Privacy Policy

Men's Health Istanbul takes the confidentiality of your personal data seriously, particularly the sensitive health information you share with us. This policy explains how we handle your data under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for patients in the United Kingdom, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where the EU GDPR applies, for example to patients in Ireland, the same principles apply.

Who we are

The data controller responsible for your personal data is Men's Health Istanbul, an independent patient coordination and information platform. We answer your enquiry, coordinate your care and arrange your travel. Clinical services are provided by the licensed physicians and private hospitals you are referred to, who also keep your medical records as independent controllers under the health laws that apply to them.

Address: Acıbadem Mah. Akasya Kent A1 Blok No:195, 34718 Üsküdar, İstanbul, Türkiye
Phone: +90 530 322 90 26
Contact form: menshealthistanbul.com/contact

What data we collect

We collect only the data we need to answer your enquiry and to plan and provide your care.

Data you give us

Identity and contact details: your name, phone number, country and any other details you enter in our contact form or send us.
Health information: your medical history, symptoms, previous treatments, test results, reports and, where relevant, photographs you choose to share.
Travel and booking details: dates, flight times, passport details where needed for hotel or hospital registration, and details of any companion travelling with you.
Communications: messages and call notes when you contact us by WhatsApp, phone or video call.

Data collected automatically

Essential data: your cookie choice, stored in your own browser so the site remembers it.
Analytics and advertising data: only if you click "Accept all" in the cookie banner. See Cookies, analytics and advertising below.
Our hosting provider processes technical data such as IP addresses in server logs to deliver and secure the website.

How we collect it

Contact form: submissions are handled by Netlify Forms, provided by Netlify, Inc. (USA), which acts as our data processor and also hosts this website.
WhatsApp: if you message us on WhatsApp, your messages are also processed by WhatsApp (Meta) under its own terms and privacy policy.
Phone and video calls: we may take notes of what is discussed so your care can be planned.
In person: during consultations, tests and treatment in Istanbul.

Why we use your data and our legal basis

To answer your enquiry and give you a quote: steps taken at your request before entering into an agreement (UK GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
To assess and provide medical care: your explicit consent for the processing of health data (UK GDPR Art. 9(2)(a); KVKK Art. 6), together with the provision of health care where the law allows (UK GDPR Art. 9(2)(h)).
To arrange your travel, hotel and transfers: performance of our agreement with you.
To meet legal obligations: for example keeping medical records as required by Turkish health law (UK GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
To understand how the site is used and measure advertising: your consent, given through the cookie banner (UK GDPR Art. 6(1)(a)).

We do not sell your personal data, and we do not use your health data for marketing.

Health data

Information about your health is special category data under UK GDPR and sensitive personal data under KVKK. We process it only with your explicit consent, or where the law otherwise allows, and only for your care. Access is limited to the doctors, medical staff and patient coordinators involved in your treatment.

You can withdraw your consent at any time by contacting us. Withdrawing consent does not affect processing already carried out, and we may need to keep some records where the law requires it.

We share your data only where needed to provide our services, with your consent, or where the law requires it:

The participating physician who reviews your case, the hospital where you are treated, and the doctors and staff involved in your care. Your enquiry and reports are shared with them only to assess and plan your treatment
Hotels and transfer providers, limited to the details needed for your booking
Our service providers, acting as processors: Netlify, Inc. (website hosting and contact form) and Google (analytics and advertising, only after your consent)
Your own GP or doctor at home, only if you ask us to
Public authorities where the law requires it

International transfers

We are based in Türkiye, so information you send us from the UK, Ireland, the USA, the Gulf or elsewhere is transferred to Türkiye. Some of our service providers, including Netlify and Google, process data in the United States. Where data leaves the UK or Türkiye, we rely on the safeguards the law provides, such as the UK International Data Transfer Addendum, standard contractual clauses, or your explicit consent under KVKK Art. 9.

Cookies, analytics and advertising

Google Analytics 4, Google Tag Manager and Google Ads are loaded only after you click "Accept all" in the cookie banner. If you choose "Essential only", they are not loaded. YouTube videos on this site use youtube-nocookie.com and load only when you click to play them. Full details are in our cookie policy, and you can change your choice at any time using Cookie settings.

Even with your consent, Google Ads remarketing (ad personalisation) is switched off on this website. We use Google Ads only to measure whether an advert led to an enquiry, such as a WhatsApp message, a call or a form. We do not build advertising audiences from the treatment pages you read, and we never share the content of your enquiry or any health information with Google or other advertisers.

How long we keep it

Enquiries that do not lead to treatment: only for as long as needed to answer your enquiry and any follow-up questions
Medical records of patients we treat: for the period required by Turkish health legislation
Analytics data: according to the retention setting in Google Analytics

When data is no longer needed, it is securely deleted, destroyed or anonymised.

How we protect it

We use technical and organisational measures to protect your data, including encrypted connections (HTTPS) on this website, restricted access to health information and confidentiality obligations for everyone involved in your care. No method of transmission over the internet is completely secure, so please share only what is needed through messaging apps.

Your rights

Under UK GDPR and KVKK (Art. 11) you have the right to:

Find out whether we process your data, and receive a copy of it
Know the purpose of processing and who your data has been shared with, in Türkiye or abroad
Have inaccurate or incomplete data corrected
Have your data erased or destroyed where the conditions are met
Restrict or object to certain processing
Receive your data in a portable format where processing is based on consent or a contract
Withdraw consent at any time
Object to a decision based solely on automated processing that affects you
Claim compensation for damage caused by unlawful processing

To exercise any of these rights, contact us through the contact page or by phone on +90 530 322 90 26. We may need to confirm your identity. We aim to respond within one month under UK GDPR and within 30 days under KVKK.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to a supervisory authority:

United Kingdom: the Information Commissioner's Office (ICO), ico.org.uk
Türkiye: the Personal Data Protection Authority (KVKK Board), kvkk.gov.tr
Ireland and the EU: your local data protection authority, such as the Data Protection Commission in Ireland

Changes to this policy

We may update this policy to reflect changes in the law or in how we work. The date at the bottom of the page shows when it was last updated.

Last updated: 28 September 2026. This page is for general information and does not replace a medical consultation. Medical disclaimer.