Privacy Policy — Med World Türkiye

This Privacy Policy describes how Med World Türkiye ("we", "us") collects, uses, and shares personal information when you use our website, contact our coordination team, or use our journey portal.

Med World Türkiye is an independent health-travel coordination service. We are not a hospital, do not provide medical advice or treatment, and do not employ clinicians. Medical care is delivered by independent JCI-accredited partner hospitals and licensed Turkish-government-registered physicians. This policy covers only the personal data we process for our coordination role.

What we collect

Identity & contact: name, email, phone, country.
Trip details: specialty of interest, free-text notes.
Special-category data (only when you explicitly consent): medical reports, X-rays, lab results, photographs you upload.
Technical data: IP address, user agent, country from IP for the phone-flag default and rate-limiting.
Consent records: which version of which document you accepted, when, from which IP. Required by law.

How we use it

To respond to your enquiry and coordinate your trip.
To share your details with the relevant partner clinic for a clinical evaluation — but only with your explicit consent.
To organise travel, transfers, hotel and translation services.
To meet legal obligations (KVKK, GDPR, mandatory health-tourism insurance under Turkish law).
For aggregate, non-identifying analytics if you accept analytics cookies.

Lawful basis

For most processing, the basis is your explicit consent (KVKK Article 6/2 for special-category data; GDPR Article 9 for special categories). For some operational steps we rely on the necessity of performing the coordination contract you initiated.

Who we share with

The specific JCI-accredited partner clinic / clinician you ask us to coordinate with.
Logistics providers strictly to the extent needed (e.g. hotel, transfer driver).
Email and analytics processors operating under data-processing agreements.
Authorities if compelled by Turkish law.

We do not sell your data, and we do not share it for advertising profiling.

Retention

Consent records: kept for the legal retention period (10 years under Turkish health-tourism statute).
Trip files: kept while your case is active and for the legal retention period afterwards.
Marketing list: until you unsubscribe.

Your rights

Under KVKK Article 11 and GDPR you have the right to: access, rectify, erase, restrict the processing of, object to the processing of, and port your personal data. You may withdraw your consent at any time, without affecting the lawfulness of past processing. To exercise any right, email privacy@medworldturkiye.com.

Security

We apply technical and organisational measures including TLS in transit, AES-256 at rest, signed and HttpOnly session cookies, magic-link authentication (no passwords stored), per-IP rate limiting, role-based access control, and audit logging. See our Cookie Policy for the cookie list.

Data Controller (Veri Sorumlusu)
Med World Türkiye — Bostancı, Bağdat Cad., Kadıköy/İstanbul, Türkiye
Email: privacy@medworldturkiye.com
KVKK Notification & VERBİS registration in progress.