Privacy Policy

Who is responsible for your data

Core Health Turkey (“Core Health Turkey”, “we”) is the data controller for the personal data described in this policy. We process data under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

You can contact us about privacy at any time at [email protected] or by post at the address in the company details below.

What data we collect

Depending on how you interact with us, we may process:

• Contact details: your name, email address, phone number and country code.
• Your request: the treatment you are interested in, your message and preferred travel dates.
• Health information: photos, medical reports, health history and other details you choose to share so that your case can be assessed. This is special-category data and we only process it with your explicit consent.
• Travel and booking details: if you go ahead with a treatment, information needed to organise it, such as flight details and identity documents required by the hospital or hotel.
• Messages: our correspondence with you by email, WhatsApp or phone.
• Technical data: your IP address, browser type and pages visited, used to run and protect the website. Analytics data is collected only if you accept analytics cookies.

Why we use your data and on what legal basis

• To answer your enquiry and arrange your free consultation: steps taken at your request before an agreement, and our legitimate interest in replying to you.
• To have your case assessed by a surgeon or specialist, using your health information: your explicit consent.
• To organise your treatment, hotel, transfers and interpreter: performance of our agreement with you.
• To follow up on your recovery after you return home: your consent and the performance of our agreement.
• To keep the website secure and prevent spam and misuse: our legitimate interest.
• To understand how the website is used: your consent to analytics cookies.
• To meet legal obligations, for example accounting and tax rules: legal obligation.

Who we share your data with

We share personal data only as far as needed for the purposes above, with:

• the partner hospital and the surgeon or specialists who assess and treat you, who become responsible for your medical records;
• hotels, transfer providers and interpreters, limited to what they need to provide their service;
• IT service providers who host our website and email on our behalf;
• public authorities, when the law requires it.

We do not sell your personal data, and we do not use your health information for advertising.

International transfers

Because our patients live in many countries and some of our service providers are based outside Türkiye, your data may be transferred abroad. We do so only in line with KVKK and, where applicable, the GDPR, for example on the basis of adequate safeguards or, where required, your explicit consent.

How long we keep your data

We keep enquiry data only as long as needed to answer you and follow up on your request. If you become a patient, we keep the records related to your treatment and payments for as long as the law requires. Data used only for website security is deleted after a short period. When data is no longer needed, we delete, destroy or anonymise it.

Your rights

Under KVKK (Article 11) and, where applicable, the GDPR, you have the right to:

• find out whether we process your data and receive a copy of it;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data or restrict how we use it;
• object to processing based on our legitimate interest;
• receive your data in a portable format, where applicable;
• withdraw your consent at any time, without affecting processing carried out before;
• complain to the Turkish Personal Data Protection Authority (KVKK) or to the data protection authority in your country.

To use your rights, write to us at [email protected]. We answer within the time limits set by law, and at the latest within 30 days.

Security

We use technical and organisational measures to protect your data, including encrypted connections (HTTPS), spam protection on our forms and access only for the people who need it. Please share photos and medical reports through the channels we suggest.

Minors

Our services are intended for adults. If an enquiry concerns a person under 18, it must be made by a parent or legal guardian.

Third-party services and links

Our website links to, or can load content from, third parties such as WhatsApp, Instagram, YouTube, Google Maps, Trustpilot and WhatClinic. When you use these services, their own privacy policies apply. The Google Map loads only when you click to show it. Details are in our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.