Privacy Policy

Privacy Policy for Medical Tourism Turkey

Effective Date: 01 January 2025 Last Updated: 21 September 2026

Medical Tourism Turkey (“MTTurkey”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose, transfer and protect your personal data when you visit www.mtturkey.com, submit an enquiry, request information about healthcare or medical tourism services, communicate with us by email, telephone, WhatsApp or other communication channels, or otherwise interact with our services.

Medical Tourism Turkey operates in the medical tourism sector and may facilitate communication and coordination between international patients and healthcare providers, clinics, hospitals, doctors and other relevant service providers in Türkiye.

Because some enquiries may involve medical conditions, treatment requests, photographs, medical reports or other health-related information, certain information processed by us may constitute special category/sensitive personal data and may therefore be subject to additional legal protections.

We process personal data in accordance with applicable data protection legislation, including, where applicable, the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the EU General Data Protection Regulation (“GDPR”), and the UK General Data Protection Regulation (“UK GDPR”).

1. Data Controller and Business Information

For the purposes of applicable data protection legislation, the entity responsible for the processing of personal data in connection with Medical Tourism Turkey services is:

AKEL TURİZM ORGANİZASYON GÜZELLİK MERKEZİ TEKS. İTH. İHR. SAN. VE TİC. LTD. ŞTİ.

Operating Brand: Medical Tourism Turkey (MTTurkey)

Address: Meltem Mahallesi Sakıp Sabancı Bulvarı Rixos Otel Sit. No:3B, Muratpaşa, Antalya, Türkiye

Website: www.mtturkey.com
Email: [email protected]
Telephone & WhatsApp: +44 7576 574437

2. Personal Data We May Collect

Depending on how you interact with us and the services you request, we may collect and process the following categories of personal data:

2.1 Identity and Contact Information

This may include:

• Full name
• Date of birth or age, where relevant
• Gender, where relevant to the requested healthcare service
• Nationality and country of residence
• Telephone number
• Email address
• Postal address
• Preferred language
• Other contact details voluntarily provided by you

2.2 Medical and Health Information

When necessary to respond to a treatment enquiry or facilitate healthcare services, you may voluntarily provide information including:

• Medical history
• Current medical conditions
• Previous treatments or procedures
• Medications
• Allergies
• Treatment preferences
• Medical reports and test results
• Laboratory or diagnostic results
• X-rays, scans or other medical images
• Photographs relevant to the requested treatment
• Information concerning planned or previous surgical procedures
• Other health-related information you choose to provide

Health information may constitute sensitive or special category personal data under applicable data protection legislation and is treated with additional safeguards.

Please only provide medical information that is reasonably necessary for your enquiry or requested service.

2.3 Travel and Service Information

Where required to arrange medical tourism services, we may collect information such as:

• Travel dates
• Flight information
• Hotel or accommodation information
• Airport transfer information
• Appointment dates
• Treatment schedules
• Companion or accompanying-person information

2.4 Communication Data

We may process information contained in communications between you and Medical Tourism Turkey through:

• Email
• Website contact forms
• WhatsApp
• Telephone calls
• Social media messaging
• Other communication platforms used by our business

This may include correspondence, enquiry history and information you voluntarily provide during communications.

2.5 Technical and Device Information

When you access our website, certain technical information may be collected automatically, including:

• IP address
• Browser type and version
• Device type
• Operating system
• Device identifiers
• Language settings
• Time zone
• Approximate location derived from IP address
• Website access and security logs

2.6 Website Usage Data

We may collect information about how visitors interact with our website, including:

• Pages visited
• Time spent on pages
• Referral sources
• Links clicked
• Website navigation
• General interaction with website features

Where required by applicable law, non-essential analytics or advertising technologies will only be activated after the appropriate consent has been obtained.

