Privacy Policy

1. Information We Collect

• Personal identifiers: full name, email address, phone number, nationality and country of residence.
• Health information you voluntarily share via our contact forms or direct communications, including desired treatment and relevant medical history.
• Technical data: IP address, browser type, pages visited and time spent on our website (collected via Google Analytics).

2. How We Use Your Information

• To prepare a personalised treatment proposal and coordinate your medical journey.
• To communicate with you regarding appointments, procedures and aftercare.
• To improve our website and services based on anonymised usage statistics.
• To comply with legal obligations under Turkish law and applicable international regulations.

3. Legal Basis for Processing (GDPR)

Where you are an EU/EEA resident, we process your data on the basis of your explicit consent (Art. 6(1)(a) GDPR) and, where health data is involved, explicit consent under Art. 9(2)(a) GDPR. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Turkish Data Protection Law (KVKK)

All data processing activities also comply with Turkish Law No. 6698 on the Protection of Personal Data. Prime Clinic Istanbul is registered as a data controller under KVKK. You have the right to apply to us to learn whether your data is processed, request information about it, and request correction or deletion.

5. Medical Data Confidentiality

Health-related information is treated with the highest level of confidentiality. It is shared exclusively with the licensed medical professionals and hospitals directly involved in your care, and only to the extent necessary for treatment planning and coordination.

6. Data Sharing & Third Parties

• We do not sell, rent or trade your personal data to any third party.
• We may share data with partner hospitals and surgeons for treatment coordination purposes.
• Service providers (e.g. Google Analytics) process data on our behalf under data processing agreements.
• We may disclose data when required by law or court order.

7. Data Retention

We retain contact and consultation data for up to 3 years from your last interaction with us. Medical coordination records are retained for up to 10 years as required by Turkish health regulations. You may request earlier deletion where legally permissible.

8. Your Rights

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your data where there is no legitimate reason for continued processing.
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• To exercise any of these rights, contact us via WhatsApp at +90 535 915 6434.

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration or destruction. All data transmissions are encrypted via TLS/HTTPS.

10. Contact

For any privacy-related enquiries or to exercise your rights, please contact us via WhatsApp: +90 535 915 6434.