This Privacy Policy explains how Medistra Care (“we”, “us”) collects, uses and protects your personal data when you visit medistracare.com, contact us through WhatsApp or send us a medical request through our website. We process personal data in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies, the EU General Data Protection Regulation (“GDPR”).
Who is responsible for your data
The data controller is Medistra Care.
- Email: info@medistracare.com
- WhatsApp and phone: +90 501 561 48 04
You can contact us at any time about this policy or your personal data using the details above.
What personal data we collect
Medical Request Form. When you submit the form on our Contact page we receive: the treatment you are interested in, the description of your request, your full name, the country you are travelling from, your preferred language, your preferred travel period, your approximate budget (optional), your WhatsApp number, and a record of your consent (date, time and version of the consent wording).
WhatsApp. When you use our “Free Consulting” form, the details you enter (name, WhatsApp number, optional email, age range and the procedure you are interested in) are not sent to our website. They are placed into a message in your own WhatsApp app, and we only receive them if you choose to send that message. Messages you exchange with us on WhatsApp are processed under WhatsApp’s own terms and privacy policy.
Email and phone. Any information you choose to send us by email or share during a call.
Technical data. When you visit the website, our hosting provider automatically processes technical information such as your IP address, browser type and the pages requested, in order to deliver the website and protect it against abuse.
We do not ask you to upload medical files through our website. Please do not include information that is not needed for your request.
Health information
Information about your health (for example the treatment you are interested in and the description of your request) is a special category of personal data. We process it only with your explicit consent, which you give by ticking the consent box on the form (KVKK Article 6; GDPR Article 9(2)(a)), and only for the purposes described in this policy.
Giving this information is voluntary. If you prefer not to share health information online, you can contact us by WhatsApp or phone instead.
Why we use your data and on what legal basis
- To respond to your request and coordinate your enquiry — contacting you, understanding your needs and explaining the next steps (your explicit consent; steps taken at your request before entering into a contract).
- To arrange consultations and treatment planning with healthcare providers — only when you ask us to proceed, and only the information the provider needs (your explicit consent; performance of a contract).
- To help with travel and accommodation arrangements that you request (performance of a contract).
- To operate and secure the website and prevent spam and misuse (our legitimate interests).
- To comply with legal obligations and to establish, exercise or defend legal claims (legal obligation; legitimate interests).
We do not use your data for advertising, we do not sell it, and we do not make decisions about you based solely on automated processing.
International transfers
Some of our service providers are located outside Türkiye (for example in the United States or the European Union). When your data is transferred abroad, we rely on appropriate safeguards such as standard contractual clauses and, for transfers under KVKK, the safeguards and notifications required by Article 9 of KVKK, or your explicit consent where the law allows.
How long we keep your data
We keep the information from your request for up to 24 months after our last contact with you, unless you become our client, in which case we keep it for as long as needed to provide our services and to meet our legal, accounting and dispute-resolution obligations. When it is no longer needed we delete or anonymise it.
The website itself does not store your form submissions: each request is delivered by email to our patient coordination team.
How we protect your data
We use encrypted connections (HTTPS), restrict access to your information to the members of our team who need it, and choose service providers with recognised security practices. No method of transmission over the internet is completely secure, so please avoid sending more information than your request requires.
Your rights
Under KVKK (Article 11) and, where applicable, the GDPR, you have the right to:
- learn whether we process your personal data and request information about it;
- learn the purpose of the processing and whether the data is used accordingly;
- know the third parties, in Türkiye or abroad, to whom your data is transferred;
- request correction of incomplete or inaccurate data;
- request deletion or destruction of your data;
- request that corrections or deletions are notified to the third parties who received the data;
- object to a result that is to your disadvantage and arises exclusively from automated processing;
- claim compensation for damage caused by unlawful processing;
- withdraw your consent at any time, without affecting processing carried out before the withdrawal;
- where the GDPR applies, request restriction of processing, data portability and object to processing based on legitimate interests.
To exercise your rights, write to info@medistracare.com. We will reply free of charge within 30 days at the latest. We may ask you to confirm your identity before we act on your request.
If you are not satisfied with our answer, you can lodge a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) or, if you live in the European Economic Area, with your local data protection authority.
Links to other services
Our website links to WhatsApp and may link to other websites. We are not responsible for the privacy practices of those services; please read their own policies.
Children
Our website and services are intended for adults aged 18 or over. Please do not send us a request on behalf of a person under 18 through the website; contact us by phone or WhatsApp instead so that we can involve a parent or legal guardian.
Changes to this policy
We may update this Privacy Policy from time to time. The latest version is always available on this page, with the date of the last update shown at the top.