3. How We Collect Personal Data

We may collect personal data:

• Directly from you when you complete a website form
• When you contact us by telephone or WhatsApp
• When you communicate with us by email
• When you contact us through social media or other messaging platforms
• When you submit medical documents, photographs or treatment information
• Through cookies and similar technologies, subject to applicable consent requirements
• From healthcare providers or business partners where this is necessary, lawful and relevant to the service requested by you
• From a person acting on your behalf, where appropriately authorised

If another person provides information on your behalf, we may take reasonable steps to verify that they are authorised to do so where appropriate.

4. How We Use Your Personal Data

We may process personal data for the following purposes:

• Responding to enquiries
• Providing information about available medical treatments and healthcare services
• Evaluating and forwarding treatment enquiries to appropriate healthcare providers
• Facilitating communication between patients and clinics, hospitals, doctors or other healthcare professionals
• Obtaining treatment plans or quotations from healthcare providers
• Coordinating appointments
• Assisting with travel, accommodation and transfer arrangements where included in the requested service
• Providing patient support before, during and after a medical tourism journey
• Managing customer relationships and enquiries
• Maintaining appropriate business and communication records
• Operating and securing our website
• Detecting and preventing fraud, misuse and security incidents
• Improving our services and website
• Complying with applicable legal, regulatory and administrative requirements
• Establishing, exercising or defending legal claims
• Sending marketing communications where permitted by law and where any required consent has been obtained

We do not process personal data for purposes incompatible with the purposes for which it was collected unless permitted or required by applicable law.

5. Legal Bases for Processing

Depending on the circumstances and applicable law, we may process personal data on one or more of the following legal bases:

Consent

Where applicable, we may rely on your consent for specific processing activities.

Where explicit consent is legally required, including for certain processing of sensitive or health-related information, we will seek such consent separately where applicable.

Contractual Necessity

We may process personal data where necessary to take steps at your request before entering into a contract or to provide services you have requested.

Legal Obligations

We may process personal data where necessary to comply with legal, regulatory, tax, accounting or other obligations applicable to us.

Legitimate Interests

Where permitted by applicable law, we may process personal data where necessary for legitimate business interests, including:

• Operating our services
• Managing enquiries
• Improving service quality
• Maintaining website and information security
• Preventing fraud and misuse
• Establishing or defending legal claims

Where we rely on legitimate interests, we consider the impact on your privacy and applicable rights.

Processing of Health and Other Sensitive Data

Health information receives enhanced protection under applicable data protection legislation.

Where required, health or other sensitive personal data will only be processed where an appropriate legal condition exists under the applicable legislation, which may include explicit consent or another legally recognised condition.

Nothing in this Privacy Policy should be interpreted as replacing a separate consent mechanism where explicit consent is legally required.

6. Sharing Personal Data with Healthcare Providers

To provide medical tourism coordination services, it may be necessary to share relevant personal and medical information with healthcare professionals and organisations.

Depending on your enquiry, recipients may include:

• Hospitals
• Clinics
• Doctors
• Dentists
• Surgeons
• Medical specialists
• Diagnostic centres
• Rehabilitation providers
• Other healthcare professionals involved in evaluating or providing the requested service

Only information reasonably necessary for the relevant consultation, quotation, treatment assessment or healthcare service should be shared.

Healthcare providers receiving your information may process your data under their own legal obligations and privacy policies and may act as independent data controllers for their own medical services.

7. Other Third Parties and Service Providers

We may use third-party service providers to support our operations.

Depending on the services actually used, these may include providers of:

• Website hosting
• Cloud infrastructure
• Email services
• Customer relationship management (CRM) systems
• Communication and messaging services
• IT and cybersecurity services
• Website analytics
• Advertising and marketing technology
• Payment processing, where applicable
• Travel, transportation or accommodation services where requested

These organisations may process personal data only where there is an appropriate legal basis and subject to applicable contractual and data protection requirements.

We may also disclose personal data where required by law, regulation, court order or a competent public authority.

We do not sell personal or medical information to third parties.

