Privacy notices for our forms

1. Patient request privacy notice

Data collected

Name, country, email and telephone; selected treatment, clinic and procedure; information you enter in the request message; the page from which the request was sent; and a one-way IP summary held briefly to prevent abuse. Diagnosis, treatment history, X-ray or report details entered in the message may constitute health data.

Purpose and legal basis

Identity, contact and request data are processed to receive and assess your request, contact you and provide the requested service, because processing is directly necessary to establish or perform the requested service under Article 5/2-c of Turkish Law No. 6698. The anti-abuse security record is processed on the basis of legitimate interests under Article 5/2-f. Health data are processed under Article 6 only on the basis of the separate explicit consent below.

Who may receive the data?

Data may be processed, strictly within their duties, by authorised All Clinics World operations personnel and by Netinternet Bilişim Teknolojileri A.Ş., our data-processing hosting provider in Türkiye. Requests are not sent to clinics automatically. Where necessary to progress your request, your health and contact data may be shared, within the scope of your explicit consent, only with the clinic you selected or clinics relevant to your request. Data may also be disclosed to competent public authorities where legally required.

Retention and international transfers

Form records are encrypted and stored in Türkiye and are not transferred abroad. Identifiable patient requests and health data are retained for no longer than 12 months after the last action, unless a live dispute or legal obligation requires limited longer retention. The security IP summary is retained for no longer than 24 hours. Records are then deleted or irreversibly anonymised.

2. Clinic application privacy notice

Data collected

Clinic name, legal name, type, address, website, Google Maps and social links; authorised contact name, role, email and telephone; service, specialty, language, doctor, price, description, media and licence information; application message; and referral, referring-page and campaign details.

Purpose and legal basis

Application and contact data are processed to review the application, resolve missing information, prepare a bilingual profile draft and manage clinic approval, because processing is directly necessary to establish or perform the requested listing arrangement under Article 5/2-c of Law No. 6698. Verification of authorisation and public organisation details, record security and management of possible disputes are based on legitimate interests under Article 5/2-f. The approved organisation profile may then be published. Patient data must not be entered in the clinic form.

Who may receive the data?

Only authorised All Clinics World operations personnel and, strictly within its hosting duties, the provider in Türkiye may access the application record. Profile information is not published automatically; only organisation details approved in their final form by the clinic and media whose usage rights are confirmed become public. Data may also be disclosed to competent public authorities where legally required.

Retention and international transfers

Application records are encrypted and stored in Türkiye and are not transferred abroad. Published organisation profile details are retained while the profile remains active; the application and authorised-contact record is retained for no longer than 24 months after the last action. Records are then deleted or irreversibly anonymised.

3. Optional analytics

If you allow analytics, Google Analytics 4 receives the clean page path, referring domain, language, six approved UTM campaign fields (source, medium, campaign, content, term and ID), broad treatment category, coded clinic choice and four anonymous actions. Microsoft Clarity records how pages are used and interacted with. Names, email addresses, telephone numbers, messages, detailed procedures and other form entries are not sent to these tools; the full query-string URL is not sent, and every form is masked in Clarity. These providers may process analytics data outside Türkiye. Until you allow analytics, the tags are not loaded and no analytics cookies are written. Your choice is stored in localStorage; campaign and coded form context for an allowed session are stored in sessionStorage; and a first-party, personal-data-free technical marker distinguishing a genuinely successful form submission from a direct visit to the thank-you route is retained for no more than 120 seconds. You can change your preference at any time through “Cookie preferences” in the footer.

Your rights

To exercise your rights under Article 11 of Law No. 6698, email info@seyar.com.tr and identify yourself and your request. Requests are handled free of charge within the statutory period, except where an additional cost is permitted by the competent authority’s tariff.