Privacy Policy

This privacy notice is provided by Doctorics as data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR").

Data we process

• Identity and contact: name, email, phone, country, language preference.
• Bookings and transactions: services you choose, dates, number of guests, payment status (card details are processed by the payment provider and never reach us).
• Health data (special category): health information, photos and documents you share in a quote request — processed only with your explicit consent.
• Communications: messages with providers and our support team, conversations with the AI assistant.
• Technical data: IP address, session and security logs, essential cookies.

Purposes and legal bases

• Running membership, booking and quote processes — performance of a contract.
• Payments, invoicing and statutory retention — legal obligation.
• Platform security, fraud prevention and service quality — legitimate interest.
• Sharing health data with the clinics you send your request to — explicit consent.
• Marketing emails — only if you opt in.

Transfers

We share your data only as needed to provide the service: with the providers you book or request quotes from, payment providers (iyzico, Stripe), hosting and email providers, and competent authorities. Transfers to service providers abroad (e.g. AI and payment infrastructure) are made with appropriate safeguards. We recommend not writing health details in the AI assistant chat.

Retention

We keep your data for as long as the purpose requires and as required by law, then delete or anonymise it. When you delete your account, data that we are not legally required to keep is anonymised immediately.

Your rights

You can request access, correction, deletion, restriction, portability, and object to processing. You can download your data and delete your account under My account > Privacy; for other requests please contact us.

Security

Connections are encrypted with HTTPS; health data and medical files are stored encrypted with AES-256-GCM; administrator accounts use two-step verification; all administrative actions are logged.