8. WhatsApp and Other Communication Platforms

If you choose to communicate with Medical Tourism Turkey through WhatsApp or another third-party messaging platform, information you provide through that service may also be processed by the relevant platform provider according to its own terms and privacy practices.

We recommend that you avoid sending unnecessary sensitive or medical information through messaging platforms.

Where detailed medical documentation is required, we may recommend an alternative method of transmission where appropriate.

9. Cookies, Analytics and Advertising Technologies

Our website may use cookies and similar technologies to:

• Enable essential website functionality
• Maintain website security
• Remember certain preferences
• Understand website usage
• Measure website performance
• Evaluate marketing campaigns
• Provide relevant advertising, where permitted

Depending on the technologies implemented on the website, third-party services may include analytics or advertising providers such as Google or Meta.

Non-essential cookies and similar technologies will be managed in accordance with applicable consent requirements.

Further information about cookies, their purposes, duration and available controls should be provided in our separate Cookie Policy and cookie consent interface.

10. Marketing Communications

Where permitted by applicable law, we may send information about services, treatments, promotions or other relevant updates.

Where consent is required for marketing communications, such communications will only be sent after the appropriate consent has been obtained.

You may withdraw your marketing consent or unsubscribe from marketing communications at any time.

Withdrawal from marketing communications does not prevent us from contacting you where communication is necessary to respond to an existing enquiry, provide a requested service or comply with a legal obligation.

11. International Transfers of Personal Data

Because Medical Tourism Turkey works with international patients and may use technology and service providers operating internationally, personal data may be transferred to or accessed from countries other than the country in which you reside.

For example, personal data submitted by an individual located in the United Kingdom or European Economic Area may be transferred to Türkiye where Medical Tourism Turkey and relevant healthcare providers operate.

In addition, certain technology, hosting, communication, CRM, analytics or other service providers may process information in other jurisdictions.

Where an international transfer is subject to applicable data protection restrictions, we take steps designed to ensure that an appropriate lawful transfer mechanism or safeguard is used.

Depending on the applicable legislation and circumstances, these safeguards may include adequacy mechanisms, standard contractual arrangements, binding corporate rules or another legally recognised transfer mechanism.

International transfers from Türkiye are handled in accordance with the applicable provisions of KVKK concerning transfers of personal data abroad.

Türkiye’s rules governing international transfers changed in 2024 and now provide mechanisms including standard contracts and binding corporate rules, subject to the applicable statutory requirements.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing requested services
• Managing patient enquiries
• Maintaining appropriate business records
• Meeting legal, accounting, tax and regulatory obligations
• Handling complaints
• Establishing, exercising or defending legal claims

Different categories of personal data may be subject to different retention periods.

When personal data is no longer required and there is no legal basis for continued retention, it will be securely deleted, destroyed or anonymised in accordance with applicable requirements.

13. Data Security

We take appropriate technical and organisational measures designed to protect personal data against:

• Unauthorised access
• Unlawful processing
• Accidental loss
• Destruction
• Alteration
• Unauthorised disclosure

Depending on the relevant system and risk level, safeguards may include:

• Access controls
• User authentication
• Encryption or other security technologies where appropriate
• Secure servers and systems
• Restricted access to medical information
• Security monitoring
• Staff confidentiality requirements
• Backup and recovery procedures
• Technical and organisational cybersecurity measures

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

14. Your Data Protection Rights

Depending on your location and the data protection legislation applicable to you, you may have rights including:

• The right to obtain information about the processing of your personal data
• The right to access your personal data
• The right to request correction of inaccurate or incomplete information
• The right to request deletion or erasure where legally applicable
• The right to request restriction of processing
• The right to object to certain processing
• The right to data portability where applicable
• The right to withdraw consent where processing is based on consent
• Rights relating to certain automated decision-making activities, where applicable
• The right to lodge a complaint with a competent data protection authority

The availability and scope of these rights depend on the law applicable to the particular processing activity.

To submit a privacy-related request, please contact:

[email protected]

We may request reasonable information to verify your identity before responding to a request.

