Privacy Policy
Last updated: 10 July 2026
This notice explains what Istanbul European Clinic Medical Travel Services does with your personal data. It covers only what Istanbul European Clinic does. The independent clinicians we introduce you to decide for themselves how they use your clinical information.
Who we are
Istanbul European Clinic Medical Travel Services is the controller of the personal data described here. Balmumcu, Bestekar Şevki Bey Sk. No:16-18, 34353 Beşiktaş/İstanbul, Türkiye. Email: contact@istanbuleuropeanclinic.com. Telephone: +90 507 064 08 21.
What Istanbul European Clinic is, and what that means for your data
Istanbul European Clinic is not a clinic, a hospital or a healthcare provider. We do not diagnose, prescribe or perform medical procedures, we do not employ the surgeons and dentists we introduce you to, and we do not own the facilities where treatment takes place. We coordinate the non-clinical side of medical travel: preparing your quote, guidance on flights, accommodation, transfers, interpretation, and communication with your chosen clinician.
This matters for your data. When we introduce you to a partner clinician, that clinician becomes a separate, independent controller of the clinical information you share with them. They decide how it is used and they answer to you for it.
The personal data we collect
- When you submit an enquiry form. Your first name, last name, email address, telephone number including the country dialling code, your preferred language, the treatment you are interested in, the free-text message you write, and the page you submitted it from.
- Health information you choose to share. Anything you write in the message about your health, your medical history, your medication or previous procedures, and any photograph you send us, is special category data about your health. You do not have to give us any health information in order to contact us. If you would rather not, write only which treatment interests you, and your clinician will collect clinical details directly from you.
- When you contact us by WhatsApp, email or telephone. The content of those conversations, your telephone number and your email address.
- When you browse the site. Nothing, until you accept cookies. Before you accept, our consent manager (Cookiebot) blocks non-essential cookies, so no analytics cookie is set and no tracking request is sent. If you accept, a Google tag and HubSpot collect usage data, as described in our Cookie Policy. Our hosting provider processes technical server logs, including your IP address, to deliver the site and keep it secure.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry, prepare a quote, coordinate your trip | Performance of a contract, or steps taken at your request before entering into one |
| Process any health information you send us | Your explicit consent (Article 9(2)(a) UK GDPR and EU GDPR; explicit consent under Article 6(3) of the Turkish Personal Data Protection Law) |
| Introduce you to a partner clinician and pass on what they need | Your explicit consent, and performance of our coordination service |
| Arrange accommodation, transfers and interpretation | Performance of a contract |
| Keep records for accounting and tax, and to establish or defend legal claims | Legal obligation, and our legitimate interests |
| Analytics | Your consent, given through the cookie banner |
| Keep the site secure and prevent abuse | Our legitimate interests |
Who receives your data
We do not sell your personal data.
- Independent partner surgeons, dentists, clinics and hospitals in Türkiye. We pass on what they need in order to assess you and quote. They then act as independent controllers.
- Travel suppliers: hotels, transfer companies and interpreters, limited to what a booking requires.
- Providers acting on our instructions: HubSpot (customer relationship management, and website analytics after you consent), Cookiebot (cookie consent management), Google Workspace (our email), Netlify (website hosting and delivery), Cloudflare (domain name resolution), Google (a Google tag for analytics, only after you consent), and Meta (WhatsApp, if you message us that way).
- Professional advisers and authorities, where the law requires it, or to establish or defend a legal claim.
Transfers outside the United Kingdom and the European Economic Area
Istanbul European Clinic is based in Istanbul, so when you contact us your personal data is transferred to Türkiye. Some of the providers listed above also process data in the United States.
Türkiye is not covered by a United Kingdom or European Union adequacy decision. This means your data may not receive the same level of protection as it would at home, and you may find it harder to enforce your rights or obtain redress. We rely on your consent for this transfer, which you give when you send us an enquiry, and you can withdraw it at any time by emailing us.
Our providers publish their own data processing terms, which include the European Commission’s standard contractual clauses.
How long we keep it
We keep your enquiry for as long as we need it to answer you and to coordinate any trip that follows, and afterwards only for as long as we need it to deal with questions or complaints about that trip, or for as long as the law requires us to keep the record. Accounting records are kept for the period Turkish tax law requires. Records of the consent you gave are kept for as long as we rely on that consent, and for a reasonable period afterwards so that we can show it was given.
When we no longer need your data, we delete it or anonymise it.
Your rights
Subject to the conditions in the applicable law, you have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, and withdrawing it does not affect the lawfulness of what we did before you withdrew it.
To exercise any of these rights, email contact@istanbuleuropeanclinic.com. We will respond within 30 days.
If you are unhappy with our response, you can complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu, kvkk.gov.tr). If you are in the United Kingdom you may complain to the Information Commissioner’s Office (ico.org.uk). If you are in the European Economic Area you may complain to the supervisory authority of the country where you live or work.
Withdrawing consent
To withdraw your consent for us to process the health information you sent us, to be contacted about your enquiry, or to the transfer of your data to Türkiye, email contact@istanbuleuropeanclinic.com.
To change your cookie choices, use the Cookie settings link, which reopens the consent banner managed by Cookiebot. Withdrawing your consent is as easy as giving it, and once you withdraw, the analytics cookies are no longer set.
Security
The site is served over HTTPS with a strict Content Security Policy, HTTP Strict Transport Security and DNSSEC. It is a static site: there is no database, no content management system, no administration login, and no third-party script of any kind runs before you consent. Enquiries are transmitted directly to our customer relationship management system over an encrypted connection, and access to that system is restricted to authorised Istanbul European Clinic staff.
Children
We do not knowingly collect personal data from children. If you are under 18, please ask a parent or guardian to contact us on your behalf.
Changes to this notice, and how to contact us
We will publish any changes on this page and update the date at the top. If a change is significant, we will say so. Questions about this notice: contact@istanbuleuropeanclinic.com, or write to us at Balmumcu, Bestekar Şevki Bey Sk. No:16-18, 34353 Beşiktaş/İstanbul, Türkiye.