Privacy Policy
Last updated: 2026-07-24
Op. Dr. Duygu Aksoy Estetik Cerrahi Kliniği ("the Clinic", "we") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, submit the consultation form, contact us via WhatsApp / phone / email, or use our chat assistant. We act as a data controller under Turkish Law No. 6698 (KVKK) and, where applicable, under GDPR principles.
Data Controller & Contact
- Op. Dr. Duygu Aksoy Estetik Cerrahi Kliniği
- Op. Dr. Duygu Aksoy
- Yeşilbahçe, Metin Kasapoğlu Cd. Gökhan İş Merkezi No:19 A Blok Kat 2, Muratpaşa, TR
- info@duyguaksoy.com.tr
- +905343715434
1. Information We Collect
- Information you provide: name, phone, email, WhatsApp number, procedure of interest, message/notes, photos you upload.
- Health information (special category): medical history, current concerns, medications — only when you share them with us.
- Automatically collected data: IP address, browser / device information, operating system, pages visited, referrer, session duration, approximate location (country / city), timestamps.
- Advertising & measurement data: UTM parameters, Google Click ID (gclid), Facebook Click ID (fbclid), Google Analytics client id (_ga), Meta cookies (_fbp, _fbc).
2. How We Use Your Data
- To respond to your consultation and appointment requests and contact you.
- To perform an initial medical assessment and propose suitable treatment options.
- To measure service quality, improve the website, and ensure security.
- To measure ad campaign performance and show you relevant content.
- To comply with legal obligations (health regulations, invoicing, accounting).
3. Legal Bases
- Performance of a (pre-)contract (KVKK Art. 5/2-c): your consultation / appointment request.
- Legal obligation (KVKK Art. 5/2-a): health regulations and tax.
- Legitimate interest (KVKK Art. 5/2-f): site security, fraud prevention, service improvement.
- Explicit consent (KVKK Art. 6): processing of health data and advertising / analytics cookies.
4. Sharing
- We do not sell your data. We share it only in the following cases:
- Service providers: hosting (Cloudflare, Supabase), messaging (WhatsApp / Meta), analytics & advertising (Google Analytics, Google Ads, Meta Pixel), email and SMS providers.
- Our medical consultants, accounting and legal advisors (only to the extent necessary).
- Competent public authorities (upon a lawful request).
5. International Transfers
- Some of our service providers store data outside Türkiye. Such transfers rely on your explicit consent and the safeguards in KVKK Art. 9, with appropriate security measures (TLS encryption, contractual commitments).
6. Retention
- Consultation requests and communication logs: up to 3 years from the last interaction.
- Health records: at least 20 years as required by law.
- Server & security logs: up to 2 years.
- Analytics data: up to 26 months (default Google Analytics retention).
- After these periods data is deleted, destroyed, or anonymised.
7. Security
- Data is transmitted over TLS/HTTPS and access is restricted to authorised staff. While we take physical, technical, and organisational measures, no system is 100% secure.
8. Your Rights
- Under KVKK Art. 11 (and GDPR where applicable) you have the right to access, rectification, erasure, restriction, objection, and information on recipients of your data.
- Send requests to info@duyguaksoy.com.tr. After verifying your identity we respond free of charge within 30 days.
9. Children's Privacy
- Our website is not directed to individuals under 18. We do not knowingly collect data from minors; if we become aware of such data we delete it promptly.
10. Third-Party Links
- Our site may link to third-party services (Instagram, YouTube, Facebook, Google Maps, etc.). We are not responsible for their privacy practices; please review their own policies.
11. Changes
- We may update this policy from time to time. The current version, with its update date, is always published on this page.