15. Rights Under Turkish KVKK

Where the Turkish Personal Data Protection Law No. 6698 applies, data subjects may exercise the rights granted under Article 11 of KVKK, subject to the conditions and limitations provided by law.

These include rights relating to:

• Learning whether personal data is being processed
• Requesting information regarding processing
• Learning the purpose of processing and whether data is used in accordance with that purpose
• Knowing third parties to whom personal data has been transferred
• Requesting correction of incomplete or inaccurate personal data
• Requesting deletion or destruction where the applicable legal conditions are satisfied
• Requesting notification of certain correction or deletion actions to relevant third parties
• Objecting to certain outcomes resulting from analysis exclusively through automated systems
• Requesting compensation where legally available for damage arising from unlawful processing

KVKK-specific requests should be submitted using an applicable method permitted under Turkish law.

16. EEA and UK Users

If you are located in the European Economic Area or the United Kingdom, GDPR or UK GDPR protections may apply depending on the circumstances and territorial scope of the relevant legislation.

Where applicable, this may include rights concerning access, rectification, erasure, restriction, objection, portability and withdrawal of consent.

You may also have the right to lodge a complaint with the data protection supervisory authority in your country.

The applicability of GDPR or UK GDPR depends on the particular processing activity and should not be interpreted as applying automatically to every interaction with Medical Tourism Turkey.

17. Children’s Personal Data

Our services are primarily intended for adults.

We do not knowingly collect personal data directly from children for marketing purposes.

Where medical tourism services concern a person under the age of 18, personal data may need to be provided by or processed with the involvement of a parent, legal guardian or other authorised representative, subject to applicable law.

We take additional care when processing children’s personal and medical information.

18. Photographs, Videos and Before-and-After Content

Patients may provide photographs or videos for the purpose of medical assessment, consultation or treatment planning.

Such materials will be processed for the relevant healthcare or coordination purpose in accordance with applicable law.

Medical photographs supplied for treatment assessment will not automatically be authorised for advertising, social media, website publication or other promotional use.

Where legally required, separate and specific consent will be obtained before identifiable patient photographs, videos, testimonials or before-and-after materials are used for promotional or marketing purposes.

19. Automated Decision-Making

Medical Tourism Turkey does not intend to make decisions producing legal or similarly significant effects on individuals solely through automated processing unless permitted by applicable law and appropriate safeguards are implemented.

Technology may be used to support administrative, communication, analytics or service-management activities, but medical decisions should be made by appropriately qualified healthcare professionals.

20. Links to Third-Party Websites

Our website may contain links to websites operated by healthcare providers, hotels, travel providers, social media platforms or other third parties.

Medical Tourism Turkey is not responsible for the privacy practices of independently operated third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

21. Data Breaches

We maintain procedures designed to identify, assess and respond to personal data security incidents.

Where a personal data breach occurs and notification is required under applicable law, we will take appropriate steps to notify the relevant authority and/or affected individuals within the legally applicable requirements.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes in our services
• Changes in data processing activities
• New technologies or service providers
• Changes in applicable legislation
• Regulatory guidance
• Changes to our security or operational practices

When material changes are made, the “Last Updated” date at the top of this Privacy Policy will be revised.

We encourage visitors to review this Privacy Policy periodically.

23. Contact Information

For questions, requests or concerns concerning this Privacy Policy or the processing of your personal data, please contact:

Medical Tourism Turkey (MTTurkey)
Operating brand of AKEL TURİZM ORGANİZASYON GÜZELLİK MERKEZİ TEKS. İTH. İHR. SAN. VE TİC. LTD. ŞTİ.

Address: Meltem Mahallesi Sakıp Sabancı Bulvarı Rixos Otel Sit. No:3B, Muratpaşa, Antalya, Türkiye

Website: www.mtturkey.com
Email: [email protected]
Tel & WhatsApp: +44 7576 574437,  +90 549 177 40 07

ANTALYA, TÜRKİYE