral. This is standard affiliate tracking and does not include financial or identity data.

We do not collect sensitive personal data as defined under KVKK and GDPR (e.g. health data, political opinions, ethnic origin, biometric data).

We use the data we collect to:

• Operate and improve the Services
• Understand how users search and navigate
• Attribute referrals to partner platforms (affiliate tracking)
• Detect and prevent abuse or technical issues
• Comply with legal obligations

We do not use your data for targeted advertising, profiling, or automated decision-making. We do not sell, rent, or exchange your data with third parties for marketing purposes.

Under GDPR, we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f)): for analytics and service improvement
• Consent (Art. 6(1)(a)): for affiliate/tracking cookies
• Legal obligation (Art. 6(1)(c)): where required by applicable law

Under KVKK, processing is conducted based on explicit consent for cookie-based tracking and legitimate purposes as defined under Article 5 of the KVKK for analytics and service operation.

Analytics data collected via Umami is anonymised and not linked to any identifiable individual. Umami does not use cross-site tracking or fingerprinting.

You may disable cookies in your browser settings at any time. Disabling cookies does not affect your ability to use the Services.

When you click through to a partner platform, you leave Directlifly. Your interaction with that platform is governed by their own privacy policy. Directlifly is not responsible for how partner platforms process your data.

We use the following third-party services to support, analyse, and operate our Services:

Where processors are located outside the EU/EEA or Turkey, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) under GDPR or equivalent measures under KVKK.

• Analytics data: retained in aggregated, anonymous form; no personal data is stored
• Affiliate tracking data: cookies expire within 30 days; referral logs retained for up to 90 days
• Server logs: automatically deleted after 30 days

Under GDPR and KVKK, you have the following rights:

• Right to access: request a copy of personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion where there is no legitimate reason to continue processing
• Right to restriction: request limitation of processing in certain circumstances
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent for cookies at any time via your browser settings
• Right to data portability: request your data in a portable format where technically feasible

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

EU/EEA users may lodge a complaint with their local data protection authority. Users in Turkey may file a complaint with the Personal Data Protection Authority (kvkk.gov.tr).

We may update this Privacy Policy from time to time. The updated version will be published at directlifly.com/privacy with a revised effective date. Continued use of the Services after an update constitutes acceptance of the revised policy.

For any questions, requests, or complaints regarding this Privacy Policy:

Email: [email protected]
Website: directlifly.com