Home · Privacy & data protection
Legal
Privacy & Data Protection Notice
This notice explains how JFS Clinic uses the personal data you share when you visit this website, fill in a form or message us on WhatsApp, phone or email. We use it to answer your enquiry and plan your treatment, health information only with your explicit consent, and you can ask to see, correct or delete it at any time.
Who is responsible for your data
The data controller is JFS Clinic, Karşıyaka Plaza, Soğukkuyu, 1595. Sk., 35090 Bayraklı / İzmir, Türkiye · info@jfsclinic.com · +90 555 420 45 05.
We process personal data under the Turkish Personal Data Protection Law No. 6698 (KVKK). Because we offer treatment to people living in the United Kingdom and the European Union, the UK GDPR and the EU General Data Protection Regulation (GDPR) also apply when we handle their data.
What personal data we collect
- Contact and identity details you give us in the form or in messages: name, country, phone number, email address, preferred way of contact.
- Enquiry details: the treatment you are interested in, your age range, when you would like to travel and your message.
- Health information you choose to send for an assessment, such as photos, medical history, medications or previous operations. This is special category data and is handled with extra care.
- Travel and booking details once you decide to go ahead: passport details, flight times, hotel stay and payment information.
- Website usage data through cookies, only if you consent — see the cookie policy.
- Technical data our web server records for security, such as IP address, browser type and time of the request. These logs are kept for no longer than necessary for security purposes.
Please do not send health information about another person without their permission.
Purposes and legal bases
Why we use your data and on what legal basis
| Purpose | KVKK (Türkiye) | GDPR / UK GDPR |
|---|---|---|
| Answering your enquiry and preparing a quote | Art. 5(2)(c) — steps before entering into a contract | Art. 6(1)(b) — steps at your request before a contract |
| Assessing photos and health information | Art. 6 — your explicit consent; after you become a patient, also medical diagnosis and treatment by persons bound by confidentiality | Art. 9(2)(a) — explicit consent; Art. 9(2)(h) — health care |
| Organising your treatment, travel, hotel and transfers | Art. 5(2)(c) — performance of the contract | Art. 6(1)(b) — performance of the contract |
| Keeping medical and health tourism records required by law | Art. 5(2)(ç) — legal obligation | Art. 6(1)(c) and Art. 9(2)(h) |
| Website analytics and advertising measurement | Your explicit consent (cookie banner) | Art. 6(1)(a) — consent; PECR / ePrivacy consent |
| Sending news or offers | Your consent; Law No. 6563 on electronic commerce | Art. 6(1)(a) — consent; PECR |
| Keeping the website secure and handling legal claims | Art. 5(2)(e) and (f) — establishing rights; legitimate interest | Art. 6(1)(f) — legitimate interest |
You can withdraw any consent at any time; this does not affect processing that took place before you withdrew it. We do not make decisions about you based solely on automated processing.
Who receives your data
- JFS Clinic surgeons, dentists and patient coordinators who handle your enquiry or treatment.
- The hospital, hotel and transfer companies we work with, once you book — only what they need to provide their part of the service.
- Service providers that work on our behalf: website hosting, email, WhatsApp (Meta), Google and Microsoft. This covers our website hosting, email, analytics (Google, Microsoft Clarity, with your consent) and messaging (WhatsApp) providers.
- Cloudflare (Turnstile), which checks that our website forms are sent by a person and not by an automated program. It receives technical data such as your IP address and browser details; it does not receive your answers.
- Public authorities, such as the Ministry of Health, when the law requires it.
We do not sell your personal data.
Transfers outside the UK, the EU and Türkiye
JFS Clinic is based in Türkiye, so the information you send us is processed in Türkiye. Some of our service providers (for example Google, Microsoft and Meta) process data in the United States and other countries.
Transfers of personal data out of Türkiye take place only on the legal grounds set out in Article 9 of the Turkish Personal Data Protection Law No. 6698.
How long we keep your data
- Enquiries that do not lead to treatment: kept for no longer than necessary for the purpose for which they were recorded, then deleted or anonymised.
- Copies of website form submissions kept on our server as a back-up of the e-mail: deleted automatically after 12 months.
- Patient and treatment records: for the period required by Turkish health legislation.
- Accounting and invoice records: for the period required by Turkish tax and commercial law.
- Cookies: as listed in the cookie policy.
When a retention period ends, we delete, destroy or anonymise the data.
Your rights
Under Article 11 of the KVKK, and under the GDPR and UK GDPR, you can ask us to:
- tell you whether we process your data, and give you a copy of it;
- tell you why we process it, and to whom in Türkiye or abroad it has been passed;
- correct incomplete or wrong data, and tell the recipients about the correction;
- delete or anonymise it, or restrict how we use it;
- give you the data you provided in a portable format (GDPR / UK GDPR);
- stop processing based on our legitimate interests or for direct marketing;
- review a decision made solely by automated means that affects you, and compensate any damage caused by unlawful processing.
Send your request to info@jfsclinic.com or in writing to our address above. We reply free of charge within 30 days (KVKK) and within one month (GDPR / UK GDPR).
You can also complain to a supervisory authority: the Turkish Personal Data Protection Authority (kvkk.gov.tr), the UK Information Commissioner’s Office (ico.org.uk) or the data protection authority in your EU country.
If you become a patient
Before treatment you receive a separate patient information and consent form at the clinic, which covers your medical records in detail. You can read the current version on our patient data protection page.
We may update this notice. The date below shows the latest version. Last updated: 3 October 2026.
Questions about your treatment?
Tell us what you are considering and a coordinator will reply with a free, no-obligation plan. Your answers are used only to reply to you — see our privacy notice.
+90 555 420 45 05- 1 About your treatment
- 2 A bit more about you
- 3 How to reach you
- 4 Your free quote