Home  >  Privacy Policy

Privacy Policy

This Privacy Policy explains how Healt İn Turkey (“we”, “our”, “the site”) collects, uses, stores and protects information you provide when using healtinturkey.com. We comply with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK No. 6698).

Last updated: 25 May 2026

1. Who we are

Healt İn Turkey is an independent medical-tourism information and clinic-selection platform. We do not own or operate hospitals, clinics or surgical practices. Our role is to provide research-based guidance to international patients considering treatment in Turkey.

Data controller (KVKK Madde 3 / GDPR Art. 4): Healt İn Turkey, contactable at [email protected].

2. What information we collect

2.1 Information you provide via forms

  • Your name, country and email address.
  • Optional phone number (we only ask if you want a call-back).
  • A short description of the treatment you are researching.
  • Optional photographs you attach to a quote-request (e.g. dental, hair, skin) — only used to forward to relevant accredited clinics for an initial assessment.

2.2 Information collected automatically

  • Standard server logs: IP address, browser, operating system, referring page, timestamp. Used for security and aggregate analytics.
  • Cookies for site preferences, anti-spam and (if you consent) analytics.

2.3 What we do not collect

  • We do not collect or store full medical records on this website.
  • We do not collect payment-card details. Payments are taken directly by the clinic you choose to engage.

3. How we use your information

  • To respond to your enquiry — match your request with one or more accredited Turkish clinics relevant to the treatment you asked about.
  • To send follow-up information — guides, quote responses, scheduling assistance.
  • To improve our content — aggregate, non-identifying analytics tell us which guides are most useful.
  • To comply with legal obligations — record-keeping where required by law.

4. Legal bases (GDPR Art. 6)

  • Consent (Art. 6(1)(a)) — when you submit a form, you consent to your details being shared with clinics matched to your enquiry.
  • Legitimate interest (Art. 6(1)(f)) — to operate, secure and improve the website.
  • Legal obligation (Art. 6(1)(c)) — to retain limited records where required.

5. Sharing your information

We share the minimum information required with the accredited clinic(s) you have asked us to contact. We do not sell your information, ever. We may also share data with:

  • Our email and hosting providers (data processors under written agreement).
  • Law-enforcement or regulators, only where legally compelled.

6. International transfers

Clinics matched to your enquiry are based in the Republic of Türkiye. By submitting a form you consent to your enquiry data being processed in Türkiye. Türkiye is recognised as a legitimate destination for personal data under KVKK Madde 9; for EEA/UK users we rely on Article 49(1)(a) GDPR consent for transfers when no adequacy decision applies.

7. Data retention

  • Enquiry records: 24 months from last interaction, then deleted.
  • Email correspondence: 24 months, then deleted unless an active treatment plan is in progress.
  • Server logs: 90 days.

8. Your rights

Under GDPR (Articles 15–22) and KVKK (Madde 11) you have the right to:

  • Access the personal data we hold on you.
  • Have it corrected or erased.
  • Restrict or object to processing.
  • Withdraw consent at any time.
  • Lodge a complaint with a supervisory authority (ICO in the UK, your national DPA in the EU, KVKK in Türkiye).

To exercise any right, email [email protected]. We will respond within 30 days.

9. Security

The site uses HTTPS (TLS 1.2+), HSTS, server-side firewalls and rate-limiting. Lead-form data is transmitted over encrypted channels and stored in an access-controlled WordPress database. Photographs you attach are stored only as long as needed to forward to the requested clinic.

10. Cookies

We use the smallest possible set of cookies:

  • Strictly necessary: session, anti-spam, security.
  • Performance: anonymised analytics (set only after consent if you are in the EEA/UK).

You can disable cookies in your browser at any time. The site remains functional with cookies disabled.

11. Children

The site is intended for adults considering medical treatment. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently collected information from a minor, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy when we change how we process data. The “Last updated” date at the top of the page will reflect the most recent revision.

13. Contact

For privacy questions or data-subject requests: