Privacy Policy

TakeCare Turkey coordinates medical treatment in Istanbul for patients travelling from abroad. For the personal data described here we are the data controller: [registered legal entity name], [registered address], [trade registry / VERBIS number]. You can reach us at contact@takecareturkey.com or +1 (833) 588-0009.

We are not a hospital and we do not practise medicine. Your treatment is carried out by an accredited partner hospital, which is a separate controller of the clinical records it creates.

• What you give us. Name, phone number, email, country, the treatment you are asking about, and anything you choose to write to us.
• Health information. The medical details you share so a clinical team can tell you whether treatment is suitable — your history, medication, photographs or scans if you send them.
• Travel and booking details. Preferred dates, flight itinerary, accommodation and transfer needs.
• Payment. Your deposit is taken by Stripe. We receive a confirmation and the last four digits; we never see or store your full card number.
• Calls and messages. Where we call you or you reply to us, the call may be recorded and transcribed and the messages kept, so the team has an accurate record of what was agreed. We tell you at the start of a call.
• Technical data. IP address, device and browser, pages viewed, and the campaign that brought you here. See the Cookie Policy.

Health data is special-category data. We process it only with your explicit consent, given separately from any other agreement, and you can withdraw it at any time.

Everything else we process to answer your enquiry and take steps at your request before a contract (arranging consultation, quotation, dates and transfers), to perform that contract once you reserve, to meet legal and accounting obligations, and — for anonymous traffic measurement — on the basis of our legitimate interest in understanding which pages help patients.

We keep your record in one place and use a small number of processors, each under a data processing agreement:

• HubSpot — our CRM and the system of record for your enquiry and journey.
• Vapi AI — the assistant that may place the first call, and its transcripts.
• Twilio — SMS and WhatsApp messages.
• Stripe — deposit payments.
• Vercel and Upstash — hosting, patient-portal sessions and short-lived caching.
• The partner hospital and clinicians treating you, and the transfer and accommodation providers arranged for your trip.

We do not sell your data and we do not share it for anyone else's marketing.

These providers are established in the United States, so your data is transferred outside Türkiye and the EEA. We rely on your explicit consent for the transfer and on the contractual safeguards in each processor's data processing agreement, including the European Commission's standard contractual clauses where they apply. [confirm the KVKK Art. 9 transfer route relied on]

Enquiries that do not lead to treatment: [retention period, e.g. 24 months] from our last contact. Records connected to treatment or payment: for as long as accounting and health-record obligations require, and no longer. Call recordings and transcripts: [retention period], after which they are deleted.

You can ask us what we hold, have it corrected, have it deleted, restrict or object to our use of it, receive a copy in a portable form, and withdraw consent at any time — withdrawing does not affect what we did lawfully beforehand. Write to contact@takecareturkey.com and we will answer within thirty days.

If you are not satisfied you can complain to the Turkish Personal Data Protection Authority (KVKK) or, in the EEA/UK, to your local supervisory authority.

Data is encrypted in transit, access is limited to the coordinators who need it, and administrative accounts require multi-factor authentication. No system is perfectly secure; if a breach affects your data we will notify you and the authority as the law requires.

Our services are for adults. Where a patient is under 18 we deal with a parent or legal guardian.

If we change this policy we will update the date above and, where the change is material, tell you directly.